[Mon Nov 10 22:20:57.347147 2025] [:error] [pid 34820:tid 34832] [client 170.106.147.63:54480] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRH0yWK3qvhYIA1ghWDsfAAAAQo"]
[Mon Nov 10 22:33:25.200994 2025] [:error] [pid 34820:tid 34833] [client 43.156.109.53:35432] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRH3tWK3qvhYIA1ghWDxMgAAAQs"]
[Tue Nov 11 00:50:59.554572 2025] [proxy_fcgi:error] [pid 24103:tid 24107] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:52:00.407470 2025] [proxy_fcgi:error] [pid 24103:tid 24123] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:54:33.659413 2025] [proxy_fcgi:error] [pid 24103:tid 24115] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:59:04.144682 2025] [proxy_fcgi:error] [pid 24103:tid 24120] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:59:41.023944 2025] [:error] [pid 14120:tid 14136] [client 170.106.147.63:43128] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRIZ_ST8OKKuPaCGMt0Z5QAAAU4"]
[Tue Nov 11 01:04:33.915371 2025] [proxy_fcgi:error] [pid 24103:tid 24128] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:05:35.269557 2025] [proxy_fcgi:error] [pid 24103:tid 24127] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:06:36.127378 2025] [proxy_fcgi:error] [pid 24103:tid 24111] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:06:42.611318 2025] [:error] [pid 41825:tid 41904] [client 43.153.10.13:36594] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRIboor5hkwmQG_pQgAHMQAAAFE"]
[Tue Nov 11 01:07:37.476368 2025] [proxy_fcgi:error] [pid 24103:tid 24115] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:08:39.319368 2025] [proxy_fcgi:error] [pid 24103:tid 24117] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:09:40.178385 2025] [proxy_fcgi:error] [pid 24103:tid 24119] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:10:41.025371 2025] [proxy_fcgi:error] [pid 24103:tid 24117] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:11:41.889417 2025] [proxy_fcgi:error] [pid 24103:tid 24107] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:12:42.753363 2025] [proxy_fcgi:error] [pid 24103:tid 24115] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:13:43.601376 2025] [proxy_fcgi:error] [pid 24103:tid 24107] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:14:44.452443 2025] [proxy_fcgi:error] [pid 24103:tid 24117] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:15:45.310951 2025] [proxy_fcgi:error] [pid 24103:tid 24122] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:16:46.166401 2025] [proxy_fcgi:error] [pid 24103:tid 24108] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:17:47.015406 2025] [proxy_fcgi:error] [pid 24103:tid 24128] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:18:47.892380 2025] [proxy_fcgi:error] [pid 24103:tid 24110] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:19:48.761771 2025] [proxy_fcgi:error] [pid 24103:tid 24128] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:20:49.615519 2025] [proxy_fcgi:error] [pid 24103:tid 24126] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:21:50.476400 2025] [proxy_fcgi:error] [pid 24103:tid 24128] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:22:51.329379 2025] [proxy_fcgi:error] [pid 24103:tid 24125] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:23:52.177426 2025] [proxy_fcgi:error] [pid 24103:tid 24111] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:24:53.029412 2025] [proxy_fcgi:error] [pid 24103:tid 24129] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:25:53.877520 2025] [proxy_fcgi:error] [pid 24103:tid 24118] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:26:54.728368 2025] [proxy_fcgi:error] [pid 24103:tid 24112] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:27:55.612581 2025] [proxy_fcgi:error] [pid 24103:tid 24107] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:28:56.462956 2025] [proxy_fcgi:error] [pid 24103:tid 24109] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:29:57.310372 2025] [proxy_fcgi:error] [pid 24103:tid 24128] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:29:58.106538 2025] [:error] [pid 24103:tid 24121] [client 91.92.242.56:58567] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||emuartaustralia.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRIhFrmrGVWhZHx4njJBFwAAAg8"]
[Tue Nov 11 01:30:59.487388 2025] [proxy_fcgi:error] [pid 24103:tid 24119] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:32:00.340379 2025] [proxy_fcgi:error] [pid 24103:tid 24106] (70007)The timeout specified has expired: [client 91.92.242.56:58567] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:51:34.980317 2025] [:error] [pid 24225:tid 24237] [client 91.92.242.56:53103] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRImJp2rrdiHvhXEioV8gAAAAkQ"]
[Tue Nov 11 01:55:15.095353 2025] [:error] [pid 24225:tid 24254] [client 91.92.242.56:64192] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRInA52rrdiHvhXEioV-BgAAAlU"]
[Tue Nov 11 01:55:16.190544 2025] [:error] [pid 41816:tid 41881] [client 91.92.242.56:56083] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRInBEQR8XSNQpgkeuQbawAAABU"]
[Tue Nov 11 01:55:19.153424 2025] [:error] [pid 41825:tid 41909] [client 91.92.242.56:55664] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRInB4r5hkwmQG_pQgAaIQAAAFY"]
[Tue Nov 11 01:55:23.634530 2025] [:error] [pid 31985:tid 32012] [client 91.92.242.56:57692] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRInC5eXIbTtCYJNJFCHwQAAAQQ"]
[Tue Nov 11 01:55:24.717432 2025] [:error] [pid 31985:tid 32026] [client 91.92.242.56:59253] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRInDJeXIbTtCYJNJFCHwwAAARE"]
[Tue Nov 11 01:55:25.822058 2025] [:error] [pid 41825:tid 41905] [client 91.92.242.56:56024] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRInDYr5hkwmQG_pQgAaKAAAAFI"]
[Tue Nov 11 01:55:26.923089 2025] [:error] [pid 41978:tid 42001] [client 91.92.242.56:56876] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRInDpTXUiwDnS4PcJ9NbAAAAMc"]
[Tue Nov 11 01:55:29.745141 2025] [:error] [pid 41839:tid 41932] [client 91.92.242.56:61544] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRInETGxg5uCD9Nfh5XIhQAAAJI"]
[Tue Nov 11 01:55:30.830008 2025] [:error] [pid 24103:tid 24113] [client 91.92.242.56:58118] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRInErmrGVWhZHx4njJDcAAAAgc"]
[Tue Nov 11 05:06:25.916210 2025] [autoindex:error] [pid 43437:tid 43512] [client 196.251.85.129:65258] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 07:15:52.408072 2025] [:error] [pid 33888:tid 33903] [client 43.130.67.6:36700] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRJyKIhA0uVBNwBRvPoHGAAAAIw"]
[Tue Nov 11 08:02:53.762406 2025] [proxy_fcgi:error] [pid 20101:tid 20103] (70007)The timeout specified has expired: [client 91.92.242.56:58076] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:03:10.253793 2025] [proxy_fcgi:error] [pid 19559:tid 19577] (70007)The timeout specified has expired: [client 66.249.64.128:36319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:03:55.103385 2025] [proxy_fcgi:error] [pid 20101:tid 20120] (70007)The timeout specified has expired: [client 91.92.242.56:58060] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:06:01.985373 2025] [proxy_fcgi:error] [pid 19756:tid 19767] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:06:52.675386 2025] [proxy_fcgi:error] [pid 19559:tid 19571] (70007)The timeout specified has expired: [client 66.249.64.129:35540] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:07:02.840449 2025] [proxy_fcgi:error] [pid 19756:tid 19765] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:08:03.697368 2025] [proxy_fcgi:error] [pid 19756:tid 19781] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:09:04.553375 2025] [proxy_fcgi:error] [pid 19756:tid 19778] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:10:05.410495 2025] [proxy_fcgi:error] [pid 19756:tid 19778] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:10:16.522378 2025] [proxy_fcgi:error] [pid 33888:tid 33901] (70007)The timeout specified has expired: [client 66.249.64.130:44735] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:10:49.401393 2025] [proxy_fcgi:error] [pid 33931:tid 33958] (70007)The timeout specified has expired: [client 66.249.64.129:35663] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:11:06.267381 2025] [proxy_fcgi:error] [pid 19756:tid 19771] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:12:07.123382 2025] [proxy_fcgi:error] [pid 19756:tid 19776] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:13:07.981363 2025] [proxy_fcgi:error] [pid 19756:tid 19771] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:14:08.877371 2025] [proxy_fcgi:error] [pid 19756:tid 19776] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:15:09.733369 2025] [proxy_fcgi:error] [pid 19756:tid 19763] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:16:10.588786 2025] [proxy_fcgi:error] [pid 19756:tid 19762] (70007)The timeout specified has expired: [client 91.92.242.56:57955] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:32:13.659732 2025] [proxy_fcgi:error] [pid 20101:tid 20120] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:33:14.518380 2025] [proxy_fcgi:error] [pid 20101:tid 20103] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:34:15.389277 2025] [proxy_fcgi:error] [pid 20101:tid 20120] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:35:16.763438 2025] [proxy_fcgi:error] [pid 20101:tid 20119] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:36:17.626652 2025] [proxy_fcgi:error] [pid 20101:tid 20103] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:37:18.489527 2025] [proxy_fcgi:error] [pid 20101:tid 20121] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:38:13.306426 2025] [:error] [pid 19559:tid 19586] [client 23.162.200.48:57818] [client 23.162.200.48] ModSecurity: Access denied with code 403 (phase 2). Found 30 byte(s) in ARGS:_path outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||emuartaustralia.com.au|F|3"] [data "ARGS:_path=_controller=Symfony\\x5cComponent\\x5cYaml\\x5cInline::parse&value=!!php/object:a:1:{i:1;a:2:{i:0;O:32:\\x22Monolog\\x5cHandler\\x5cSyslogUdpHandler\\x22:1:{s:9:\\x22\\x00*\\x00socket\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;N;s:13:\\x22\\x00*\\x00bufferSize\\x22;i:-1;s:9:\\x22\\x00*\\x00buffer\\x22;a:1:{i:0;a:2:{i:0;s:2:\\x22-1\\x22;s:5:\\x22level\\x22;N;}}s:8:\\x22\\x00*\\x00level\\x22;N;s:14..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/_fragment"] [unique_id "aRKFdU2A7XQJ15MEH8CmQgAAAhc"]
[Tue Nov 11 08:38:20.753383 2025] [proxy_fcgi:error] [pid 20101:tid 20125] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:39:18.836388 2025] [proxy_fcgi:error] [pid 34002:tid 34014] (70007)The timeout specified has expired: [client 66.249.64.130:52740] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:39:21.702403 2025] [proxy_fcgi:error] [pid 20101:tid 20125] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:40:22.583711 2025] [proxy_fcgi:error] [pid 20101:tid 20117] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:41:23.491373 2025] [proxy_fcgi:error] [pid 20101:tid 20119] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:42:24.346385 2025] [proxy_fcgi:error] [pid 20101:tid 20126] (70007)The timeout specified has expired: [client 91.92.242.56:63058] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:42:25.589670 2025] [:error] [pid 20101:tid 20117] [client 91.92.242.56:63058] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||emuartaustralia.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRKGcfSZnd_J7V4i60JBgQAAAs4"]
[Tue Nov 11 10:14:10.483408 2025] [:error] [pid 53449:tid 53475] [client 43.130.34.74:54888] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRKb8tpz08j5NoUSzp-74wAAAVU"]
[Tue Nov 11 10:57:02.929782 2025] [:error] [pid 53356:tid 53403] [client 43.130.72.40:35226] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRKl_ukdmt0kzjVcUN9OhQAAAFI"]
[Tue Nov 11 14:28:43.759775 2025] [:error] [pid 59670:tid 59676] [client 154.72.160.88:11554] [client 154.72.160.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.72.160.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLXm6k2Cnts0y-hpfr45gAAAIM"]
[Tue Nov 11 14:38:20.717725 2025] [:error] [pid 53449:tid 53454] [client 45.153.34.41:37480] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRLZ3Npz08j5NoUSzp8pUgAAAUA"]
[Tue Nov 11 14:44:30.473948 2025] [:error] [pid 53356:tid 53390] [client 157.245.117.243:41796] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRLbTukdmt0kzjVcUN-dqQAAAEU"]
[Tue Nov 11 14:44:31.588947 2025] [:error] [pid 59670:tid 59694] [client 157.245.117.243:37230] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRLbT6k2Cnts0y-hpfoCbAAAAJU"]
[Tue Nov 11 14:51:27.603406 2025] [:error] [pid 53356:tid 53400] [client 154.72.160.88:11427] [client 154.72.160.88] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRLc7-kdmt0kzjVcUN-gIwAAAE8"]
[Tue Nov 11 14:53:18.139699 2025] [:error] [pid 59670:tid 59688] [client 154.72.160.88:11699] [client 154.72.160.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.72.160.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLdXqk2Cnts0y-hpfoHqgAAAI8"]
[Tue Nov 11 14:54:53.514479 2025] [:error] [pid 53414:tid 53437] [client 154.72.160.88:11675] [client 154.72.160.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.72.160.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLdvQs6pHd_Z5oc1edxGwAAARU"]
[Tue Nov 11 14:56:38.179390 2025] [:error] [pid 53449:tid 53468] [client 154.72.160.88:11747] [client 154.72.160.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.72.160.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLeJtpz08j5NoUSzp8xrwAAAU4"]
[Tue Nov 11 14:58:18.413465 2025] [:error] [pid 53355:tid 53382] [client 154.72.160.88:11420] [client 154.72.160.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.72.160.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLeioB5X5A3rMc4_nA2CgAAABg"]
[Tue Nov 11 15:15:07.461445 2025] [:error] [pid 53356:tid 53399] [client 45.153.34.41:56710] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRLie-kdmt0kzjVcUN-oRwAAAE4"]
[Tue Nov 11 17:40:40.942446 2025] [:error] [pid 43205:tid 43221] [client 157.245.117.243:35296] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRMEmL48SbhIkX6TjwNcZQAAAQ0"]
[Tue Nov 11 17:40:42.002560 2025] [:error] [pid 36673:tid 36684] [client 157.245.117.243:60688] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRMEmivASiSDHs9bkffongAAAIk"]
[Tue Nov 11 22:13:21.306561 2025] [:error] [pid 47931:tid 47953] [client 213.209.143.137:59376] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEgTWP7ptQ6Y-gz68f4wAAAVM"]
[Tue Nov 11 22:13:21.829184 2025] [:error] [pid 47860:tid 47892] [client 213.209.143.137:60547] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEgaPe6bkmJWx80CzT-AAAAEE"]
[Tue Nov 11 22:13:22.348917 2025] [:error] [pid 47860:tid 47903] [client 213.209.143.137:61782] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEgqPe6bkmJWx80CzT-wAAAEw"]
[Tue Nov 11 22:13:22.868764 2025] [:error] [pid 49628:tid 49642] [client 213.209.143.137:62945] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEgr82AgnfnwL7V2YzkgAAAIw"]
[Tue Nov 11 23:19:52.882359 2025] [:error] [pid 47860:tid 47913] [client 43.153.113.127:52394] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRNUGKPe6bkmJWx80CzrIgAAAFY"]
[Wed Nov 12 00:34:31.225052 2025] [:error] [pid 54702:tid 55033] [client 157.245.117.243:34882] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRNll4Cgou0IW-jKFfmKXQAAAZM"]
[Wed Nov 12 00:34:33.623109 2025] [:error] [pid 54700:tid 54957] [client 157.245.117.243:60100] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRNlmWB5AaOtkwsSKTr9WAAAAFQ"]
[Wed Nov 12 00:35:08.575691 2025] [:error] [pid 55206:tid 55211] [client 162.62.231.139:44904] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRNlvO_aSLXgYkIZYTIJhgAAAIM"]
[Wed Nov 12 01:22:10.687858 2025] [:error] [pid 55206:tid 55214] [client 157.245.117.243:34240] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRNwwu_aSLXgYkIZYTIbCgAAAIY"]
[Wed Nov 12 01:22:14.955408 2025] [:error] [pid 55206:tid 55216] [client 157.245.117.243:35978] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRNwxu_aSLXgYkIZYTIbEwAAAIg"]
[Wed Nov 12 04:03:59.691411 2025] [:error] [pid 57222:tid 57234] [client 157.245.117.243:45996] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aROWr2GJazH5XCcA91cMjAAAAAc"]
[Wed Nov 12 04:04:01.863957 2025] [:error] [pid 57222:tid 57237] [client 157.245.117.243:47598] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aROWsWGJazH5XCcA91cMjQAAAAo"]
[Wed Nov 12 04:17:05.217270 2025] [:error] [pid 57222:tid 57227] [client 157.245.117.243:59256] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aROZwWGJazH5XCcA91cSIQAAAAA"]
[Wed Nov 12 04:17:08.702694 2025] [:error] [pid 57222:tid 57248] [client 157.245.117.243:53170] [client 157.245.117.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aROZxGGJazH5XCcA91cSKQAAABU"]
[Wed Nov 12 04:20:48.429596 2025] [:error] [pid 57312:tid 57327] [client 196.251.66.105:56838] [client 196.251.66.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aROaoI0cuHgB17JK5qWelAAAAMo"]
[Wed Nov 12 04:21:39.929054 2025] [autoindex:error] [pid 57223:tid 57273] [client 196.251.66.105:36786] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 04:21:55.431355 2025] [autoindex:error] [pid 57312:tid 57337] [client 196.251.66.105:47048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 04:22:31.035403 2025] [autoindex:error] [pid 57312:tid 57322] [client 196.251.66.105:56512] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 12 04:22:57.491062 2025] [:error] [pid 57224:tid 57305] [client 213.209.143.137:62489] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRObIRs7oZ7imwCSdAno_wAAAJU"]
[Wed Nov 12 04:22:58.047470 2025] [:error] [pid 57312:tid 57336] [client 213.209.143.137:64163] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRObIo0cuHgB17JK5qWgVwAAANM"]
[Wed Nov 12 04:22:58.567076 2025] [:error] [pid 32959:tid 32969] [client 213.209.143.137:49442] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRObInoyrq7OJfcFnDiWYgAAAQY"]
[Wed Nov 12 07:37:09.663479 2025] [:error] [pid 57224:tid 57289] [client 106.215.162.55:6378] [client 106.215.162.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.162.55, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRPIpRs7oZ7imwCSdAkvGAAAAIU"]
2025/11/12 08:43:17 [error] 24795#24795: *235 connect() failed (111: Connection refused) while connecting to upstream, client: 106.215.162.55, server: emuartaustralia.com.au, request: "POST /xmlrpc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xmlrpc.php", host: "emuartaustralia.com.au"
2025/11/12 08:44:37 [error] 24803#24803: *539 connect() failed (111: Connection refused) while connecting to upstream, client: 106.215.162.55, server: emuartaustralia.com.au, request: "POST /xmlrpc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xmlrpc.php", host: "emuartaustralia.com.au"
2025/11/12 08:45:50 [error] 24801#24801: *1045 connect() failed (111: Connection refused) while connecting to upstream, client: 106.215.162.55, server: emuartaustralia.com.au, request: "POST /xmlrpc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xmlrpc.php", host: "emuartaustralia.com.au"
2025/11/12 08:46:57 [error] 24802#24802: *1308 connect() failed (111: Connection refused) while connecting to upstream, client: 106.215.162.55, server: emuartaustralia.com.au, request: "POST /xmlrpc.php HTTP/1.1", upstream: "http://103.4.122.14:8181/xmlrpc.php", host: "emuartaustralia.com.au"
[Wed Nov 12 17:04:18.487560 2025] [:error] [pid 60096:tid 60126] [client 206.189.19.19:48088] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/@vite/env"] [unique_id "aRRNkjmzkhCvvk8DXOyIWQAAAIA"]
[Wed Nov 12 17:04:19.455398 2025] [:error] [pid 12744:tid 12772] [client 206.189.19.19:39520] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/actuator/env"] [unique_id "aRRNk51cp_ouUvkFj0U2JQAAARg"]
[Wed Nov 12 17:04:20.336386 2025] [:error] [pid 60097:tid 60167] [client 206.189.19.19:39524] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRRNlMdT5oio_TbWpi9f8QAAAM4"]
[Wed Nov 12 17:04:21.172272 2025] [:error] [pid 12744:tid 12768] [client 206.189.19.19:39532] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/server"] [unique_id "aRRNlZ1cp_ouUvkFj0U2KAAAARQ"]
[Wed Nov 12 17:04:22.254728 2025] [:error] [pid 60097:tid 60168] [client 206.189.19.19:39536] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRRNlsdT5oio_TbWpi9f9AAAAM8"]
[Wed Nov 12 17:04:23.211311 2025] [:error] [pid 12744:tid 12766] [client 206.189.19.19:39550] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/about"] [unique_id "aRRNl51cp_ouUvkFj0U2LAAAARI"]
[Wed Nov 12 17:04:24.616414 2025] [:error] [pid 60095:tid 60102] [client 206.189.19.19:39564] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aRRNmHlw2elroagFF1oamgAAAEM"]
[Wed Nov 12 17:04:26.612138 2025] [:error] [pid 60405:tid 60415] [client 206.189.19.19:39570] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aRRNmnMGv_mlVi6mf5rh1QAAAAc"]
[Wed Nov 12 17:04:27.349600 2025] [:error] [pid 12744:tid 12767] [client 206.189.19.19:39576] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRRNm51cp_ouUvkFj0U2LgAAARM"]
[Wed Nov 12 17:04:28.190114 2025] [:error] [pid 12744:tid 12755] [client 206.189.19.19:39582] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aRRNnJ1cp_ouUvkFj0U2LwAAAQc"]
[Wed Nov 12 17:04:28.981968 2025] [:error] [pid 60096:tid 60157] [client 206.189.19.19:55164] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aRRNnDmzkhCvvk8DXOyIYQAAAJc"]
[Wed Nov 12 17:04:32.138787 2025] [:error] [pid 60405:tid 60413] [client 206.189.19.19:55178] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aRRNoHMGv_mlVi6mf5rh3QAAAAU"]
[Wed Nov 12 17:04:32.872422 2025] [:error] [pid 60405:tid 60428] [client 206.189.19.19:55192] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aRRNoHMGv_mlVi6mf5rh4gAAABQ"]
[Wed Nov 12 17:04:33.696663 2025] [:error] [pid 60095:tid 60123] [client 206.189.19.19:55196] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRRNoXlw2elroagFF1oamwAAAFg"]
[Wed Nov 12 17:04:34.751087 2025] [:error] [pid 60095:tid 60103] [client 206.189.19.19:55204] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRRNonlw2elroagFF1oanQAAAEQ"]
[Wed Nov 12 17:04:37.318439 2025] [:error] [pid 12744:tid 12757] [client 206.189.19.19:55218] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aRRNpZ1cp_ouUvkFj0U2SwAAAQk"]
[Wed Nov 12 17:58:24.564506 2025] [:error] [pid 60405:tid 60421] [client 46.101.111.185:48842] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/@vite/env"] [unique_id "aRRaQHMGv_mlVi6mf5rwKgAAAA0"]
[Wed Nov 12 17:58:25.584939 2025] [:error] [pid 60095:tid 60107] [client 46.101.111.185:48848] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/actuator/env"] [unique_id "aRRaQXlw2elroagFF1oliAAAAEg"]
[Wed Nov 12 17:58:26.414394 2025] [:error] [pid 60096:tid 60136] [client 46.101.111.185:48858] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRRaQjmzkhCvvk8DXOyUYAAAAIo"]
[Wed Nov 12 17:58:27.157566 2025] [:error] [pid 60096:tid 60140] [client 46.101.111.185:55780] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/server"] [unique_id "aRRaQzmzkhCvvk8DXOyUYgAAAI0"]
[Wed Nov 12 17:58:27.970127 2025] [:error] [pid 60096:tid 60138] [client 46.101.111.185:55794] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRRaQzmzkhCvvk8DXOyUYwAAAIw"]
[Wed Nov 12 17:58:28.692922 2025] [:error] [pid 60097:tid 60175] [client 46.101.111.185:55798] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/about"] [unique_id "aRRaRMdT5oio_TbWpi9s_wAAANY"]
[Wed Nov 12 17:58:29.412892 2025] [:error] [pid 60096:tid 60148] [client 46.101.111.185:55810] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aRRaRTmzkhCvvk8DXOyUZwAAAJI"]
[Wed Nov 12 17:58:30.171927 2025] [:error] [pid 23737:tid 23756] [client 46.101.111.185:55812] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aRRaRhQUsVVfOZWgW_WPDgAAAYc"]
[Wed Nov 12 17:58:30.896275 2025] [:error] [pid 60180:tid 60201] [client 46.101.111.185:55814] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRRaRlhgd7ccS8EZg1ozdgAAAVM"]
[Wed Nov 12 17:58:31.614420 2025] [:error] [pid 12744:tid 12760] [client 46.101.111.185:55818] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aRRaR51cp_ouUvkFj0VJSwAAAQw"]
[Wed Nov 12 17:58:32.427205 2025] [:error] [pid 60097:tid 60166] [client 46.101.111.185:55828] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aRRaSMdT5oio_TbWpi9tAgAAAM0"]
[Wed Nov 12 17:58:35.698090 2025] [:error] [pid 12744:tid 12761] [client 46.101.111.185:55846] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aRRaS51cp_ouUvkFj0VJTgAAAQ0"]
[Wed Nov 12 17:58:36.469871 2025] [:error] [pid 60096:tid 60151] [client 46.101.111.185:47804] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.env"] [unique_id "aRRaTDmzkhCvvk8DXOyUbwAAAJM"]
[Wed Nov 12 17:58:37.305184 2025] [:error] [pid 60405:tid 60426] [client 46.101.111.185:47814] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRRaTXMGv_mlVi6mf5rwMQAAABI"]
[Wed Nov 12 17:58:38.205725 2025] [:error] [pid 60405:tid 60420] [client 46.101.111.185:47816] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRRaTnMGv_mlVi6mf5rwMwAAAAw"]
[Wed Nov 12 17:58:38.987708 2025] [:error] [pid 60405:tid 60422] [client 46.101.111.185:47828] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aRRaTnMGv_mlVi6mf5rwNAAAAA4"]
[Wed Nov 12 17:58:39.883973 2025] [:error] [pid 23737:tid 23761] [client 46.101.111.185:47842] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/telescope/requests"] [unique_id "aRRaTxQUsVVfOZWgW_WPGwAAAYw"]
[Wed Nov 12 17:58:40.645592 2025] [:error] [pid 60405:tid 60423] [client 46.101.111.185:47854] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aRRaUHMGv_mlVi6mf5rwNgAAAA8"]
[Wed Nov 12 17:58:41.609486 2025] [:error] [pid 60096:tid 60155] [client 46.101.111.185:47856] [client 46.101.111.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRRaUTmzkhCvvk8DXOyUeQAAAJU"]
[Thu Nov 13 01:35:00.113269 2025] [:error] [pid 60096:tid 60138] [client 187.181.224.158:63272] [client 187.181.224.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.181.224.158, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRTFRDmzkhCvvk8DXOzr7wAAAIw"]
[Thu Nov 13 07:35:08.854123 2025] [:error] [pid 22566:tid 22577] [client 85.203.36.146:63783] [client 85.203.36.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aRUZrDfdqWaUbu3e06-05AAAAQk"]
[Thu Nov 13 10:39:22.793043 2025] [:error] [pid 62303:tid 62327] [client 43.130.14.245:47588] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRVE2r-hlFTtVrZw8jA8zgAAAJQ"]
[Thu Nov 13 16:55:30.080671 2025] [:error] [pid 6086:tid 6106] [client 43.153.48.240:45380] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRWdAn9_6CRZzjZnAe0loAAAARE"]
[Thu Nov 13 21:45:15.423192 2025] [:error] [pid 4992:tid 5009] [client 158.62.91.88:34202] [client 158.62.91.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.91.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXg6ymsutP7nusdj-B-8gAAAM0"]
[Thu Nov 13 23:07:54.777652 2025] [:error] [pid 4992:tid 5006] [client 43.167.236.228:58878] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRX0SimsutP7nusdj-CZrAAAAMo"]
[Thu Nov 13 23:51:03.776693 2025] [:error] [pid 19872:tid 19878] [client 158.62.91.88:26124] [client 158.62.91.88] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRX-Z8usrN1b6ZJ_vbtBmgAAAEE"]
[Thu Nov 13 23:52:55.773474 2025] [:error] [pid 19872:tid 19898] [client 158.62.91.88:34254] [client 158.62.91.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.91.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRX-18usrN1b6ZJ_vbtCRQAAAFU"]
[Thu Nov 13 23:54:27.768233 2025] [:error] [pid 19872:tid 19879] [client 158.62.91.88:33934] [client 158.62.91.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.91.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRX_M8usrN1b6ZJ_vbtC4QAAAEI"]
[Thu Nov 13 23:55:55.771436 2025] [:error] [pid 5086:tid 5090] [client 158.62.91.88:34122] [client 158.62.91.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.91.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRX_ix_dsYLFCHw574jSvgAAAQE"]
[Thu Nov 13 23:57:19.768864 2025] [:error] [pid 19872:tid 19889] [client 158.62.91.88:34016] [client 158.62.91.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.91.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRX_38usrN1b6ZJ_vbtD5AAAAEw"]
[Thu Nov 13 23:58:44.796575 2025] [:error] [pid 19872:tid 19897] [client 158.62.91.88:7924] [client 158.62.91.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.62.91.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRYANMusrN1b6ZJ_vbtERgAAAFQ"]
[Fri Nov 14 00:04:43.193464 2025] [:error] [pid 19872:tid 19877] [client 43.131.36.84:45974] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRYBm8usrN1b6ZJ_vbtGtgAAAEA"]
[Fri Nov 14 02:06:18.123835 2025] [:error] [pid 56586:tid 56615] [client 43.166.246.180:36850] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRYeGq7eYD3G9deYMP5P9AAAAZg"]
[Fri Nov 14 10:12:23.659698 2025] [:error] [pid 47156:tid 47238] [client 49.51.243.95:59748] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRaQB9jrQX_P-kC7M_5xVAAAAJc"]
[Fri Nov 14 16:21:32.473013 2025] [:error] [pid 16574:tid 16628] [client 182.42.104.32:32897] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRbmjP6XQqe4NqaoE9IXNAAAAJU"]
[Fri Nov 14 18:17:33.711607 2025] [:error] [pid 16671:tid 16700] [client 103.187.249.172:19522] [client 103.187.249.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.249.172, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRcBvTsoHwEAmeIzZXBa3QAAARc"]
[Fri Nov 14 18:57:47.128654 2025] [:error] [pid 16671:tid 16689] [client 103.187.249.172:46110] [client 103.187.249.172] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRcLKzsoHwEAmeIzZXBlCwAAAQw"]
[Fri Nov 14 18:59:10.791847 2025] [:error] [pid 16575:tid 16647] [client 103.187.249.172:56206] [client 103.187.249.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.249.172, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRcLfu6qT670YxigvbCTCgAAAM0"]
[Fri Nov 14 19:00:43.364305 2025] [:error] [pid 16573:tid 16591] [client 103.187.249.172:46331] [client 103.187.249.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.249.172, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRcL2yPGexfUk9FDoEKo0wAAAE0"]
[Fri Nov 14 19:01:51.843247 2025] [:error] [pid 16575:tid 16656] [client 103.187.249.172:29477] [client 103.187.249.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.249.172, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRcMH-6qT670YxigvbCTrwAAANY"]
[Fri Nov 14 19:02:53.176059 2025] [:error] [pid 16671:tid 16697] [client 103.187.249.172:8945] [client 103.187.249.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.187.249.172, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRcMXTsoHwEAmeIzZXBmugAAARQ"]
[Fri Nov 14 22:56:12.564653 2025] [:error] [pid 16709:tid 16727] [client 182.42.111.213:40815] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRdDDKNdzfVNC4oipLXAvgAAAVA"]
[Sat Nov 15 05:20:03.431215 2025] [:error] [pid 27910:tid 27945] [client 203.2.64.59:48180] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRedA46e1LusHMYkS7ZKhQAAAEQ"]
[Sat Nov 15 09:25:28.024998 2025] [:error] [pid 19959:tid 19986] [client 3.86.23.95:56436] [client 3.86.23.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||emuartaustralia.com.au|F|4"] [data "Microsoft URL"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRfWiMjejiTUP1-IawNZyQAAAZQ"]
[Sat Nov 15 10:04:37.363903 2025] [:error] [pid 19961:tid 20010] [client 49.51.166.228:55296] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRfftTar7Si-84EApVQhEQAAAdE"]
[Sat Nov 15 12:09:26.184811 2025] [:error] [pid 19961:tid 20008] [client 138.197.23.42:64546] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRf89jar7Si-84EApVQ2WQAAAc8"]
[Sat Nov 15 12:09:26.626334 2025] [:error] [pid 27997:tid 27999] [client 138.197.23.42:64713] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRf89tpja_6cDxKbxFmN_gAAAMA"]
[Sat Nov 15 12:09:27.046505 2025] [:error] [pid 20654:tid 20661] [client 138.197.23.42:64867] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRf893cS7eC8vO76_ydtowAAA4Q"]
[Sat Nov 15 12:09:27.468407 2025] [:error] [pid 22613:tid 22629] [client 138.197.23.42:65025] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRf89yoyR3cDsIRGPRl8cQAAAg4"]
[Sat Nov 15 12:09:27.888282 2025] [:error] [pid 27911:tid 27985] [client 138.197.23.42:65205] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRf898GzUdrhGBIfiKQmLgAAAJE"]
[Sat Nov 15 18:11:50.960022 2025] [:error] [pid 27911:tid 27982] [client 125.75.66.97:52574] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRhR5sGzUdrhGBIfiKRjQAAAAI4"]
[Sat Nov 15 23:04:34.304582 2025] [:error] [pid 19959:tid 19981] [client 49.51.183.15:59422] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRiWgsjejiTUP1-IawMEkAAAAY8"]
[Sun Nov 16 05:11:26.359608 2025] [:error] [pid 52471:tid 52546] [client 152.42.200.79:50122] [client 152.42.200.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/sftp-config.json"] [unique_id "aRjsftmWsFzjR5CEgDWcWgAAAI4"]
[Sun Nov 16 07:05:45.777771 2025] [:error] [pid 20556:tid 20558] [client 170.106.180.139:59636] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRkHSUkbyEckbWtBcCKysgAAAQA"]
[Sun Nov 16 07:27:29.343646 2025] [:error] [pid 52470:tid 52511] [client 182.42.110.255:47358] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRkMYUg9mXF2ZFFtj1XmUAAAAEY"]
[Sun Nov 16 10:04:22.357695 2025] [:error] [pid 52470:tid 52510] [client 43.130.14.245:56256] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRkxJkg9mXF2ZFFtj1UIQAAAAEU"]
[Sun Nov 16 13:47:21.422802 2025] [:error] [pid 34301:tid 34311] [client 43.167.232.38:54564] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRllabGPoZwUGuFNREuUewAAAoc"]
[Sun Nov 16 14:05:34.867565 2025] [:error] [pid 34165:tid 34197] [client 119.96.24.54:34076] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRlprnhG2YTKEjXchwn7SwAAAcI"]
[Sun Nov 16 16:16:05.636236 2025] [:error] [pid 34227:tid 34253] [client 142.93.0.66:54178] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.emuartaustralia.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRmIRX108zGLYs9eMuggjgAAAhg"]
[Sun Nov 16 16:16:08.373892 2025] [:error] [pid 34165:tid 34197] [client 142.93.0.66:52966] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRmISHhG2YTKEjXchwkQUAAAAcI"]
[Sun Nov 16 16:16:08.997266 2025] [:error] [pid 20556:tid 20573] [client 142.93.0.66:52970] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/about"] [unique_id "aRmISEkbyEckbWtBcCJkiAAAAQ8"]
[Sun Nov 16 16:16:09.622966 2025] [:error] [pid 20556:tid 20568] [client 142.93.0.66:52972] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aRmISUkbyEckbWtBcCJkiQAAAQo"]
[Sun Nov 16 16:16:10.260170 2025] [:error] [pid 34271:tid 34297] [client 142.93.0.66:52982] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aRmISkNmlZhoZZV1BUChJgAAAlg"]
[Sun Nov 16 16:16:10.880892 2025] [:error] [pid 34271:tid 34283] [client 142.93.0.66:52996] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRmISkNmlZhoZZV1BUChJwAAAko"]
[Sun Nov 16 16:16:11.503438 2025] [:error] [pid 34227:tid 34230] [client 142.93.0.66:53004] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aRmIS3108zGLYs9eMuggkgAAAgE"]
[Sun Nov 16 16:16:12.125289 2025] [:error] [pid 34301:tid 34317] [client 142.93.0.66:53012] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aRmITLGPoZwUGuFNREuyEQAAAo0"]
[Sun Nov 16 16:16:12.745649 2025] [:error] [pid 34164:tid 34184] [client 142.93.0.66:53018] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/_all_dbs"] [unique_id "aRmITO93ccBCLD8-Q4YxCQAAAZA"]
[Sun Nov 16 16:16:13.372997 2025] [:error] [pid 34227:tid 34241] [client 142.93.0.66:53032] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aRmITX108zGLYs9eMugglAAAAgw"]
[Sun Nov 16 16:16:13.993452 2025] [:error] [pid 52469:tid 52480] [client 142.93.0.66:53040] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.env"] [unique_id "aRmITU6HaXpHeEZ98Z2vHgAAAAM"]
[Sun Nov 16 16:16:14.615386 2025] [:error] [pid 34133:tid 34138] [client 142.93.0.66:53044] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aRmITvSAB3iwXVRY0gF8dwAAAUM"]
[Sun Nov 16 16:16:15.236337 2025] [:error] [pid 34271:tid 34274] [client 142.93.0.66:53050] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRmIT0NmlZhoZZV1BUChKgAAAkE"]
[Sun Nov 16 16:16:15.863910 2025] [:error] [pid 52471:tid 52549] [client 142.93.0.66:53058] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aRmIT9mWsFzjR5CEgDU4ugAAAJE"]
[Sun Nov 16 16:16:16.511695 2025] [:error] [pid 34165:tid 34207] [client 142.93.0.66:53072] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/telescope/requests"] [unique_id "aRmIUHhG2YTKEjXchwkQVQAAAcw"]
[Sun Nov 16 16:16:17.182630 2025] [:error] [pid 20556:tid 20581] [client 142.93.0.66:58828] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aRmIUUkbyEckbWtBcCJkjwAAARc"]
[Sun Nov 16 16:16:17.803366 2025] [:error] [pid 34271:tid 34279] [client 142.93.0.66:58840] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRmIUUNmlZhoZZV1BUChLQAAAkY"]
[Sun Nov 16 18:40:22.798300 2025] [autoindex:error] [pid 52469:tid 52487] [client 155.94.163.116:50541] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 20:58:19.794474 2025] [:error] [pid 34301:tid 34324] [client 182.44.67.97:36855] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRnKa7GPoZwUGuFNREvn6gAAApQ"]
[Mon Nov 17 03:53:05.152241 2025] [:error] [pid 22121:tid 22207] [client 172.192.58.120:57858] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRoroYDNkZrNzRIDGTpt_wAAAI8"]
[Mon Nov 17 03:53:07.327925 2025] [:error] [pid 22221:tid 22226] [client 172.192.58.120:55364] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRoro_CFqDj-hUBD3dtWqgAAAMM"]
[Mon Nov 17 03:53:09.884731 2025] [:error] [pid 22221:tid 22240] [client 172.192.58.120:50917] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRorpfCFqDj-hUBD3dtWtQAAANE"]
[Mon Nov 17 03:53:15.351600 2025] [:error] [pid 22121:tid 22214] [client 172.192.58.120:43375] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRorq4DNkZrNzRIDGTpuCwAAAJY"]
[Mon Nov 17 03:53:17.036031 2025] [:error] [pid 22221:tid 22231] [client 172.192.58.120:55376] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aRorrfCFqDj-hUBD3dtWwwAAAMg"]
[Mon Nov 17 03:53:19.911460 2025] [:error] [pid 22120:tid 22175] [client 172.192.58.120:55390] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aRorrxsBi3ZkVixbtKEkOgAAAE0"]
[Mon Nov 17 03:53:24.518658 2025] [:error] [pid 22121:tid 22211] [client 172.192.58.120:50921] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aRortIDNkZrNzRIDGTpuKAAAAJM"]
[Mon Nov 17 03:53:25.455080 2025] [:error] [pid 22221:tid 22233] [client 172.192.58.120:50910] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aRortfCFqDj-hUBD3dtW3gAAAMo"]
[Mon Nov 17 03:53:27.621141 2025] [:error] [pid 22221:tid 22233] [client 172.192.58.120:43343] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless2.php"] [unique_id "aRort_CFqDj-hUBD3dtW5wAAAMo"]
[Mon Nov 17 03:53:30.131867 2025] [:error] [pid 22221:tid 22246] [client 172.192.58.120:46475] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless2.php"] [unique_id "aRoruvCFqDj-hUBD3dtW9QAAANc"]
[Mon Nov 17 03:53:31.301394 2025] [:error] [pid 22221:tid 22229] [client 172.192.58.120:57884] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless2.php"] [unique_id "aRoru_CFqDj-hUBD3dtW_AAAAMY"]
[Mon Nov 17 03:53:33.083604 2025] [:error] [pid 22221:tid 22228] [client 172.192.58.120:55397] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless2.php"] [unique_id "aRorvfCFqDj-hUBD3dtXAQAAAMU"]
[Mon Nov 17 03:53:35.519121 2025] [:error] [pid 22121:tid 22190] [client 172.192.58.120:50904] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRorv4DNkZrNzRIDGTpuOAAAAIA"]
[Mon Nov 17 03:53:37.658765 2025] [:error] [pid 22221:tid 22223] [client 172.192.58.120:57887] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRorwfCFqDj-hUBD3dtXDQAAAMA"]
[Mon Nov 17 03:53:39.716736 2025] [:error] [pid 22120:tid 22176] [client 172.192.58.120:43338] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRorwxsBi3ZkVixbtKEkaQAAAE4"]
[Mon Nov 17 03:53:51.254785 2025] [:error] [pid 22121:tid 22200] [client 172.192.58.120:43391] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/build.php"] [unique_id "aRorz4DNkZrNzRIDGTpuWgAAAIk"]
[Mon Nov 17 03:53:54.844208 2025] [:error] [pid 22120:tid 22178] [client 172.192.58.120:50901] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/build.php"] [unique_id "aRor0hsBi3ZkVixbtKEkeQAAAFA"]
[Mon Nov 17 03:53:57.779994 2025] [:error] [pid 22120:tid 22161] [client 172.192.58.120:54441] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/build.php"] [unique_id "aRor1RsBi3ZkVixbtKEkfAAAAEE"]
[Mon Nov 17 03:53:59.994874 2025] [:error] [pid 22221:tid 22231] [client 172.192.58.120:54427] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/build.php"] [unique_id "aRor1_CFqDj-hUBD3dtXQwAAAMg"]
[Mon Nov 17 03:54:01.550492 2025] [:error] [pid 22221:tid 22243] [client 172.192.58.120:57905] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/chosen.php"] [unique_id "aRor2fCFqDj-hUBD3dtXRgAAANQ"]
[Mon Nov 17 03:54:26.941397 2025] [:error] [pid 22119:tid 22145] [client 172.192.58.120:54439] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRor8rz1NqnOFENhRLx8nAAAAA4"]
[Mon Nov 17 03:54:28.830050 2025] [:error] [pid 22221:tid 22223] [client 172.192.58.120:46486] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRor9PCFqDj-hUBD3dtXqgAAAMA"]
[Mon Nov 17 03:54:30.373155 2025] [:error] [pid 22121:tid 22200] [client 172.192.58.120:46473] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRor9oDNkZrNzRIDGTpuigAAAIk"]
[Mon Nov 17 03:54:31.791301 2025] [:error] [pid 22221:tid 22235] [client 172.192.58.120:54416] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRor9_CFqDj-hUBD3dtXswAAAMw"]
[Mon Nov 17 03:54:34.467373 2025] [:error] [pid 22121:tid 22203] [client 172.192.58.120:46470] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file7.php"] [unique_id "aRor-oDNkZrNzRIDGTpujQAAAIw"]
[Mon Nov 17 03:54:36.202504 2025] [:error] [pid 22221:tid 22224] [client 172.192.58.120:57867] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file7.php"] [unique_id "aRor_PCFqDj-hUBD3dtXwQAAAME"]
[Mon Nov 17 03:54:40.061954 2025] [:error] [pid 22221:tid 22223] [client 172.192.58.120:57911] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file7.php"] [unique_id "aRosAPCFqDj-hUBD3dtXzAAAAMA"]
[Mon Nov 17 03:54:40.965069 2025] [:error] [pid 22119:tid 22130] [client 172.192.58.120:54456] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file7.php"] [unique_id "aRosALz1NqnOFENhRLx8ogAAAAA"]
[Mon Nov 17 03:54:44.088413 2025] [:error] [pid 22121:tid 22202] [client 172.192.58.120:54426] [client 172.192.58.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/fm.php"] [unique_id "aRosBIDNkZrNzRIDGTpulQAAAIs"]
[Mon Nov 17 03:54:46.701984 2025] [:error] [pid 22121:tid 22199] [client 172.192.58.120:46471] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRosBoDNkZrNzRIDGTpunAAAAIg"]
[Mon Nov 17 03:54:50.149754 2025] [:error] [pid 22120:tid 22181] [client 172.192.58.120:57878] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRosChsBi3ZkVixbtKEknQAAAFM"]
[Mon Nov 17 03:54:52.051984 2025] [:error] [pid 22221:tid 22240] [client 172.192.58.120:43333] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRosDPCFqDj-hUBD3dtX2QAAANE"]
[Mon Nov 17 03:54:53.584703 2025] [:error] [pid 22221:tid 22232] [client 172.192.58.120:46514] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRosDfCFqDj-hUBD3dtX3AAAAMk"]
[Mon Nov 17 03:54:56.825184 2025] [:error] [pid 22119:tid 22155] [client 172.192.58.120:54451] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gmo.php"] [unique_id "aRosELz1NqnOFENhRLx8rgAAABY"]
[Mon Nov 17 03:54:58.939658 2025] [:error] [pid 22121:tid 22212] [client 172.192.58.120:50880] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gmo.php"] [unique_id "aRosEoDNkZrNzRIDGTputAAAAJQ"]
[Mon Nov 17 03:55:01.031671 2025] [:error] [pid 22120:tid 22176] [client 172.192.58.120:57880] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gmo.php"] [unique_id "aRosFRsBi3ZkVixbtKEkqAAAAE4"]
[Mon Nov 17 03:55:03.679844 2025] [:error] [pid 22121:tid 22191] [client 172.192.58.120:57860] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gmo.php"] [unique_id "aRosF4DNkZrNzRIDGTputwAAAIE"]
[Mon Nov 17 03:55:07.237728 2025] [:error] [pid 22119:tid 22148] [client 172.192.58.120:54444] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/golden.php"] [unique_id "aRosG7z1NqnOFENhRLx8sQAAABA"]
[Mon Nov 17 03:55:07.995070 2025] [:error] [pid 22120:tid 22172] [client 172.192.58.120:43339] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/golden.php"] [unique_id "aRosGxsBi3ZkVixbtKEkqgAAAEs"]
[Mon Nov 17 03:55:09.157762 2025] [:error] [pid 22121:tid 22201] [client 172.192.58.120:43374] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/golden.php"] [unique_id "aRosHYDNkZrNzRIDGTpuuwAAAIo"]
[Mon Nov 17 03:55:10.708560 2025] [:error] [pid 22120:tid 22171] [client 172.192.58.120:57870] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/golden.php"] [unique_id "aRosHhsBi3ZkVixbtKEkqwAAAEo"]
[Mon Nov 17 03:55:14.340653 2025] [:error] [pid 22119:tid 22131] [client 172.192.58.120:43360] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/goods.php"] [unique_id "aRosIrz1NqnOFENhRLx8tAAAAAE"]
[Mon Nov 17 03:55:18.429344 2025] [:error] [pid 22119:tid 22155] [client 172.192.58.120:57869] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/goods.php"] [unique_id "aRosJrz1NqnOFENhRLx8uQAAABY"]
[Mon Nov 17 03:55:21.378011 2025] [:error] [pid 22221:tid 22235] [client 172.192.58.120:43373] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/goods.php"] [unique_id "aRosKfCFqDj-hUBD3dtX6QAAAMw"]
[Mon Nov 17 03:55:23.200683 2025] [:error] [pid 22119:tid 22152] [client 172.192.58.120:43330] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/goods.php"] [unique_id "aRosK7z1NqnOFENhRLx8wQAAABQ"]
[Mon Nov 17 03:55:24.980782 2025] [:error] [pid 22221:tid 22225] [client 172.192.58.120:49939] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/index.php"] [unique_id "aRosLPCFqDj-hUBD3dtX7QAAAMI"]
[Mon Nov 17 03:55:50.234369 2025] [:error] [pid 22119:tid 22147] [client 172.192.58.120:55416] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRosRrz1NqnOFENhRLx87gAAAA8"]
[Mon Nov 17 03:55:52.289709 2025] [:error] [pid 22121:tid 22208] [client 172.192.58.120:54425] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRosSIDNkZrNzRIDGTpu8AAAAJA"]
[Mon Nov 17 03:55:54.634683 2025] [:error] [pid 22121:tid 22212] [client 172.192.58.120:50924] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRosSoDNkZrNzRIDGTpu9gAAAJQ"]
[Mon Nov 17 03:56:00.331584 2025] [:error] [pid 22221:tid 22245] [client 172.192.58.120:43386] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRosUPCFqDj-hUBD3dtYQAAAANY"]
[Mon Nov 17 03:56:01.176525 2025] [:error] [pid 22119:tid 22130] [client 172.192.58.120:57893] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/past.php"] [unique_id "aRosUbz1NqnOFENhRLx8_gAAAAA"]
[Mon Nov 17 03:56:08.477762 2025] [:error] [pid 22121:tid 22202] [client 172.192.58.120:49938] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/past.php"] [unique_id "aRosWIDNkZrNzRIDGTpvEwAAAIs"]
[Mon Nov 17 03:56:13.118928 2025] [:error] [pid 22121:tid 22192] [client 172.192.58.120:54446] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/past.php"] [unique_id "aRosXYDNkZrNzRIDGTpvHgAAAII"]
[Mon Nov 17 03:56:17.746707 2025] [:error] [pid 22119:tid 22142] [client 172.192.58.120:54428] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pepe.php"] [unique_id "aRosYbz1NqnOFENhRLx9DQAAAAs"]
[Mon Nov 17 03:56:21.821443 2025] [:error] [pid 22121:tid 22197] [client 172.192.58.120:54412] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pepe.php"] [unique_id "aRosZYDNkZrNzRIDGTpvMgAAAIY"]
[Mon Nov 17 03:56:23.934488 2025] [:error] [pid 22119:tid 22150] [client 172.192.58.120:57866] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pepe.php"] [unique_id "aRosZ7z1NqnOFENhRLx9EgAAABI"]
[Mon Nov 17 03:56:27.406693 2025] [:error] [pid 22120:tid 22182] [client 172.192.58.120:46497] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pepe.php"] [unique_id "aRosaxsBi3ZkVixbtKElGwAAAFQ"]
[Mon Nov 17 03:56:31.239009 2025] [:error] [pid 22221:tid 22223] [client 172.192.58.120:43367] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pp.php"] [unique_id "aRosb_CFqDj-hUBD3dtYbwAAAMA"]
[Mon Nov 17 03:56:34.421491 2025] [:error] [pid 22221:tid 22233] [client 172.192.58.120:50920] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pp.php"] [unique_id "aRoscvCFqDj-hUBD3dtYeAAAAMo"]
[Mon Nov 17 03:56:37.116375 2025] [:error] [pid 22119:tid 22152] [client 172.192.58.120:57877] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pp.php"] [unique_id "aRosdbz1NqnOFENhRLx9GwAAABQ"]
[Mon Nov 17 03:56:42.703917 2025] [:error] [pid 22121:tid 22203] [client 172.192.58.120:57909] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/re.php"] [unique_id "aRoseoDNkZrNzRIDGTpvRwAAAIw"]
[Mon Nov 17 03:56:53.463699 2025] [:error] [pid 22221:tid 22230] [client 172.192.58.120:50898] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRoshfCFqDj-hUBD3dtYmwAAAMc"]
[Mon Nov 17 03:56:55.186730 2025] [:error] [pid 22119:tid 22153] [client 172.192.58.120:46527] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRosh7z1NqnOFENhRLx9KQAAABU"]
[Mon Nov 17 03:56:57.410933 2025] [:error] [pid 22119:tid 22132] [client 172.192.58.120:54449] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRosibz1NqnOFENhRLx9KwAAAAI"]
[Mon Nov 17 03:56:58.483785 2025] [:error] [pid 22221:tid 22243] [client 172.192.58.120:46474] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRosivCFqDj-hUBD3dtYogAAANQ"]
[Mon Nov 17 03:56:59.567686 2025] [:error] [pid 22120:tid 22187] [client 172.192.58.120:50935] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-blog.php"] [unique_id "aRosixsBi3ZkVixbtKElNwAAAFg"]
[Mon Nov 17 03:57:01.568430 2025] [:error] [pid 22121:tid 22195] [client 172.192.58.120:57902] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-blog.php"] [unique_id "aRosjYDNkZrNzRIDGTpvWwAAAIQ"]
[Mon Nov 17 03:57:04.109148 2025] [:error] [pid 22221:tid 22247] [client 172.192.58.120:43347] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-blog.php"] [unique_id "aRoskPCFqDj-hUBD3dtYpwAAANg"]
[Mon Nov 17 03:57:07.837594 2025] [:error] [pid 22221:tid 22247] [client 172.192.58.120:46489] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-blog.php"] [unique_id "aRosk_CFqDj-hUBD3dtYswAAANg"]
[Mon Nov 17 03:57:14.166007 2025] [:error] [pid 22221:tid 22245] [client 172.192.58.120:57903] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-class.php"] [unique_id "aRosmvCFqDj-hUBD3dtYvwAAANY"]
[Mon Nov 17 03:57:47.465006 2025] [:error] [pid 22119:tid 22149] [client 172.192.58.120:43358] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-logiin.php"] [unique_id "aRosu7z1NqnOFENhRLx9YgAAABE"]
[Mon Nov 17 03:57:48.992202 2025] [:error] [pid 22121:tid 22210] [client 172.192.58.120:43361] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-logiin.php"] [unique_id "aRosvIDNkZrNzRIDGTpvkAAAAJI"]
[Mon Nov 17 03:57:50.192016 2025] [:error] [pid 22119:tid 22147] [client 172.192.58.120:57894] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-logiin.php"] [unique_id "aRosvrz1NqnOFENhRLx9aQAAAA8"]
[Mon Nov 17 03:57:58.475160 2025] [:error] [pid 22119:tid 22157] [client 172.192.58.120:43380] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsa.php"] [unique_id "aRosxrz1NqnOFENhRLx9dQAAABg"]
[Mon Nov 17 03:58:00.563282 2025] [:error] [pid 22121:tid 22209] [client 172.192.58.120:57886] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsa.php"] [unique_id "aRosyIDNkZrNzRIDGTpvpAAAAJE"]
[Mon Nov 17 03:58:04.743661 2025] [:error] [pid 22221:tid 22246] [client 172.192.58.120:50912] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsa.php"] [unique_id "aRoszPCFqDj-hUBD3dtZLwAAANc"]
[Mon Nov 17 03:58:29.522737 2025] [:error] [pid 22221:tid 22230] [client 172.192.58.120:42871] [client 172.192.58.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xl.php"] [unique_id "aRos5fCFqDj-hUBD3dtZVwAAAMc"]
[Mon Nov 17 05:12:02.243355 2025] [:error] [pid 39451:tid 39521] [client 43.157.43.147:54108] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRo-IufgkqXTS0SO3fBibAAAAI0"]
[Mon Nov 17 09:25:45.354214 2025] [:error] [pid 65302:tid 65311] [client 43.130.34.74:45884] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRp5mQPMSx2v85r8y7x2EgAAAUc"]
[Mon Nov 17 10:41:16.215291 2025] [:error] [pid 39451:tid 39524] [client 202.65.234.213:45906] [client 202.65.234.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.65.234.213, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqLTOfgkqXTS0SO3fDHuQAAAJA"]
[Mon Nov 17 10:45:30.494560 2025] [:error] [pid 15150:tid 15167] [client 202.65.234.213:13467] [client 202.65.234.213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRqMSn2DEo_rcsFuxj0t8gAAAY8"]
[Mon Nov 17 10:47:19.970719 2025] [:error] [pid 39451:tid 39530] [client 202.65.234.213:12288] [client 202.65.234.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.65.234.213, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqMt-fgkqXTS0SO3fDJogAAAJY"]
[Mon Nov 17 10:49:15.505946 2025] [:error] [pid 65302:tid 65327] [client 202.65.234.213:55001] [client 202.65.234.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.65.234.213, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqNKwPMSx2v85r8y7yatgAAAVc"]
[Mon Nov 17 10:50:57.193472 2025] [:error] [pid 39449:tid 39455] [client 202.65.234.213:4316] [client 202.65.234.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.65.234.213, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqNkaUCymTA3MDfzLPtAAAAAAE"]
[Mon Nov 17 10:52:36.829763 2025] [:error] [pid 15150:tid 15161] [client 202.65.234.213:57346] [client 202.65.234.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.65.234.213, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqN9H2DEo_rcsFuxj0vkAAAAYk"]
[Mon Nov 17 18:00:19.594363 2025] [:error] [pid 31419:tid 31438] [client 185.65.134.227:54574] [client 185.65.134.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aRryMwHQ5Sbp7elmDZh_VQAAApE"]
[Mon Nov 17 18:00:19.604546 2025] [:error] [pid 31419:tid 31434] [client 185.65.134.227:54592] [client 185.65.134.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aRryMwHQ5Sbp7elmDZh_VgAAAo0"]
[Mon Nov 17 20:05:07.524206 2025] [:error] [pid 32753:tid 32768] [client 43.135.148.92:37624] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRsPc06YNqI5vkht922FNgAAA8w"]
[Mon Nov 17 20:41:48.177939 2025] [:error] [pid 30801:tid 30806] [client 43.157.188.74:50844] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRsYDDbGAU49DhMTBD71yQAAAkM"]
[Mon Nov 17 22:10:22.031679 2025] [:error] [pid 31419:tid 31434] [client 43.135.185.59:46430] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRsszgHQ5Sbp7elmDZiskQAAAo0"]
[Mon Nov 17 23:38:52.191534 2025] [:error] [pid 15888:tid 15891] [client 113.219.218.197:37228] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRtBjAjAdDTBm4W3qW1QyQAAAcA"]
[Tue Nov 18 00:29:17.442846 2025] [:error] [pid 40793:tid 40867] [client 51.57.73.118:42981] [client 51.57.73.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.57.73.118, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRtNXQzccxeNeH-NUVgW8QAAAFE"], referer: https://www.google.co.uk/
[Tue Nov 18 00:29:45.669185 2025] [:error] [pid 40793:tid 40851] [client 51.57.73.118:42981] [client 51.57.73.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/filemanager.php"] [unique_id "aRtNeQzccxeNeH-NUVgXHgAAAEE"], referer: https://www.yahoo.com/
[Tue Nov 18 00:30:19.323453 2025] [autoindex:error] [pid 39189:tid 39215] [client 51.57.73.118:42946] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:21.380183 2025] [autoindex:error] [pid 39189:tid 39212] [client 51.57.73.118:42946] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:21.686816 2025] [:error] [pid 39189:tid 39203] [client 51.57.73.118:42946] [client 51.57.73.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRtNnZJJLi753QwyqGzAHAAAAIo"], referer: https://www.google.com/
[Tue Nov 18 00:30:26.530279 2025] [autoindex:error] [pid 40553:tid 40576] [client 51.57.73.118:43004] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:30.565536 2025] [autoindex:error] [pid 40553:tid 40585] [client 51.57.73.118:43004] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:30.734250 2025] [autoindex:error] [pid 40553:tid 40574] [client 51.57.73.118:43004] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:44.769481 2025] [autoindex:error] [pid 40553:tid 40569] [client 51.57.73.118:43004] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:44.935243 2025] [autoindex:error] [pid 40553:tid 40578] [client 51.57.73.118:43004] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 18 00:30:45.128187 2025] [autoindex:error] [pid 40553:tid 40579] [client 51.57.73.118:43004] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 18 00:30:45.448280 2025] [:error] [pid 40553:tid 40586] [client 51.57.73.118:43004] [client 51.57.73.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRtNtduLE1BqoX0RcsLW5AAAABE"], referer: https://www.bing.com/
[Tue Nov 18 00:30:46.667383 2025] [autoindex:error] [pid 40562:tid 40636] [client 51.57.73.118:42894] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 18 00:30:46.877426 2025] [autoindex:error] [pid 40562:tid 40630] [client 51.57.73.118:42894] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Nov 18 00:30:47.068117 2025] [autoindex:error] [pid 40562:tid 40637] [client 51.57.73.118:42894] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 18 08:13:05.561481 2025] [:error] [pid 61391:tid 61416] [client 170.106.192.3:41264] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRu6EYwXIKmhlnkP3-d5OAAAABA"]
[Tue Nov 18 12:17:53.988642 2025] [:error] [pid 44470:tid 44481] [client 125.75.66.97:59851] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRvzcTv-RLYfULjlgDZOtAAAAEY"]
[Tue Nov 18 17:33:25.391789 2025] [:error] [pid 44560:tid 44576] [client 84.247.191.22:54550] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/"] [unique_id "aRw9ZQnbP7etF3q5-5uCKgAAAMU"], referer: binance.com
[Tue Nov 18 18:05:49.384128 2025] [:error] [pid 1387:tid 1403] [client 43.135.144.126:44602] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRxE_UzBvalKyx3hMvVgdgAAAAo"]
[Tue Nov 18 19:36:13.725959 2025] [:error] [pid 44472:tid 44552] [client 49.51.72.76:38148] [client 49.51.72.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRxaLYKhGwkiLjv8BQwECwAAAVU"]
[Tue Nov 18 21:37:30.264595 2025] [:error] [pid 57578:tid 57585] [client 45.134.79.103:53638] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRx2mj9_jVUQm7Io75MLsQAAAIU"]
[Tue Nov 18 21:37:30.922641 2025] [:error] [pid 44471:tid 44526] [client 45.134.79.103:65423] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRx2mu_6m0bQO14XwtOC0AAAARY"]
[Tue Nov 18 21:37:31.583177 2025] [:error] [pid 57578:tid 57587] [client 45.134.79.103:55159] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mz9_jVUQm7Io75MLywAAAIc"]
[Tue Nov 18 23:05:02.345342 2025] [:error] [pid 1387:tid 1402] [client 43.135.144.81:49982] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRyLHkzBvalKyx3hMvW1bwAAAAk"]
[Tue Nov 18 23:47:34.019918 2025] [:error] [pid 44471:tid 44521] [client 106.222.200.238:17833] [client 106.222.200.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.200.238, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRyVFu_6m0bQO14XwtOmEQAAARE"]
[Wed Nov 19 00:29:16.143960 2025] [:error] [pid 3052:tid 3140] [client 48.218.59.7:29766] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kki.php"] [unique_id "aRye3FNM6bOMTTuJnz1YrAAAAMs"]
[Wed Nov 19 00:29:20.267878 2025] [:error] [pid 44063:tid 44134] [client 48.218.59.7:49081] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kki.php"] [unique_id "aRye4EVOSC7H33BBqQ3R2wAAAJE"]
[Wed Nov 19 00:29:23.777510 2025] [:error] [pid 43880:tid 43888] [client 48.218.59.7:49077] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kki.php"] [unique_id "aRye4-1q1HNbKyNr9SZGqgAAAEM"]
[Wed Nov 19 00:29:24.689016 2025] [:error] [pid 44063:tid 44140] [client 48.218.59.7:49065] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kki.php"] [unique_id "aRye5EVOSC7H33BBqQ3R7AAAAJc"]
[Wed Nov 19 00:29:26.394654 2025] [:error] [pid 43881:tid 43920] [client 48.218.59.7:49069] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js.php"] [unique_id "aRye5n_TrIND5buvEye9kAAAAUc"]
[Wed Nov 19 00:29:27.538356 2025] [:error] [pid 3052:tid 3149] [client 48.218.59.7:49063] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js.php"] [unique_id "aRye51NM6bOMTTuJnz1YygAAANQ"]
[Wed Nov 19 00:29:30.887736 2025] [:error] [pid 43882:tid 43964] [client 48.218.59.7:29774] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js.php"] [unique_id "aRye6t5CQQLff3maRMLMfQAAABg"]
[Wed Nov 19 00:29:32.307099 2025] [:error] [pid 43882:tid 43955] [client 48.218.59.7:49068] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js.php"] [unique_id "aRye7N5CQQLff3maRMLMhAAAAA8"]
[Wed Nov 19 00:29:36.977278 2025] [:error] [pid 44063:tid 44121] [client 48.218.59.7:49067] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/view.php"] [unique_id "aRye8EVOSC7H33BBqQ3SDgAAAIQ"]
[Wed Nov 19 00:29:39.084190 2025] [:error] [pid 44063:tid 44141] [client 48.218.59.7:29768] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/view.php"] [unique_id "aRye80VOSC7H33BBqQ3SFAAAAJg"]
[Wed Nov 19 00:29:41.631196 2025] [:error] [pid 44063:tid 44125] [client 48.218.59.7:49032] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/view.php"] [unique_id "aRye9UVOSC7H33BBqQ3SKQAAAIg"]
[Wed Nov 19 00:29:42.467129 2025] [:error] [pid 43882:tid 43957] [client 48.218.59.7:49027] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/view.php"] [unique_id "aRye9t5CQQLff3maRMLMkwAAABE"]
[Wed Nov 19 00:29:45.082980 2025] [:error] [pid 3052:tid 3148] [client 48.218.59.7:29775] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wso.php"] [unique_id "aRye-VNM6bOMTTuJnz1ZCAAAANM"]
[Wed Nov 19 00:30:01.316476 2025] [:error] [pid 43882:tid 43952] [client 48.218.59.7:49072] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sid3.php"] [unique_id "aRyfCd5CQQLff3maRMLMpwAAAAw"]
[Wed Nov 19 00:30:03.955362 2025] [:error] [pid 43880:tid 43885] [client 48.218.59.7:49055] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sid3.php"] [unique_id "aRyfC-1q1HNbKyNr9SZG8AAAAEA"]
[Wed Nov 19 00:30:06.527881 2025] [:error] [pid 44063:tid 44132] [client 48.218.59.7:49042] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sid3.php"] [unique_id "aRyfDkVOSC7H33BBqQ3SRQAAAI8"]
[Wed Nov 19 00:30:09.576833 2025] [:error] [pid 44063:tid 44138] [client 48.218.59.7:30686] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sid3.php"] [unique_id "aRyfEUVOSC7H33BBqQ3SSwAAAJU"]
[Wed Nov 19 00:30:11.087500 2025] [:error] [pid 43881:tid 43916] [client 48.218.59.7:29786] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mans.php"] [unique_id "aRyfE3_TrIND5buvEye9xgAAAUM"]
[Wed Nov 19 00:30:13.766542 2025] [:error] [pid 43880:tid 43898] [client 48.218.59.7:49064] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mans.php"] [unique_id "aRyfFe1q1HNbKyNr9SZHAgAAAE0"]
[Wed Nov 19 00:30:38.492786 2025] [:error] [pid 3052:tid 3137] [client 48.218.59.7:49071] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsd.php"] [unique_id "aRyfLlNM6bOMTTuJnz1ZfgAAAMg"]
[Wed Nov 19 00:30:39.959817 2025] [:error] [pid 43882:tid 43942] [client 48.218.59.7:49026] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsd.php"] [unique_id "aRyfL95CQQLff3maRMLM7QAAAAI"]
[Wed Nov 19 00:30:44.476038 2025] [:error] [pid 3052:tid 3132] [client 48.218.59.7:49062] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsd.php"] [unique_id "aRyfNFNM6bOMTTuJnz1ZhgAAAMM"]
[Wed Nov 19 00:30:45.329220 2025] [:error] [pid 44063:tid 44140] [client 48.218.59.7:49039] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wsd.php"] [unique_id "aRyfNUVOSC7H33BBqQ3SjwAAAJc"]
[Wed Nov 19 00:30:47.133359 2025] [:error] [pid 3052:tid 3135] [client 48.218.59.7:49037] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aRyfN1NM6bOMTTuJnz1ZigAAAMY"]
[Wed Nov 19 00:30:49.400541 2025] [:error] [pid 3052:tid 3150] [client 48.218.59.7:49051] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aRyfOVNM6bOMTTuJnz1ZjwAAANU"]
[Wed Nov 19 00:30:55.644201 2025] [:error] [pid 3052:tid 3150] [client 48.218.59.7:29769] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aRyfP1NM6bOMTTuJnz1ZoQAAANU"]
[Wed Nov 19 00:30:56.915046 2025] [:error] [pid 43882:tid 43958] [client 48.218.59.7:49070] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aRyfQN5CQQLff3maRMLNEwAAABI"]
[Wed Nov 19 00:31:06.196489 2025] [:error] [pid 44063:tid 44138] [client 48.218.59.7:29779] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an7.php"] [unique_id "aRyfSkVOSC7H33BBqQ3S1QAAAJU"]
[Wed Nov 19 00:31:07.017498 2025] [:error] [pid 43881:tid 43936] [client 48.218.59.7:49031] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an7.php"] [unique_id "aRyfS3_TrIND5buvEye-KgAAAVc"]
[Wed Nov 19 00:31:08.750006 2025] [:error] [pid 43881:tid 43918] [client 48.218.59.7:49079] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an7.php"] [unique_id "aRyfTH_TrIND5buvEye-LgAAAUU"]
[Wed Nov 19 00:31:14.129717 2025] [:error] [pid 43880:tid 43886] [client 48.218.59.7:49044] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs7.php"] [unique_id "aRyfUu1q1HNbKyNr9SZHiwAAAEE"]
[Wed Nov 19 00:31:16.562506 2025] [:error] [pid 43882:tid 43960] [client 48.218.59.7:29793] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs7.php"] [unique_id "aRyfVN5CQQLff3maRMLNRwAAABQ"]
[Wed Nov 19 00:31:20.731833 2025] [:error] [pid 3052:tid 3150] [client 48.218.59.7:49034] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs7.php"] [unique_id "aRyfWFNM6bOMTTuJnz1aPgAAANU"]
[Wed Nov 19 00:31:23.100064 2025] [:error] [pid 43880:tid 43909] [client 48.218.59.7:49047] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs7.php"] [unique_id "aRyfW-1q1HNbKyNr9SZHpgAAAFg"]
[Wed Nov 19 00:31:24.691703 2025] [:error] [pid 3052:tid 3128] [client 48.218.59.7:29770] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRyfXFNM6bOMTTuJnz1aTwAAAMA"]
[Wed Nov 19 00:31:26.601571 2025] [:error] [pid 43880:tid 43892] [client 48.218.59.7:29791] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRyfXu1q1HNbKyNr9SZHrgAAAEc"]
[Wed Nov 19 00:31:27.790249 2025] [:error] [pid 43881:tid 43930] [client 48.218.59.7:49038] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRyfX3_TrIND5buvEye-WAAAAVE"]
[Wed Nov 19 00:31:29.377191 2025] [:error] [pid 44063:tid 44127] [client 48.218.59.7:49078] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRyfYUVOSC7H33BBqQ3TFAAAAIo"]
[Wed Nov 19 00:31:33.948128 2025] [:error] [pid 43881:tid 43922] [client 48.218.59.7:29773] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/icon.php"] [unique_id "aRyfZX_TrIND5buvEye-XgAAAUk"]
[Wed Nov 19 00:32:00.020333 2025] [:error] [pid 43881:tid 43919] [client 48.218.59.7:29792] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-good.php"] [unique_id "aRyfgH_TrIND5buvEye-jgAAAUY"]
[Wed Nov 19 00:32:00.747292 2025] [:error] [pid 3052:tid 3140] [client 48.218.59.7:29822] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-good.php"] [unique_id "aRyfgFNM6bOMTTuJnz1anAAAAMs"]
[Wed Nov 19 00:32:02.952983 2025] [:error] [pid 44063:tid 44122] [client 48.218.59.7:30664] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-good.php"] [unique_id "aRyfgkVOSC7H33BBqQ3TSgAAAIU"]
[Wed Nov 19 00:32:05.237991 2025] [:error] [pid 44063:tid 44117] [client 48.218.59.7:29767] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-good.php"] [unique_id "aRyfhUVOSC7H33BBqQ3TTwAAAIA"]
[Wed Nov 19 00:32:05.907303 2025] [:error] [pid 43881:tid 43924] [client 48.218.59.7:49086] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/rrr.php"] [unique_id "aRyfhX_TrIND5buvEye-lwAAAUs"]
[Wed Nov 19 00:32:07.912607 2025] [:error] [pid 3052:tid 3141] [client 48.218.59.7:29785] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/rrr.php"] [unique_id "aRyfh1NM6bOMTTuJnz1arAAAAMw"]
[Wed Nov 19 00:32:13.234396 2025] [:error] [pid 43880:tid 43889] [client 48.218.59.7:49033] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/rrr.php"] [unique_id "aRyfje1q1HNbKyNr9SZH_QAAAEQ"]
[Wed Nov 19 00:32:26.089896 2025] [:error] [pid 3052:tid 3136] [client 48.218.59.7:29783] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/tj.php"] [unique_id "aRyfmlNM6bOMTTuJnz1axwAAAMc"]
[Wed Nov 19 00:32:28.959921 2025] [:error] [pid 43880:tid 43895] [client 48.218.59.7:49024] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/tj.php"] [unique_id "aRyfnO1q1HNbKyNr9SZIDwAAAEo"]
[Wed Nov 19 00:32:33.865284 2025] [:error] [pid 43882:tid 43963] [client 48.218.59.7:29778] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/tj.php"] [unique_id "aRyfod5CQQLff3maRMLNtQAAABc"]
[Wed Nov 19 00:32:34.682388 2025] [:error] [pid 3052:tid 3146] [client 48.218.59.7:49040] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/tj.php"] [unique_id "aRyfolNM6bOMTTuJnz1a4QAAANE"]
[Wed Nov 19 00:32:35.629228 2025] [:error] [pid 43881:tid 43919] [client 48.218.59.7:29788] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vansec.php"] [unique_id "aRyfo3_TrIND5buvEye-twAAAUY"]
[Wed Nov 19 00:32:38.095325 2025] [:error] [pid 44063:tid 44128] [client 48.218.59.7:29823] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vansec.php"] [unique_id "aRyfpkVOSC7H33BBqQ3TkgAAAIs"]
[Wed Nov 19 00:32:40.661981 2025] [:error] [pid 43882:tid 43947] [client 48.218.59.7:29802] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vansec.php"] [unique_id "aRyfqN5CQQLff3maRMLNvAAAAAc"]
[Wed Nov 19 00:32:43.075201 2025] [:error] [pid 43882:tid 43959] [client 48.218.59.7:49028] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vansec.php"] [unique_id "aRyfq95CQQLff3maRMLNvwAAABM"]
[Wed Nov 19 00:32:44.593880 2025] [:error] [pid 43882:tid 43945] [client 48.218.59.7:49029] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRyfrN5CQQLff3maRMLNwwAAAAU"]
[Wed Nov 19 00:32:45.835107 2025] [:error] [pid 43881:tid 43937] [client 48.218.59.7:29800] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRyfrX_TrIND5buvEye-wgAAAVg"]
[Wed Nov 19 00:32:47.305415 2025] [:error] [pid 43882:tid 43957] [client 48.218.59.7:49048] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRyfr95CQQLff3maRMLNyQAAABE"]
[Wed Nov 19 00:32:48.850280 2025] [:error] [pid 3052:tid 3135] [client 48.218.59.7:30703] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRyfsFNM6bOMTTuJnz1a9wAAAMY"]
[Wed Nov 19 00:32:50.083627 2025] [:error] [pid 44063:tid 44124] [client 48.218.59.7:49059] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ss.php"] [unique_id "aRyfskVOSC7H33BBqQ3TnQAAAIc"]
[Wed Nov 19 00:32:56.082955 2025] [:error] [pid 44063:tid 44120] [client 48.218.59.7:49036] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ss.php"] [unique_id "aRyfuEVOSC7H33BBqQ3TowAAAIM"]
[Wed Nov 19 00:33:20.537718 2025] [:error] [pid 44063:tid 44119] [client 48.218.59.7:49053] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww.php"] [unique_id "aRyf0EVOSC7H33BBqQ3T6AAAAII"]
[Wed Nov 19 00:33:29.719178 2025] [:error] [pid 43882:tid 43954] [client 48.218.59.7:30690] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww.php"] [unique_id "aRyf2d5CQQLff3maRMLOAgAAAA4"]
[Wed Nov 19 00:33:33.742045 2025] [:error] [pid 43881:tid 43916] [client 48.218.59.7:29766] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww.php"] [unique_id "aRyf3X_TrIND5buvEye_GAAAAUM"]
[Wed Nov 19 00:33:35.206922 2025] [:error] [pid 3052:tid 3148] [client 48.218.59.7:29799] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww.php"] [unique_id "aRyf31NM6bOMTTuJnz1bpQAAANM"]
[Wed Nov 19 00:33:44.063797 2025] [:error] [pid 43881:tid 43927] [client 48.218.59.7:29797] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/raw.php"] [unique_id "aRyf6H_TrIND5buvEye_MQAAAU4"]
[Wed Nov 19 00:33:46.933022 2025] [:error] [pid 43882:tid 43954] [client 48.218.59.7:29815] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/raw.php"] [unique_id "aRyf6t5CQQLff3maRMLOKQAAAA4"]
[Wed Nov 19 00:33:48.899832 2025] [:error] [pid 43880:tid 43902] [client 48.218.59.7:49082] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/raw.php"] [unique_id "aRyf7O1q1HNbKyNr9SZIkgAAAFE"]
[Wed Nov 19 00:33:50.212476 2025] [:error] [pid 43882:tid 43952] [client 48.218.59.7:29810] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/raw.php"] [unique_id "aRyf7t5CQQLff3maRMLOLgAAAAw"]
[Wed Nov 19 00:33:50.773034 2025] [:error] [pid 43880:tid 43889] [client 48.218.59.7:29771] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mah.php"] [unique_id "aRyf7u1q1HNbKyNr9SZImwAAAEQ"]
[Wed Nov 19 00:33:53.972291 2025] [:error] [pid 44063:tid 44122] [client 48.218.59.7:29772] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mah.php"] [unique_id "aRyf8UVOSC7H33BBqQ3UVwAAAIU"]
[Wed Nov 19 00:33:56.215261 2025] [:error] [pid 43882:tid 43943] [client 48.218.59.7:29775] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mah.php"] [unique_id "aRyf9N5CQQLff3maRMLOMgAAAAM"]
[Wed Nov 19 00:33:59.285285 2025] [:error] [pid 3052:tid 3141] [client 48.218.59.7:30681] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mah.php"] [unique_id "aRyf91NM6bOMTTuJnz1b3wAAAMw"]
[Wed Nov 19 00:34:01.795607 2025] [:error] [pid 44063:tid 44137] [client 48.218.59.7:29790] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/p.php"] [unique_id "aRyf-UVOSC7H33BBqQ3UZwAAAJQ"]
[Wed Nov 19 00:34:13.848793 2025] [:error] [pid 43880:tid 43888] [client 48.218.59.7:30676] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/p.php"] [unique_id "aRygBe1q1HNbKyNr9SZIrAAAAEM"]
[Wed Nov 19 00:34:35.482723 2025] [:error] [pid 44063:tid 44130] [client 48.218.59.7:30706] [client 48.218.59.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/fm.php"] [unique_id "aRygG0VOSC7H33BBqQ3UtAAAAI0"]
[Wed Nov 19 00:34:59.394886 2025] [:error] [pid 43881:tid 43921] [client 48.218.59.7:49084] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRygM3_TrIND5buvEye_mQAAAUg"]
[Wed Nov 19 00:35:00.623143 2025] [:error] [pid 43881:tid 43937] [client 48.218.59.7:49081] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRygNH_TrIND5buvEye_nQAAAVg"]
[Wed Nov 19 00:35:02.828881 2025] [:error] [pid 43881:tid 43928] [client 48.218.59.7:49074] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRygNn_TrIND5buvEye_pAAAAU8"]
[Wed Nov 19 00:35:04.114774 2025] [:error] [pid 43881:tid 43923] [client 48.218.59.7:49062] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRygOH_TrIND5buvEye_pQAAAUo"]
[Wed Nov 19 00:35:13.308063 2025] [:error] [pid 44063:tid 44119] [client 48.218.59.7:30659] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/g7y.php"] [unique_id "aRygQUVOSC7H33BBqQ3U7gAAAII"]
[Wed Nov 19 00:35:18.438155 2025] [:error] [pid 43880:tid 43896] [client 48.218.59.7:49076] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/g7y.php"] [unique_id "aRygRu1q1HNbKyNr9SZJDQAAAEs"]
[Wed Nov 19 00:35:22.036885 2025] [:error] [pid 44063:tid 44132] [client 48.218.59.7:49069] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ok.php"] [unique_id "aRygSkVOSC7H33BBqQ3VAQAAAI8"]
[Wed Nov 19 00:35:26.875806 2025] [:error] [pid 44063:tid 44124] [client 48.218.59.7:49058] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ok.php"] [unique_id "aRygTkVOSC7H33BBqQ3VCwAAAIc"]
[Wed Nov 19 00:35:28.750964 2025] [:error] [pid 44063:tid 44133] [client 48.218.59.7:29762] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ok.php"] [unique_id "aRygUEVOSC7H33BBqQ3VDgAAAJA"]
[Wed Nov 19 00:35:30.197607 2025] [:error] [pid 44063:tid 44125] [client 48.218.59.7:49065] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ok.php"] [unique_id "aRygUkVOSC7H33BBqQ3VEAAAAIg"]
[Wed Nov 19 00:35:33.248362 2025] [:error] [pid 43882:tid 43948] [client 48.218.59.7:49037] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRygVd5CQQLff3maRMLOwQAAAAg"]
[Wed Nov 19 00:35:37.085449 2025] [:error] [pid 3052:tid 3152] [client 48.218.59.7:29764] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRygWVNM6bOMTTuJnz1cowAAANc"]
[Wed Nov 19 00:35:37.909716 2025] [:error] [pid 43881:tid 43914] [client 48.218.59.7:30689] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRygWX_TrIND5buvEye_zgAAAUE"]
[Wed Nov 19 00:35:40.299128 2025] [:error] [pid 44063:tid 44141] [client 48.218.59.7:29761] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRygXEVOSC7H33BBqQ3VKAAAAJg"]
[Wed Nov 19 00:35:41.216627 2025] [:error] [pid 44063:tid 44120] [client 48.218.59.7:49051] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/moon.php"] [unique_id "aRygXUVOSC7H33BBqQ3VKgAAAIM"]
[Wed Nov 19 00:35:46.377346 2025] [:error] [pid 43880:tid 43891] [client 48.218.59.7:49083] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/moon.php"] [unique_id "aRygYu1q1HNbKyNr9SZJPgAAAEY"]
[Wed Nov 19 00:35:52.167036 2025] [:error] [pid 43882:tid 43944] [client 48.218.59.7:30645] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/moon.php"] [unique_id "aRygaN5CQQLff3maRMLO2gAAAAQ"]
[Wed Nov 19 00:35:53.985893 2025] [:error] [pid 3052:tid 3140] [client 48.218.59.7:29779] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/moon.php"] [unique_id "aRygaVNM6bOMTTuJnz1cuwAAAMs"]
[Wed Nov 19 00:35:55.419560 2025] [:error] [pid 3052:tid 3134] [client 48.218.59.7:49064] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wio.php"] [unique_id "aRyga1NM6bOMTTuJnz1cvQAAAMU"]
[Wed Nov 19 00:35:56.976030 2025] [:error] [pid 3052:tid 3138] [client 48.218.59.7:49031] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wio.php"] [unique_id "aRygbFNM6bOMTTuJnz1cyAAAAMk"]
[Wed Nov 19 00:36:24.052867 2025] [:error] [pid 3052:tid 3129] [client 48.218.59.7:49060] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp670.php"] [unique_id "aRygiFNM6bOMTTuJnz1dEgAAAME"]
[Wed Nov 19 00:36:26.166756 2025] [:error] [pid 44063:tid 44141] [client 48.218.59.7:49033] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp670.php"] [unique_id "aRygikVOSC7H33BBqQ3VpgAAAJg"]
[Wed Nov 19 00:36:27.878464 2025] [:error] [pid 43881:tid 43918] [client 48.218.59.7:49079] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp670.php"] [unique_id "aRygi3_TrIND5buvEyfAGQAAAUU"]
[Wed Nov 19 00:36:29.202605 2025] [:error] [pid 44063:tid 44128] [client 48.218.59.7:49077] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp670.php"] [unique_id "aRygjUVOSC7H33BBqQ3VrgAAAIs"]
[Wed Nov 19 00:36:31.942746 2025] [:error] [pid 3052:tid 3148] [client 48.218.59.7:49030] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Okxob.php"] [unique_id "aRygj1NM6bOMTTuJnz1dLgAAANM"]
[Wed Nov 19 00:36:33.539718 2025] [:error] [pid 44063:tid 44127] [client 48.218.59.7:49068] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Okxob.php"] [unique_id "aRygkUVOSC7H33BBqQ3VuQAAAIo"]
[Wed Nov 19 00:36:35.211070 2025] [:error] [pid 43880:tid 43904] [client 48.218.59.7:30684] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Okxob.php"] [unique_id "aRygk-1q1HNbKyNr9SZJoQAAAFM"]
[Wed Nov 19 00:36:38.460812 2025] [:error] [pid 44063:tid 44131] [client 48.218.59.7:49070] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Okxob.php"] [unique_id "aRyglkVOSC7H33BBqQ3VxQAAAI4"]
[Wed Nov 19 00:36:42.749231 2025] [:error] [pid 43880:tid 43904] [client 48.218.59.7:29798] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Sanskrit.php"] [unique_id "aRygmu1q1HNbKyNr9SZJsAAAAFM"]
[Wed Nov 19 00:36:45.484635 2025] [:error] [pid 3052:tid 3139] [client 48.218.59.7:30675] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Sanskrit.php"] [unique_id "aRygnVNM6bOMTTuJnz1dUQAAAMo"]
[Wed Nov 19 00:36:46.527753 2025] [:error] [pid 43881:tid 43916] [client 48.218.59.7:29784] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Sanskrit.php"] [unique_id "aRygnn_TrIND5buvEyfAMQAAAUM"]
[Wed Nov 19 00:36:47.756861 2025] [:error] [pid 43882:tid 43964] [client 48.218.59.7:29787] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Sanskrit.php"] [unique_id "aRygn95CQQLff3maRMLPNAAAABg"]
[Wed Nov 19 00:36:48.926273 2025] [:error] [pid 3052:tid 3137] [client 48.218.59.7:49073] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jq.php"] [unique_id "aRygoFNM6bOMTTuJnz1dXgAAAMg"]
[Wed Nov 19 00:36:50.372080 2025] [:error] [pid 43882:tid 43941] [client 48.218.59.7:49024] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jq.php"] [unique_id "aRygot5CQQLff3maRMLPOgAAAAE"]
[Wed Nov 19 00:36:51.357140 2025] [:error] [pid 3052:tid 3135] [client 48.218.59.7:29781] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jq.php"] [unique_id "aRygo1NM6bOMTTuJnz1dZAAAAMY"]
[Wed Nov 19 00:36:53.107250 2025] [:error] [pid 43880:tid 43902] [client 48.218.59.7:30680] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jq.php"] [unique_id "aRygpe1q1HNbKyNr9SZJzgAAAFE"]
[Wed Nov 19 00:36:55.173784 2025] [:error] [pid 3052:tid 3129] [client 48.218.59.7:49087] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/x7.php"] [unique_id "aRygp1NM6bOMTTuJnz1dawAAAME"]
[Wed Nov 19 00:36:57.639897 2025] [:error] [pid 43881:tid 43930] [client 48.218.59.7:49056] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/x7.php"] [unique_id "aRygqX_TrIND5buvEyfARQAAAVE"]
[Wed Nov 19 00:36:58.657191 2025] [:error] [pid 43882:tid 43961] [client 48.218.59.7:49071] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/x7.php"] [unique_id "aRygqt5CQQLff3maRMLPRgAAABU"]
[Wed Nov 19 00:37:01.173820 2025] [:error] [pid 3052:tid 3147] [client 48.218.59.7:49028] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/x7.php"] [unique_id "aRygrVNM6bOMTTuJnz1dfQAAANI"]
[Wed Nov 19 00:37:04.774916 2025] [:error] [pid 3052:tid 3129] [client 48.218.59.7:29782] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zex.php"] [unique_id "aRygsFNM6bOMTTuJnz1diQAAAME"]
[Wed Nov 19 00:37:07.849622 2025] [:error] [pid 43881:tid 43929] [client 48.218.59.7:29795] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zex.php"] [unique_id "aRygs3_TrIND5buvEyfATQAAAVA"]
[Wed Nov 19 00:37:11.545014 2025] [:error] [pid 43880:tid 43891] [client 48.218.59.7:29778] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zex.php"] [unique_id "aRygt-1q1HNbKyNr9SZJ5AAAAEY"]
[Wed Nov 19 00:37:14.371640 2025] [:error] [pid 43882:tid 43958] [client 48.218.59.7:29769] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zex.php"] [unique_id "aRygut5CQQLff3maRMLPUgAAABI"]
[Wed Nov 19 00:37:17.901687 2025] [:error] [pid 43880:tid 43908] [client 48.218.59.7:29773] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zxin.php"] [unique_id "aRygve1q1HNbKyNr9SZJ7gAAAFc"]
[Wed Nov 19 00:37:19.832454 2025] [:error] [pid 43880:tid 43892] [client 48.218.59.7:49029] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zxin.php"] [unique_id "aRygv-1q1HNbKyNr9SZJ9AAAAEc"]
[Wed Nov 19 00:37:45.497634 2025] [:error] [pid 43881:tid 43917] [client 48.218.59.7:30666] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ex.php"] [unique_id "aRyg2X_TrIND5buvEyfAjwAAAUQ"]
[Wed Nov 19 00:37:46.299272 2025] [:error] [pid 43881:tid 43920] [client 48.218.59.7:49075] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ex.php"] [unique_id "aRyg2n_TrIND5buvEyfAkQAAAUc"]
[Wed Nov 19 00:37:52.105635 2025] [:error] [pid 3052:tid 3150] [client 48.218.59.7:30662] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ex.php"] [unique_id "aRyg4FNM6bOMTTuJnz1d_gAAANU"]
[Wed Nov 19 00:37:54.058975 2025] [:error] [pid 3052:tid 3139] [client 48.218.59.7:49032] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ex.php"] [unique_id "aRyg4lNM6bOMTTuJnz1eAgAAAMo"]
[Wed Nov 19 00:37:57.186968 2025] [:error] [pid 43882:tid 43943] [client 48.218.59.7:49039] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock1.php"] [unique_id "aRyg5d5CQQLff3maRMLPkgAAAAM"]
[Wed Nov 19 00:38:02.824226 2025] [:error] [pid 43880:tid 43896] [client 48.218.59.7:29806] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock1.php"] [unique_id "aRyg6u1q1HNbKyNr9SZKUQAAAEs"]
[Wed Nov 19 00:38:05.261008 2025] [:error] [pid 3052:tid 3136] [client 48.218.59.7:29771] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock1.php"] [unique_id "aRyg7VNM6bOMTTuJnz1eFwAAAMc"]
[Wed Nov 19 00:38:08.730338 2025] [:error] [pid 3052:tid 3146] [client 48.218.59.7:29808] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock1.php"] [unique_id "aRyg8FNM6bOMTTuJnz1eHgAAANE"]
[Wed Nov 19 00:38:09.500537 2025] [:error] [pid 3052:tid 3136] [client 48.218.59.7:30630] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mini.php"] [unique_id "aRyg8VNM6bOMTTuJnz1eJAAAAMc"]
[Wed Nov 19 00:38:10.684928 2025] [:error] [pid 43881:tid 43916] [client 48.218.59.7:49052] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mini.php"] [unique_id "aRyg8n_TrIND5buvEyfBFQAAAUM"]
[Wed Nov 19 00:38:14.364331 2025] [:error] [pid 3052:tid 3148] [client 48.218.59.7:49085] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mini.php"] [unique_id "aRyg9lNM6bOMTTuJnz1eNAAAANM"]
[Wed Nov 19 00:38:16.571672 2025] [:error] [pid 43882:tid 43959] [client 48.218.59.7:49054] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mini.php"] [unique_id "aRyg-N5CQQLff3maRMLP4QAAABM"]
[Wed Nov 19 00:38:21.186490 2025] [:error] [pid 3052:tid 3148] [client 48.218.59.7:29823] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ups.php"] [unique_id "aRyg_VNM6bOMTTuJnz1eRgAAANM"]
[Wed Nov 19 00:38:23.338898 2025] [:error] [pid 3052:tid 3131] [client 48.218.59.7:29770] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ups.php"] [unique_id "aRyg_1NM6bOMTTuJnz1eSwAAAMI"]
[Wed Nov 19 00:38:24.937169 2025] [:error] [pid 3052:tid 3137] [client 48.218.59.7:29785] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ups.php"] [unique_id "aRyhAFNM6bOMTTuJnz1eUQAAAMg"]
[Wed Nov 19 00:38:25.871515 2025] [:error] [pid 43881:tid 43923] [client 48.218.59.7:49046] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ups.php"] [unique_id "aRyhAX_TrIND5buvEyfBMQAAAUo"]
[Wed Nov 19 00:38:31.763690 2025] [:error] [pid 3052:tid 3137] [client 48.218.59.7:49082] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bes.php"] [unique_id "aRyhB1NM6bOMTTuJnz1eWwAAAMg"]
[Wed Nov 19 00:38:33.860840 2025] [:error] [pid 3052:tid 3139] [client 48.218.59.7:49027] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bes.php"] [unique_id "aRyhCVNM6bOMTTuJnz1eXwAAAMo"]
[Wed Nov 19 00:38:34.809113 2025] [:error] [pid 43881:tid 43925] [client 48.218.59.7:29800] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bes.php"] [unique_id "aRyhCn_TrIND5buvEyfBPgAAAUw"]
[Wed Nov 19 00:38:37.072432 2025] [:error] [pid 43880:tid 43901] [client 48.218.59.7:49086] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bes.php"] [unique_id "aRyhDe1q1HNbKyNr9SZKiwAAAFA"]
[Wed Nov 19 00:38:40.496747 2025] [:error] [pid 43881:tid 43916] [client 48.218.59.7:49057] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-swa.php"] [unique_id "aRyhEH_TrIND5buvEyfBRgAAAUM"]
[Wed Nov 19 00:38:41.698678 2025] [:error] [pid 43881:tid 43925] [client 48.218.59.7:49050] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-swa.php"] [unique_id "aRyhEX_TrIND5buvEyfBSAAAAUw"]
[Wed Nov 19 00:39:13.502430 2025] [:error] [pid 3052:tid 3147] [client 48.218.59.7:29794] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aua.php"] [unique_id "aRyhMVNM6bOMTTuJnz1ewQAAANI"]
[Wed Nov 19 00:39:14.444888 2025] [:error] [pid 43881:tid 43926] [client 48.218.59.7:49025] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aua.php"] [unique_id "aRyhMn_TrIND5buvEyfBeQAAAU0"]
[Wed Nov 19 00:39:16.447418 2025] [:error] [pid 43880:tid 43891] [client 48.218.59.7:29822] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aua.php"] [unique_id "aRyhNO1q1HNbKyNr9SZKvgAAAEY"]
[Wed Nov 19 00:39:17.951500 2025] [:error] [pid 44063:tid 44140] [client 48.218.59.7:49047] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aua.php"] [unique_id "aRyhNUVOSC7H33BBqQ3W4AAAAJc"]
[Wed Nov 19 00:39:21.015668 2025] [:error] [pid 3052:tid 3143] [client 48.218.59.7:29780] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRyhOVNM6bOMTTuJnz1ezAAAAM4"]
[Wed Nov 19 00:39:21.434642 2025] [:error] [pid 43880:tid 43906] [client 48.218.59.7:29804] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRyhOe1q1HNbKyNr9SZKxgAAAFU"]
[Wed Nov 19 00:39:22.415826 2025] [:error] [pid 44063:tid 44131] [client 48.218.59.7:29797] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRyhOkVOSC7H33BBqQ3W6wAAAI4"]
[Wed Nov 19 00:39:25.422598 2025] [:error] [pid 3052:tid 3147] [client 48.218.59.7:30674] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRyhPVNM6bOMTTuJnz1e0gAAANI"]
[Wed Nov 19 00:39:29.036868 2025] [:error] [pid 43882:tid 43948] [client 48.218.59.7:49062] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/great.php"] [unique_id "aRyhQd5CQQLff3maRMLQRwAAAAg"]
[Wed Nov 19 00:39:30.486197 2025] [:error] [pid 3052:tid 3153] [client 48.218.59.7:49041] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/great.php"] [unique_id "aRyhQlNM6bOMTTuJnz1e2wAAANg"]
[Wed Nov 19 00:39:33.408620 2025] [:error] [pid 43882:tid 43947] [client 48.218.59.7:29812] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/great.php"] [unique_id "aRyhRd5CQQLff3maRMLQWAAAAAc"]
[Wed Nov 19 00:39:36.912810 2025] [:error] [pid 3052:tid 3131] [client 48.218.59.7:30670] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/great.php"] [unique_id "aRyhSFNM6bOMTTuJnz1e7QAAAMI"]
[Wed Nov 19 00:39:39.537445 2025] [:error] [pid 3052:tid 3136] [client 48.218.59.7:29783] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class9.php"] [unique_id "aRyhS1NM6bOMTTuJnz1fAAAAAMc"]
[Wed Nov 19 00:39:40.323600 2025] [:error] [pid 43881:tid 43922] [client 48.218.59.7:29766] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class9.php"] [unique_id "aRyhTH_TrIND5buvEyfBsAAAAUk"]
[Wed Nov 19 00:39:41.484505 2025] [:error] [pid 43881:tid 43913] [client 48.218.59.7:29807] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class9.php"] [unique_id "aRyhTX_TrIND5buvEyfBtAAAAUA"]
[Wed Nov 19 00:39:42.588932 2025] [:error] [pid 43881:tid 43927] [client 48.218.59.7:49067] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class9.php"] [unique_id "aRyhTn_TrIND5buvEyfBtwAAAU4"]
[Wed Nov 19 00:39:44.621701 2025] [:error] [pid 43882:tid 43958] [client 48.218.59.7:30692] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pass.php"] [unique_id "aRyhUN5CQQLff3maRMLQegAAABI"]
[Wed Nov 19 00:39:47.352508 2025] [:error] [pid 44063:tid 44134] [client 48.218.59.7:30694] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pass.php"] [unique_id "aRyhU0VOSC7H33BBqQ3XfQAAAJE"]
[Wed Nov 19 00:39:48.025006 2025] [:error] [pid 43880:tid 43896] [client 48.218.59.7:49040] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pass.php"] [unique_id "aRyhVO1q1HNbKyNr9SZLFQAAAEs"]
[Wed Nov 19 00:39:48.707359 2025] [:error] [pid 3052:tid 3149] [client 48.218.59.7:29789] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/pass.php"] [unique_id "aRyhVFNM6bOMTTuJnz1fCQAAANQ"]
[Wed Nov 19 00:39:49.608483 2025] [:error] [pid 43882:tid 43964] [client 48.218.59.7:30657] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRyhVd5CQQLff3maRMLQgQAAABg"]
[Wed Nov 19 00:39:50.607788 2025] [:error] [pid 44063:tid 44128] [client 48.218.59.7:29809] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRyhVkVOSC7H33BBqQ3XhgAAAIs"]
[Wed Nov 19 00:39:51.978242 2025] [:error] [pid 43880:tid 43898] [client 48.218.59.7:30683] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRyhV-1q1HNbKyNr9SZLGwAAAE0"]
[Wed Nov 19 00:39:52.697661 2025] [:error] [pid 43880:tid 43891] [client 48.218.59.7:29768] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRyhWO1q1HNbKyNr9SZLHgAAAEY"]
[Wed Nov 19 00:39:54.202320 2025] [:error] [pid 3052:tid 3150] [client 48.218.59.7:29764] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRyhWlNM6bOMTTuJnz1fEwAAANU"]
[Wed Nov 19 00:39:55.679022 2025] [:error] [pid 44063:tid 44130] [client 48.218.59.7:49069] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRyhW0VOSC7H33BBqQ3XjwAAAI0"]
[Wed Nov 19 00:39:57.091895 2025] [:error] [pid 43882:tid 43955] [client 48.218.59.7:49081] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRyhXd5CQQLff3maRMLQhAAAAA8"]
[Wed Nov 19 00:39:58.420976 2025] [:error] [pid 44063:tid 44122] [client 48.218.59.7:29811] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ot.php"] [unique_id "aRyhXkVOSC7H33BBqQ3XkAAAAIU"]
[Wed Nov 19 00:40:04.060704 2025] [:error] [pid 43882:tid 43947] [client 48.218.59.7:49048] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/witmm.php"] [unique_id "aRyhZN5CQQLff3maRMLQkAAAAAc"]
[Wed Nov 19 00:40:05.014838 2025] [:error] [pid 44063:tid 44139] [client 48.218.59.7:49072] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/witmm.php"] [unique_id "aRyhZUVOSC7H33BBqQ3XlQAAAJY"]
[Wed Nov 19 00:40:05.681664 2025] [:error] [pid 44063:tid 44138] [client 48.218.59.7:29802] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/witmm.php"] [unique_id "aRyhZUVOSC7H33BBqQ3XlgAAAJU"]
[Wed Nov 19 00:40:09.942248 2025] [:error] [pid 44063:tid 44124] [client 48.218.59.7:29810] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/witmm.php"] [unique_id "aRyhaUVOSC7H33BBqQ3XnQAAAIc"]
[Wed Nov 19 00:40:35.874695 2025] [:error] [pid 43880:tid 43888] [client 48.218.59.7:49045] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class-db.php"] [unique_id "aRyhg-1q1HNbKyNr9SZLXgAAAEM"]
[Wed Nov 19 00:40:36.860889 2025] [:error] [pid 43882:tid 43962] [client 48.218.59.7:29765] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class-db.php"] [unique_id "aRyhhN5CQQLff3maRMLQvgAAABY"]
[Wed Nov 19 00:40:37.561723 2025] [:error] [pid 44063:tid 44121] [client 48.218.59.7:29763] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class-db.php"] [unique_id "aRyhhUVOSC7H33BBqQ3XygAAAIQ"]
[Wed Nov 19 00:40:38.975133 2025] [:error] [pid 43882:tid 43964] [client 48.218.59.7:30660] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class-db.php"] [unique_id "aRyhht5CQQLff3maRMLQwgAAABg"]
[Wed Nov 19 00:40:41.291651 2025] [:error] [pid 44063:tid 44119] [client 48.218.59.7:49042] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xxx.php"] [unique_id "aRyhiUVOSC7H33BBqQ3XzQAAAII"]
[Wed Nov 19 00:40:42.589243 2025] [:error] [pid 43881:tid 43922] [client 48.218.59.7:30671] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xxx.php"] [unique_id "aRyhin_TrIND5buvEyfB_wAAAUk"]
[Wed Nov 19 00:40:43.207613 2025] [:error] [pid 43880:tid 43900] [client 48.218.59.7:29790] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xxx.php"] [unique_id "aRyhi-1q1HNbKyNr9SZLZwAAAE8"]
[Wed Nov 19 00:40:44.616366 2025] [:error] [pid 43882:tid 43964] [client 48.218.59.7:49031] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xxx.php"] [unique_id "aRyhjN5CQQLff3maRMLQygAAABg"]
[Wed Nov 19 00:40:45.620996 2025] [:error] [pid 3052:tid 3128] [client 48.218.59.7:29819] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/acp.php"] [unique_id "aRyhjVNM6bOMTTuJnz1feAAAAMA"]
[Wed Nov 19 00:40:46.668633 2025] [:error] [pid 3052:tid 3135] [client 48.218.59.7:29815] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/acp.php"] [unique_id "aRyhjlNM6bOMTTuJnz1ffgAAAMY"]
[Wed Nov 19 00:40:51.419876 2025] [:error] [pid 44063:tid 44139] [client 48.218.59.7:30712] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/acp.php"] [unique_id "aRyhk0VOSC7H33BBqQ3X5AAAAJY"]
[Wed Nov 19 00:40:53.585025 2025] [:error] [pid 44063:tid 44132] [client 48.218.59.7:49044] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/acp.php"] [unique_id "aRyhlUVOSC7H33BBqQ3X6QAAAI8"]
[Wed Nov 19 00:40:54.446136 2025] [:error] [pid 43882:tid 43944] [client 48.218.59.7:49059] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/awh77.php"] [unique_id "aRyhlt5CQQLff3maRMLQ0AAAAAQ"]
[Wed Nov 19 00:40:57.254264 2025] [:error] [pid 43882:tid 43957] [client 48.218.59.7:29805] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/awh77.php"] [unique_id "aRyhmd5CQQLff3maRMLQ1gAAABE"]
[Wed Nov 19 00:40:59.127618 2025] [:error] [pid 43880:tid 43885] [client 48.218.59.7:49034] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/awh77.php"] [unique_id "aRyhm-1q1HNbKyNr9SZLfQAAAEA"]
[Wed Nov 19 00:40:59.913012 2025] [:error] [pid 3052:tid 3149] [client 48.218.59.7:30693] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/awh77.php"] [unique_id "aRyhm1NM6bOMTTuJnz1fkwAAANQ"]
[Wed Nov 19 00:41:02.642744 2025] [:error] [pid 44063:tid 44119] [client 48.218.59.7:29816] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nax.php"] [unique_id "aRyhnkVOSC7H33BBqQ3YAAAAAII"]
[Wed Nov 19 00:41:04.150018 2025] [:error] [pid 43881:tid 43937] [client 48.218.59.7:30706] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nax.php"] [unique_id "aRyhoH_TrIND5buvEyfCGQAAAVg"]
[Wed Nov 19 00:41:05.107414 2025] [:error] [pid 43882:tid 43951] [client 48.218.59.7:29779] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nax.php"] [unique_id "aRyhod5CQQLff3maRMLQ8gAAAAs"]
[Wed Nov 19 00:41:08.388230 2025] [:error] [pid 43882:tid 43947] [client 48.218.59.7:49035] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nax.php"] [unique_id "aRyhpN5CQQLff3maRMLQ_QAAAAc"]
[Wed Nov 19 00:41:09.548430 2025] [:error] [pid 3052:tid 3129] [client 48.218.59.7:49031] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wolv2.php"] [unique_id "aRyhpVNM6bOMTTuJnz1fngAAAME"]
[Wed Nov 19 00:41:10.846199 2025] [:error] [pid 43881:tid 43929] [client 48.218.59.7:49033] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wolv2.php"] [unique_id "aRyhpn_TrIND5buvEyfCJAAAAVA"]
[Wed Nov 19 00:41:12.834092 2025] [:error] [pid 43880:tid 43901] [client 48.218.59.7:30665] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wolv2.php"] [unique_id "aRyhqO1q1HNbKyNr9SZLkQAAAFA"]
[Wed Nov 19 00:41:13.446500 2025] [:error] [pid 3052:tid 3145] [client 48.218.59.7:30677] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wolv2.php"] [unique_id "aRyhqVNM6bOMTTuJnz1fqQAAANA"]
[Wed Nov 19 00:41:14.735991 2025] [:error] [pid 43880:tid 43889] [client 48.218.59.7:49053] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mtvcrew.php"] [unique_id "aRyhqu1q1HNbKyNr9SZLlAAAAEQ"]
[Wed Nov 19 00:41:16.904270 2025] [:error] [pid 43882:tid 43948] [client 48.218.59.7:30680] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mtvcrew.php"] [unique_id "aRyhrN5CQQLff3maRMLRBAAAAAg"]
[Wed Nov 19 00:41:19.593975 2025] [:error] [pid 43881:tid 43936] [client 48.218.59.7:30701] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mtvcrew.php"] [unique_id "aRyhr3_TrIND5buvEyfCOAAAAVc"]
[Wed Nov 19 00:41:22.947567 2025] [:error] [pid 44063:tid 44118] [client 48.218.59.7:29772] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mtvcrew.php"] [unique_id "aRyhskVOSC7H33BBqQ3YLAAAAIE"]
[Wed Nov 19 00:41:24.816093 2025] [:error] [pid 3052:tid 3129] [client 48.218.59.7:49028] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/twso.php"] [unique_id "aRyhtFNM6bOMTTuJnz1fyAAAAME"]
[Wed Nov 19 00:41:25.714708 2025] [:error] [pid 44063:tid 44139] [client 48.218.59.7:29761] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/twso.php"] [unique_id "aRyhtUVOSC7H33BBqQ3YMQAAAJY"]
[Wed Nov 19 00:41:30.171640 2025] [:error] [pid 44063:tid 44132] [client 48.218.59.7:49060] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/twso.php"] [unique_id "aRyhukVOSC7H33BBqQ3YNgAAAI8"]
[Wed Nov 19 00:41:32.641598 2025] [:error] [pid 43882:tid 43945] [client 48.218.59.7:30673] [client 48.218.59.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/twso.php"] [unique_id "aRyhvN5CQQLff3maRMLRHQAAAAU"]
[Wed Nov 19 01:21:51.693061 2025] [:error] [pid 43882:tid 43946] [client 182.44.10.67:43355] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aRyrL95CQQLff3maRMLhwgAAAAY"]
[Wed Nov 19 02:40:27.381298 2025] [:error] [pid 14439:tid 14462] [client 57.154.55.87:55057] [client 57.154.55.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 57.154.55.87, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aRy9m1at0cKFYVAxpdDrbwAAARU"], referer: https://www.yahoo.com/
[Wed Nov 19 02:40:55.934051 2025] [:error] [pid 14439:tid 14442] [client 57.154.55.87:55057] [client 57.154.55.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/filemanager.php"] [unique_id "aRy9t1at0cKFYVAxpdDrqwAAAQE"], referer: https://www.yahoo.com/
[Wed Nov 19 02:41:27.259421 2025] [autoindex:error] [pid 3052:tid 3136] [client 57.154.55.87:55048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 19 02:41:29.200912 2025] [autoindex:error] [pid 3052:tid 3153] [client 57.154.55.87:55048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 19 02:41:29.357119 2025] [:error] [pid 3052:tid 3136] [client 57.154.55.87:55048] [client 57.154.55.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRy92VNM6bOMTTuJnz2mTgAAAMc"], referer: https://www.google.fr/
[Wed Nov 19 02:41:34.248030 2025] [autoindex:error] [pid 44063:tid 44132] [client 57.154.55.87:55126] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 19 02:41:38.171014 2025] [autoindex:error] [pid 44063:tid 44120] [client 57.154.55.87:55126] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 19 02:41:38.362769 2025] [autoindex:error] [pid 44063:tid 44123] [client 57.154.55.87:55126] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 19 02:41:52.718588 2025] [autoindex:error] [pid 44063:tid 44133] [client 57.154.55.87:55126] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 19 02:41:52.887877 2025] [autoindex:error] [pid 44063:tid 44137] [client 57.154.55.87:55126] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 19 02:41:53.074327 2025] [autoindex:error] [pid 44063:tid 44120] [client 57.154.55.87:55126] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 19 02:41:53.264074 2025] [:error] [pid 44063:tid 44132] [client 57.154.55.87:55126] [client 57.154.55.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRy98UVOSC7H33BBqQ0Q5QAAAI8"], referer: https://www.google.de/
[Wed Nov 19 02:41:54.633431 2025] [autoindex:error] [pid 14439:tid 14463] [client 57.154.55.87:55139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 19 02:41:54.794939 2025] [autoindex:error] [pid 14439:tid 14445] [client 57.154.55.87:55139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 19 02:41:54.961766 2025] [autoindex:error] [pid 14439:tid 14459] [client 57.154.55.87:55139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 19 03:10:15.069828 2025] [:error] [pid 3052:tid 3135] [client 43.153.123.3:60850] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aRzEl1NM6bOMTTuJnz26PAAAAMY"]
[Wed Nov 19 05:16:08.338501 2025] [:error] [pid 6919:tid 6933] [client 48.210.231.218:37887] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aRziGEYFdN1s_9xJVUlfwgAAAQs"]
[Wed Nov 19 05:16:08.808103 2025] [:error] [pid 6555:tid 6594] [client 48.210.231.218:37825] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aRziGEbVJm8eMsGMTCNbWQAAAEM"]
[Wed Nov 19 05:16:10.256783 2025] [:error] [pid 6644:tid 6646] [client 48.210.231.218:37835] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aRziGk0i6Rf788MB6safPAAAAMA"]
[Wed Nov 19 05:16:10.832080 2025] [:error] [pid 6644:tid 6657] [client 48.210.231.218:37867] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aRziGk0i6Rf788MB6safPQAAAMs"]
[Wed Nov 19 05:16:11.215540 2025] [:error] [pid 6554:tid 6574] [client 48.210.231.218:37841] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file1.php"] [unique_id "aRziG98rvPWLafJFqmUmpgAAAA4"]
[Wed Nov 19 05:16:11.710507 2025] [:error] [pid 6644:tid 6651] [client 48.210.231.218:37847] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file1.php"] [unique_id "aRziG00i6Rf788MB6safPgAAAMU"]
[Wed Nov 19 05:16:12.674193 2025] [:error] [pid 6919:tid 6937] [client 48.210.231.218:37767] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file1.php"] [unique_id "aRziHEYFdN1s_9xJVUlfywAAAQ8"]
[Wed Nov 19 05:16:13.924881 2025] [:error] [pid 6919:tid 6922] [client 48.210.231.218:37845] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file1.php"] [unique_id "aRziHUYFdN1s_9xJVUlfzAAAAQA"]
[Wed Nov 19 05:16:15.646726 2025] [:error] [pid 6644:tid 6670] [client 48.210.231.218:37848] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file2.php"] [unique_id "aRziH00i6Rf788MB6safRgAAANg"]
[Wed Nov 19 05:16:17.039043 2025] [:error] [pid 6644:tid 6655] [client 48.210.231.218:37772] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file2.php"] [unique_id "aRziIU0i6Rf788MB6safSQAAAMk"]
[Wed Nov 19 05:16:19.652190 2025] [:error] [pid 6554:tid 6571] [client 48.210.231.218:37696] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file2.php"] [unique_id "aRziI98rvPWLafJFqmUmuAAAAAs"]
[Wed Nov 19 05:16:21.668138 2025] [:error] [pid 6919:tid 6936] [client 48.210.231.218:37878] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file2.php"] [unique_id "aRziJUYFdN1s_9xJVUlf2wAAAQ4"]
[Wed Nov 19 05:16:25.100584 2025] [:error] [pid 6555:tid 6611] [client 48.210.231.218:37763] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRziKUbVJm8eMsGMTCNbawAAAFQ"]
[Wed Nov 19 05:16:25.564449 2025] [:error] [pid 6644:tid 6649] [client 48.210.231.218:37875] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRziKU0i6Rf788MB6safVwAAAMM"]
[Wed Nov 19 05:16:26.837398 2025] [:error] [pid 6919:tid 6926] [client 48.210.231.218:37777] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRziKkYFdN1s_9xJVUlf4gAAAQQ"]
[Wed Nov 19 05:16:28.453337 2025] [:error] [pid 6919:tid 6942] [client 48.210.231.218:37883] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file5.php"] [unique_id "aRziLEYFdN1s_9xJVUlf5gAAARQ"]
[Wed Nov 19 05:16:29.361506 2025] [:error] [pid 6555:tid 6614] [client 48.210.231.218:37862] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file17.php"] [unique_id "aRziLUbVJm8eMsGMTCNbfgAAAFc"]
[Wed Nov 19 05:16:29.809928 2025] [:error] [pid 6555:tid 6601] [client 48.210.231.218:37761] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file17.php"] [unique_id "aRziLUbVJm8eMsGMTCNbgQAAAEo"]
[Wed Nov 19 05:16:30.386192 2025] [:error] [pid 6556:tid 6629] [client 48.210.231.218:37860] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file17.php"] [unique_id "aRziLpuL7hhgrmdM1mtF5gAAAIs"]
[Wed Nov 19 05:16:31.638853 2025] [:error] [pid 6554:tid 6560] [client 48.210.231.218:37760] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file17.php"] [unique_id "aRziL98rvPWLafJFqmUm0gAAAAE"]
[Wed Nov 19 05:16:33.518901 2025] [:error] [pid 6554:tid 6570] [client 48.210.231.218:37886] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file32.php"] [unique_id "aRziMd8rvPWLafJFqmUm1wAAAAo"]
[Wed Nov 19 05:16:34.565995 2025] [:error] [pid 6554:tid 6576] [client 48.210.231.218:37827] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file32.php"] [unique_id "aRziMt8rvPWLafJFqmUm2wAAABA"]
[Wed Nov 19 05:16:36.950655 2025] [:error] [pid 6554:tid 6578] [client 48.210.231.218:37859] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file32.php"] [unique_id "aRziNN8rvPWLafJFqmUm4AAAABI"]
[Wed Nov 19 05:16:40.243681 2025] [:error] [pid 6555:tid 6595] [client 48.210.231.218:37882] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file32.php"] [unique_id "aRziOEbVJm8eMsGMTCNbmwAAAEQ"]
[Wed Nov 19 05:16:41.734632 2025] [:error] [pid 6919:tid 6938] [client 48.210.231.218:37842] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRziOUYFdN1s_9xJVUlgDwAAARA"]
[Wed Nov 19 05:16:43.497570 2025] [:error] [pid 6919:tid 6922] [client 48.210.231.218:37807] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRziO0YFdN1s_9xJVUlgFwAAAQA"]
[Wed Nov 19 05:16:44.144416 2025] [:error] [pid 6555:tid 6598] [client 48.210.231.218:37884] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRziPEbVJm8eMsGMTCNbogAAAEc"]
[Wed Nov 19 05:16:44.993819 2025] [:error] [pid 6919:tid 6929] [client 48.210.231.218:37874] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filesss.php"] [unique_id "aRziPEYFdN1s_9xJVUlgHAAAAQc"]
[Wed Nov 19 05:16:46.865749 2025] [:error] [pid 6919:tid 6923] [client 48.210.231.218:37832] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file9.php"] [unique_id "aRziPkYFdN1s_9xJVUlgJQAAAQE"]
[Wed Nov 19 05:16:48.486512 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:37762] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file9.php"] [unique_id "aRziQEbVJm8eMsGMTCNbqwAAAFA"]
[Wed Nov 19 05:16:49.568262 2025] [:error] [pid 6555:tid 6593] [client 48.210.231.218:37833] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file9.php"] [unique_id "aRziQUbVJm8eMsGMTCNbsAAAAEI"]
[Wed Nov 19 05:16:50.893173 2025] [:error] [pid 6919:tid 6930] [client 48.210.231.218:37788] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file9.php"] [unique_id "aRziQkYFdN1s_9xJVUlgLQAAAQg"]
[Wed Nov 19 05:16:51.811155 2025] [:error] [pid 6555:tid 6614] [client 48.210.231.218:37880] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file13.php"] [unique_id "aRziQ0bVJm8eMsGMTCNbtQAAAFc"]
[Wed Nov 19 05:16:53.712165 2025] [:error] [pid 6554:tid 6575] [client 48.210.231.218:37885] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file13.php"] [unique_id "aRziRd8rvPWLafJFqmUnBAAAAA8"]
[Wed Nov 19 05:16:54.621598 2025] [:error] [pid 6919:tid 6933] [client 48.210.231.218:37858] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file13.php"] [unique_id "aRziRkYFdN1s_9xJVUlgUwAAAQs"]
[Wed Nov 19 05:16:55.795606 2025] [:error] [pid 6554:tid 6560] [client 48.210.231.218:37787] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file13.php"] [unique_id "aRziR98rvPWLafJFqmUnDQAAAAE"]
[Wed Nov 19 05:16:56.218638 2025] [:error] [pid 6554:tid 6572] [client 48.210.231.218:37881] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file3.php"] [unique_id "aRziSN8rvPWLafJFqmUnEAAAAAw"]
[Wed Nov 19 05:16:57.283570 2025] [:error] [pid 6644:tid 6661] [client 48.210.231.218:37871] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file3.php"] [unique_id "aRziSU0i6Rf788MB6safjgAAAM8"]
[Wed Nov 19 05:16:57.785217 2025] [:error] [pid 6556:tid 6618] [client 48.210.231.218:37851] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file3.php"] [unique_id "aRziSZuL7hhgrmdM1mtGMAAAAIA"]
[Wed Nov 19 05:16:58.157005 2025] [:error] [pid 6556:tid 6640] [client 48.210.231.218:37764] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file3.php"] [unique_id "aRziSpuL7hhgrmdM1mtGMgAAAJY"]
[Wed Nov 19 05:16:59.999670 2025] [:error] [pid 6919:tid 6928] [client 48.210.231.218:37877] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRziS0YFdN1s_9xJVUlgaAAAAQY"]
[Wed Nov 19 05:17:01.885957 2025] [:error] [pid 6644:tid 6670] [client 48.210.231.218:37774] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRziTU0i6Rf788MB6safkgAAANg"]
[Wed Nov 19 05:17:02.219952 2025] [:error] [pid 6554:tid 6575] [client 48.210.231.218:37781] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRziTt8rvPWLafJFqmUnGQAAAA8"]
[Wed Nov 19 05:17:02.891587 2025] [:error] [pid 6919:tid 6941] [client 48.210.231.218:37702] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/atomlib.php"] [unique_id "aRziTkYFdN1s_9xJVUlgcAAAARM"]
[Wed Nov 19 05:17:03.406928 2025] [:error] [pid 6644:tid 6652] [client 48.210.231.218:37879] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/efile.php"] [unique_id "aRziT00i6Rf788MB6safkwAAAMY"]
[Wed Nov 19 05:17:04.129043 2025] [:error] [pid 6919:tid 6931] [client 48.210.231.218:37873] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/efile.php"] [unique_id "aRziUEYFdN1s_9xJVUlgcgAAAQk"]
[Wed Nov 19 05:17:05.886738 2025] [:error] [pid 6644:tid 6666] [client 48.210.231.218:37796] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/efile.php"] [unique_id "aRziUU0i6Rf788MB6saflwAAANQ"]
[Wed Nov 19 05:17:28.880137 2025] [:error] [pid 6919:tid 6946] [client 48.210.231.218:37872] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0%25.php"] [unique_id "aRziaEYFdN1s_9xJVUlgpAAAARg"]
[Wed Nov 19 05:17:29.298325 2025] [:error] [pid 6556:tid 6625] [client 48.210.231.218:37811] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0%25.php"] [unique_id "aRziaZuL7hhgrmdM1mtGUgAAAIc"]
[Wed Nov 19 05:17:29.732108 2025] [:error] [pid 6556:tid 6642] [client 48.210.231.218:37865] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0%25.php"] [unique_id "aRziaZuL7hhgrmdM1mtGVQAAAJg"]
[Wed Nov 19 05:17:30.755864 2025] [:error] [pid 6644:tid 6652] [client 48.210.231.218:37773] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0%25.php"] [unique_id "aRziak0i6Rf788MB6safqwAAAMY"]
[Wed Nov 19 05:17:31.544130 2025] [:error] [pid 6919:tid 6946] [client 48.210.231.218:37801] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRzia0YFdN1s_9xJVUlgrwAAARg"]
[Wed Nov 19 05:17:32.721975 2025] [:error] [pid 6644:tid 6661] [client 48.210.231.218:37715] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRzibE0i6Rf788MB6safrQAAAM8"]
[Wed Nov 19 05:17:33.543427 2025] [:error] [pid 6919:tid 6931] [client 48.210.231.218:37813] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRzibUYFdN1s_9xJVUlgtQAAAQk"]
[Wed Nov 19 05:17:34.152706 2025] [:error] [pid 6644:tid 6647] [client 48.210.231.218:37815] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aRzibk0i6Rf788MB6safrwAAAME"]
[Wed Nov 19 05:17:34.554163 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:37771] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jmfi2.php"] [unique_id "aRzibkbVJm8eMsGMTCNb4QAAAFA"]
[Wed Nov 19 05:17:35.630812 2025] [:error] [pid 6919:tid 6925] [client 48.210.231.218:37778] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jmfi2.php"] [unique_id "aRzib0YFdN1s_9xJVUlgvAAAAQM"]
[Wed Nov 19 05:17:36.539475 2025] [:error] [pid 6919:tid 6937] [client 48.210.231.218:37839] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jmfi2.php"] [unique_id "aRzicEYFdN1s_9xJVUlgvgAAAQ8"]
[Wed Nov 19 05:17:38.480736 2025] [:error] [pid 6556:tid 6628] [client 48.210.231.218:37852] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jmfi2.php"] [unique_id "aRzicpuL7hhgrmdM1mtGaAAAAIo"]
[Wed Nov 19 05:17:40.433804 2025] [:error] [pid 6555:tid 6603] [client 48.210.231.218:37808] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.1.php"] [unique_id "aRzidEbVJm8eMsGMTCNb5wAAAEw"]
[Wed Nov 19 05:17:42.527373 2025] [:error] [pid 6644:tid 6652] [client 48.210.231.218:37836] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.1.php"] [unique_id "aRzidk0i6Rf788MB6safuwAAAMY"]
[Wed Nov 19 05:17:43.880341 2025] [:error] [pid 6919:tid 6943] [client 48.210.231.218:37789] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.1.php"] [unique_id "aRzid0YFdN1s_9xJVUlgywAAARU"]
[Wed Nov 19 05:17:44.470452 2025] [:error] [pid 6554:tid 6564] [client 48.210.231.218:37814] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.1.php"] [unique_id "aRzieN8rvPWLafJFqmUnbAAAAAU"]
[Wed Nov 19 05:17:45.288861 2025] [:error] [pid 6919:tid 6930] [client 48.210.231.218:37649] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aRzieUYFdN1s_9xJVUlgzgAAAQg"]
[Wed Nov 19 05:17:47.421736 2025] [:error] [pid 6556:tid 6623] [client 48.210.231.218:37809] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aRzie5uL7hhgrmdM1mtGfAAAAIU"]
[Wed Nov 19 05:17:49.745325 2025] [:error] [pid 6556:tid 6639] [client 48.210.231.218:37856] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aRzifZuL7hhgrmdM1mtGhQAAAJU"]
[Wed Nov 19 05:17:52.674934 2025] [:error] [pid 6555:tid 6602] [client 48.210.231.218:37780] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aRzigEbVJm8eMsGMTCNb9QAAAEs"]
[Wed Nov 19 05:17:53.868320 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:37766] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs.php"] [unique_id "aRzigUbVJm8eMsGMTCNb-QAAAFA"]
[Wed Nov 19 05:17:54.230353 2025] [:error] [pid 6555:tid 6591] [client 48.210.231.218:37698] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs.php"] [unique_id "aRzigkbVJm8eMsGMTCNb-wAAAEA"]
[Wed Nov 19 05:17:54.828873 2025] [:error] [pid 6554:tid 6567] [client 48.210.231.218:37711] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs.php"] [unique_id "aRzigt8rvPWLafJFqmUneAAAAAg"]
[Wed Nov 19 05:17:56.229482 2025] [:error] [pid 6556:tid 6640] [client 48.210.231.218:37754] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fs.php"] [unique_id "aRzihJuL7hhgrmdM1mtGjwAAAJY"]
[Wed Nov 19 05:17:57.936975 2025] [:error] [pid 6919:tid 6929] [client 48.210.231.218:37805] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/CLA.php"] [unique_id "aRzihUYFdN1s_9xJVUlg6AAAAQc"]
[Wed Nov 19 05:17:59.144848 2025] [:error] [pid 6644:tid 6669] [client 48.210.231.218:37864] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/CLA.php"] [unique_id "aRzih00i6Rf788MB6saf2AAAANc"]
[Wed Nov 19 05:18:00.122335 2025] [:error] [pid 6554:tid 6563] [client 48.210.231.218:37718] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/CLA.php"] [unique_id "aRziiN8rvPWLafJFqmUniwAAAAQ"]
[Wed Nov 19 05:18:02.597617 2025] [:error] [pid 6554:tid 6581] [client 48.210.231.218:37794] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/CLA.php"] [unique_id "aRziit8rvPWLafJFqmUnkAAAABU"]
[Wed Nov 19 05:18:03.107677 2025] [:error] [pid 6644:tid 6651] [client 48.210.231.218:37830] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRzii00i6Rf788MB6saf3wAAAMU"]
[Wed Nov 19 05:18:04.016617 2025] [:error] [pid 6644:tid 6658] [client 48.210.231.218:37821] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRzijE0i6Rf788MB6saf4QAAAMw"]
[Wed Nov 19 05:18:05.788897 2025] [:error] [pid 6555:tid 6603] [client 48.210.231.218:37706] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRzijUbVJm8eMsGMTCNcDQAAAEw"]
[Wed Nov 19 05:18:07.059929 2025] [:error] [pid 6644:tid 6668] [client 48.210.231.218:37765] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gfile.php"] [unique_id "aRzij00i6Rf788MB6saf6AAAANY"]
[Wed Nov 19 05:18:09.095883 2025] [:error] [pid 6919:tid 6945] [client 48.210.231.218:37750] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file6.php"] [unique_id "aRzikUYFdN1s_9xJVUlg-wAAARc"]
[Wed Nov 19 05:18:10.338578 2025] [:error] [pid 6556:tid 6626] [client 48.210.231.218:37699] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file6.php"] [unique_id "aRzikpuL7hhgrmdM1mtGnwAAAIg"]
[Wed Nov 19 05:18:11.735587 2025] [:error] [pid 6555:tid 6613] [client 48.210.231.218:37800] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file6.php"] [unique_id "aRzik0bVJm8eMsGMTCNcFwAAAFY"]
[Wed Nov 19 05:18:13.936479 2025] [:error] [pid 6644:tid 6667] [client 48.210.231.218:37776] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file6.php"] [unique_id "aRzilU0i6Rf788MB6saf9AAAANU"]
[Wed Nov 19 05:18:14.655703 2025] [:error] [pid 6555:tid 6600] [client 48.210.231.218:37803] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/eauu.php"] [unique_id "aRzilkbVJm8eMsGMTCNcHQAAAEk"]
[Wed Nov 19 05:18:16.269668 2025] [:error] [pid 6555:tid 6601] [client 48.210.231.218:37806] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/eauu.php"] [unique_id "aRzimEbVJm8eMsGMTCNcHwAAAEo"]
[Wed Nov 19 05:18:17.305510 2025] [:error] [pid 6555:tid 6606] [client 48.210.231.218:37791] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/eauu.php"] [unique_id "aRzimUbVJm8eMsGMTCNcIgAAAE8"]
[Wed Nov 19 05:18:18.109268 2025] [:error] [pid 6555:tid 6598] [client 48.210.231.218:37802] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/eauu.php"] [unique_id "aRzimkbVJm8eMsGMTCNcJgAAAEc"]
[Wed Nov 19 05:18:19.443802 2025] [:error] [pid 6919:tid 6923] [client 48.210.231.218:37734] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRzim0YFdN1s_9xJVUlhBAAAAQE"]
[Wed Nov 19 05:18:20.784259 2025] [:error] [pid 6919:tid 6930] [client 48.210.231.218:37792] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRzinEYFdN1s_9xJVUlhCAAAAQg"]
[Wed Nov 19 05:18:21.874265 2025] [:error] [pid 6919:tid 6945] [client 48.210.231.218:37703] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRzinUYFdN1s_9xJVUlhCgAAARc"]
[Wed Nov 19 05:18:22.364239 2025] [:error] [pid 6554:tid 6580] [client 48.210.231.218:37834] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aRzint8rvPWLafJFqmUnnQAAABQ"]
[Wed Nov 19 05:18:22.805505 2025] [:error] [pid 6919:tid 6941] [client 48.210.231.218:37701] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fe5.php"] [unique_id "aRzinkYFdN1s_9xJVUlhCwAAARM"]
[Wed Nov 19 05:18:23.182489 2025] [:error] [pid 6919:tid 6944] [client 48.210.231.218:37705] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fe5.php"] [unique_id "aRzin0YFdN1s_9xJVUlhDQAAARY"]
[Wed Nov 19 05:18:24.611776 2025] [:error] [pid 6919:tid 6924] [client 48.210.231.218:37869] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fe5.php"] [unique_id "aRzioEYFdN1s_9xJVUlhDwAAAQI"]
[Wed Nov 19 05:18:25.554391 2025] [:error] [pid 6644:tid 6650] [client 48.210.231.218:37737] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/fe5.php"] [unique_id "aRzioU0i6Rf788MB6sagCAAAAMQ"]
[Wed Nov 19 05:18:26.024537 2025] [:error] [pid 6644:tid 6665] [client 48.210.231.218:37795] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/cccc.php"] [unique_id "aRziok0i6Rf788MB6sagCgAAANM"]
[Wed Nov 19 05:18:26.882928 2025] [:error] [pid 6554:tid 6577] [client 48.210.231.218:37861] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/cccc.php"] [unique_id "aRziot8rvPWLafJFqmUnowAAABE"]
[Wed Nov 19 05:18:48.621343 2025] [:error] [pid 6556:tid 6633] [client 48.210.231.218:37868] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aRziuJuL7hhgrmdM1mtG0AAAAI8"]
[Wed Nov 19 05:18:49.459024 2025] [:error] [pid 6556:tid 6636] [client 48.210.231.218:37770] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aRziuZuL7hhgrmdM1mtG0gAAAJI"]
[Wed Nov 19 05:18:49.822995 2025] [:error] [pid 6644:tid 6658] [client 48.210.231.218:37714] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aRziuU0i6Rf788MB6sagQAAAAMw"]
[Wed Nov 19 05:18:50.203437 2025] [:error] [pid 6644:tid 6648] [client 48.210.231.218:37779] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aRziuk0i6Rf788MB6sagQgAAAMI"]
[Wed Nov 19 05:18:50.992782 2025] [:error] [pid 6555:tid 6603] [client 48.210.231.218:37656] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRziukbVJm8eMsGMTCNcTAAAAEw"]
[Wed Nov 19 05:18:52.497176 2025] [:error] [pid 6644:tid 6655] [client 48.210.231.218:37826] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRzivE0i6Rf788MB6sagSAAAAMk"]
[Wed Nov 19 05:18:53.177928 2025] [:error] [pid 6919:tid 6946] [client 48.210.231.218:37790] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRzivUYFdN1s_9xJVUlhOQAAARg"]
[Wed Nov 19 05:18:53.843788 2025] [:error] [pid 6554:tid 6584] [client 48.210.231.218:37833] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aRzivd8rvPWLafJFqmUnvgAAABg"]
[Wed Nov 19 05:18:54.600188 2025] [:error] [pid 6556:tid 6638] [client 48.210.231.218:37709] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vast.php"] [unique_id "aRzivpuL7hhgrmdM1mtG2AAAAJQ"]
[Wed Nov 19 05:18:55.340170 2025] [:error] [pid 6644:tid 6663] [client 48.210.231.218:37782] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vast.php"] [unique_id "aRziv00i6Rf788MB6sagUQAAANE"]
[Wed Nov 19 05:18:56.097336 2025] [:error] [pid 6555:tid 6598] [client 48.210.231.218:37634] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vast.php"] [unique_id "aRziwEbVJm8eMsGMTCNcUgAAAEc"]
[Wed Nov 19 05:18:58.119446 2025] [:error] [pid 6556:tid 6627] [client 48.210.231.218:37840] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/vast.php"] [unique_id "aRziwpuL7hhgrmdM1mtG5AAAAIk"]
[Wed Nov 19 05:18:59.082078 2025] [:error] [pid 6556:tid 6634] [client 48.210.231.218:37823] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRziw5uL7hhgrmdM1mtG6QAAAJA"]
[Wed Nov 19 05:19:00.769831 2025] [:error] [pid 6644:tid 6649] [client 48.210.231.218:37676] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRzixE0i6Rf788MB6sagXQAAAMM"]
[Wed Nov 19 05:19:03.781313 2025] [:error] [pid 6554:tid 6566] [client 48.210.231.218:37720] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRzix98rvPWLafJFqmUn0QAAAAc"]
[Wed Nov 19 05:19:05.819439 2025] [:error] [pid 6554:tid 6571] [client 48.210.231.218:37733] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yanki.php"] [unique_id "aRziyd8rvPWLafJFqmUn0wAAAAs"]
[Wed Nov 19 05:19:06.830998 2025] [:error] [pid 6644:tid 6663] [client 48.210.231.218:37870] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRziyk0i6Rf788MB6sagaQAAANE"]
[Wed Nov 19 05:19:07.783949 2025] [:error] [pid 6919:tid 6936] [client 48.210.231.218:37647] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRziy0YFdN1s_9xJVUlhSAAAAQ4"]
[Wed Nov 19 05:19:08.304709 2025] [:error] [pid 6555:tid 6596] [client 48.210.231.218:37775] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRzizEbVJm8eMsGMTCNcYgAAAEU"]
[Wed Nov 19 05:19:08.696900 2025] [:error] [pid 6919:tid 6938] [client 48.210.231.218:37785] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aRzizEYFdN1s_9xJVUlhSgAAARA"]
[Wed Nov 19 05:19:09.216605 2025] [:error] [pid 6554:tid 6574] [client 48.210.231.218:37876] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nfile.php"] [unique_id "aRzizd8rvPWLafJFqmUn1gAAAA4"]
[Wed Nov 19 05:19:10.719263 2025] [:error] [pid 6555:tid 6605] [client 48.210.231.218:37661] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nfile.php"] [unique_id "aRzizkbVJm8eMsGMTCNcZwAAAE4"]
[Wed Nov 19 05:19:13.055335 2025] [:error] [pid 6919:tid 6932] [client 48.210.231.218:37853] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nfile.php"] [unique_id "aRzi0UYFdN1s_9xJVUlhUAAAAQo"]
[Wed Nov 19 05:19:16.272963 2025] [:error] [pid 6556:tid 6639] [client 48.210.231.218:37721] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nfile.php"] [unique_id "aRzi1JuL7hhgrmdM1mtHAgAAAJU"]
[Wed Nov 19 05:19:17.956244 2025] [:error] [pid 6919:tid 6928] [client 48.210.231.218:37850] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ilex.php"] [unique_id "aRzi1UYFdN1s_9xJVUlhYAAAAQY"]
[Wed Nov 19 05:19:18.850397 2025] [:error] [pid 6554:tid 6577] [client 48.210.231.218:37745] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ilex.php"] [unique_id "aRzi1t8rvPWLafJFqmUn4gAAABE"]
[Wed Nov 19 05:19:20.255310 2025] [:error] [pid 6555:tid 6593] [client 48.210.231.218:37854] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ilex.php"] [unique_id "aRzi2EbVJm8eMsGMTCNcdAAAAEI"]
[Wed Nov 19 05:19:21.290040 2025] [:error] [pid 6556:tid 6633] [client 48.210.231.218:37810] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ilex.php"] [unique_id "aRzi2ZuL7hhgrmdM1mtHBwAAAI8"]
[Wed Nov 19 05:19:21.692053 2025] [:error] [pid 6556:tid 6627] [client 48.210.231.218:37741] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/des.php"] [unique_id "aRzi2ZuL7hhgrmdM1mtHCQAAAIk"]
[Wed Nov 19 05:19:22.205310 2025] [:error] [pid 6556:tid 6635] [client 48.210.231.218:37643] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/des.php"] [unique_id "aRzi2puL7hhgrmdM1mtHDQAAAJE"]
[Wed Nov 19 05:19:23.834124 2025] [:error] [pid 6554:tid 6576] [client 48.210.231.218:37730] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/des.php"] [unique_id "aRzi298rvPWLafJFqmUn5QAAABA"]
[Wed Nov 19 05:19:25.425527 2025] [:error] [pid 6919:tid 6938] [client 48.210.231.218:37710] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/des.php"] [unique_id "aRzi3UYFdN1s_9xJVUlhZwAAARA"]
[Wed Nov 19 05:19:26.815069 2025] [:error] [pid 6556:tid 6625] [client 48.210.231.218:37797] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ext.php"] [unique_id "aRzi3puL7hhgrmdM1mtHHQAAAIc"]
[Wed Nov 19 05:19:27.256188 2025] [:error] [pid 6554:tid 6567] [client 48.210.231.218:37799] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ext.php"] [unique_id "aRzi398rvPWLafJFqmUn6wAAAAg"]
[Wed Nov 19 05:19:28.061223 2025] [:error] [pid 6555:tid 6602] [client 48.210.231.218:37727] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ext.php"] [unique_id "aRzi4EbVJm8eMsGMTCNcfAAAAEs"]
[Wed Nov 19 05:19:29.822598 2025] [:error] [pid 6554:tid 6571] [client 48.210.231.218:37677] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ext.php"] [unique_id "aRzi4d8rvPWLafJFqmUn7wAAAAs"]
[Wed Nov 19 05:19:31.520725 2025] [:error] [pid 6919:tid 6946] [client 48.210.231.218:37786] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/axx.php"] [unique_id "aRzi40YFdN1s_9xJVUlhcgAAARg"]
[Wed Nov 19 05:19:32.875469 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:37784] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/axx.php"] [unique_id "aRzi5EbVJm8eMsGMTCNchQAAAFA"]
[Wed Nov 19 05:19:33.913160 2025] [:error] [pid 6554:tid 6562] [client 48.210.231.218:37866] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/axx.php"] [unique_id "aRzi5d8rvPWLafJFqmUn_QAAAAM"]
[Wed Nov 19 05:19:35.508534 2025] [:error] [pid 6556:tid 6620] [client 48.210.231.218:37855] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/axx.php"] [unique_id "aRzi55uL7hhgrmdM1mtHMgAAAII"]
[Wed Nov 19 05:19:36.395564 2025] [:error] [pid 6556:tid 6636] [client 48.210.231.218:37829] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRzi6JuL7hhgrmdM1mtHNQAAAJI"]
[Wed Nov 19 05:19:37.016877 2025] [:error] [pid 6644:tid 6663] [client 48.210.231.218:37743] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRzi6U0i6Rf788MB6sagjAAAANE"]
[Wed Nov 19 05:19:37.657986 2025] [:error] [pid 6556:tid 6638] [client 48.210.231.218:37639] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRzi6ZuL7hhgrmdM1mtHOQAAAJQ"]
[Wed Nov 19 05:19:38.418510 2025] [:error] [pid 6919:tid 6939] [client 48.210.231.218:37725] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/yasnu.php"] [unique_id "aRzi6kYFdN1s_9xJVUlhgwAAARE"]
[Wed Nov 19 05:19:39.245957 2025] [:error] [pid 6919:tid 6942] [client 48.210.231.218:37708] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRzi60YFdN1s_9xJVUlhhgAAARQ"]
[Wed Nov 19 05:19:40.272289 2025] [:error] [pid 6919:tid 6932] [client 48.210.231.218:37650] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRzi7EYFdN1s_9xJVUlhiQAAAQo"]
[Wed Nov 19 05:19:40.971660 2025] [:error] [pid 6919:tid 6924] [client 48.210.231.218:37735] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRzi7EYFdN1s_9xJVUlhjAAAAQI"]
[Wed Nov 19 05:19:42.250091 2025] [:error] [pid 6919:tid 6926] [client 48.210.231.218:37783] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/new4.php"] [unique_id "aRzi7kYFdN1s_9xJVUlhjwAAAQQ"]
[Wed Nov 19 05:19:42.749337 2025] [:error] [pid 6556:tid 6623] [client 48.210.231.218:37572] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ava.php"] [unique_id "aRzi7puL7hhgrmdM1mtHRwAAAIU"]
[Wed Nov 19 05:19:43.558138 2025] [:error] [pid 6919:tid 6935] [client 48.210.231.218:37844] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ava.php"] [unique_id "aRzi70YFdN1s_9xJVUlhkwAAAQ0"]
[Wed Nov 19 05:19:44.081679 2025] [:error] [pid 6555:tid 6608] [client 48.210.231.218:37658] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ava.php"] [unique_id "aRzi8EbVJm8eMsGMTCNckQAAAFE"]
[Wed Nov 19 05:19:44.694483 2025] [:error] [pid 6644:tid 6664] [client 48.210.231.218:37678] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ava.php"] [unique_id "aRzi8E0i6Rf788MB6sagkgAAANI"]
[Wed Nov 19 05:19:45.546017 2025] [:error] [pid 6555:tid 6607] [client 48.210.231.218:37838] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ioxi2.php"] [unique_id "aRzi8UbVJm8eMsGMTCNckwAAAFA"]
[Wed Nov 19 05:19:53.965587 2025] [proxy_fcgi:error] [pid 6919:tid 6944] [client 48.210.231.218:37749] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 05:20:08.075156 2025] [:error] [pid 6919:tid 6940] [client 48.210.231.218:37749] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aRzjCEYFdN1s_9xJVUlhxAAAARI"]
[Wed Nov 19 05:20:10.528831 2025] [:error] [pid 6644:tid 6660] [client 48.210.231.218:37828] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aRzjCk0i6Rf788MB6sag0gAAAM4"]
[Wed Nov 19 05:20:13.197332 2025] [:error] [pid 6644:tid 6667] [client 48.210.231.218:37757] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aRzjDU0i6Rf788MB6sag3QAAANU"]
[Wed Nov 19 05:20:13.673268 2025] [:error] [pid 6644:tid 6668] [client 48.210.231.218:37645] [client 48.210.231.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aRzjDU0i6Rf788MB6sag3wAAANY"]
[Wed Nov 19 07:30:37.821181 2025] [:error] [pid 6554:tid 6577] [client 18.191.165.250:56310] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR0Bnd8rvPWLafJFqmVWuwAAABE"]
[Wed Nov 19 07:30:38.213496 2025] [:error] [pid 6556:tid 6620] [client 18.191.165.250:56393] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR0BnpuL7hhgrmdM1mt7EgAAAII"]
[Wed Nov 19 07:30:38.608057 2025] [:error] [pid 6919:tid 6936] [client 18.191.165.250:56476] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR0BnkYFdN1s_9xJVUmq_QAAAQ4"]
[Wed Nov 19 07:30:39.010965 2025] [:error] [pid 6644:tid 6662] [client 18.191.165.250:56609] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR0Bn00i6Rf788MB6sbZvQAAANA"]
[Wed Nov 19 07:30:39.405299 2025] [:error] [pid 6919:tid 6926] [client 18.191.165.250:56729] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR0Bn0YFdN1s_9xJVUmrIgAAAQQ"]
[Wed Nov 19 08:54:40.774341 2025] [proxy_fcgi:error] [pid 6919:tid 6929] [client 54.196.57.184:35626] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/stunnedemuadmin/public_html/wp-includes/class-wpdb.php on line 2351'
[Wed Nov 19 10:46:27.147793 2025] [:error] [pid 6644:tid 6656] [client 94.247.172.129:19029] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aR0vg00i6Rf788MB6sYV5wAAAMo"]
[Wed Nov 19 13:55:25.715542 2025] [:error] [pid 6555:tid 6612] [client 117.62.235.53:47585] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR1bzUbVJm8eMsGMTCP6gwAAAFU"]
[Wed Nov 19 18:41:59.647296 2025] [:error] [pid 6644:tid 6669] [client 18.117.122.228:35704] [client 18.117.122.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aR2e900i6Rf788MB6sapEwAAANc"]
[Wed Nov 19 20:15:10.499098 2025] [:error] [pid 12643:tid 12658] [client 112.209.21.95:52036] [client 112.209.21.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.21.95, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR20zsaLCNSdLHNAGt70lwAAAYw"]
[Wed Nov 19 20:16:33.001321 2025] [:error] [pid 12672:tid 12690] [client 36.41.75.167:48332] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aR21IP9vojl6X1cc5mUqnAAAAc0"]
[Wed Nov 19 20:35:57.822510 2025] [:error] [pid 6556:tid 6623] [client 104.196.176.201:58174] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rZuL7hhgrmdM1msndAAAAIU"]
[Thu Nov 20 00:36:28.350477 2025] [:error] [pid 50236:tid 50365] [client 112.209.21.95:64020] [client 112.209.21.95] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aR3yDGT-l-atWVKihhsPYgAAAIM"]
[Thu Nov 20 00:37:54.224099 2025] [:error] [pid 50475:tid 50540] [client 112.209.21.95:53608] [client 112.209.21.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.21.95, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3yYlzRy2BTBjqrUmkWFAAAARI"]
[Thu Nov 20 00:39:20.093447 2025] [:error] [pid 50475:tid 50528] [client 112.209.21.95:55051] [client 112.209.21.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.21.95, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3yuFzRy2BTBjqrUmkW5AAAAQY"]
[Thu Nov 20 00:40:34.960246 2025] [:error] [pid 50210:tid 50316] [client 112.209.21.95:56053] [client 112.209.21.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.21.95, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3zAt9KVfTGhSw-ebunCAAAAAo"]
[Thu Nov 20 00:41:47.695598 2025] [:error] [pid 50236:tid 50364] [client 112.209.21.95:61167] [client 112.209.21.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.21.95, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3zS2T-l-atWVKihhsRogAAAII"]
[Thu Nov 20 00:43:00.251977 2025] [:error] [pid 50475:tid 50545] [client 112.209.21.95:52974] [client 112.209.21.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.21.95, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3zlFzRy2BTBjqrUmkY_AAAARc"]
[Thu Nov 20 02:25:02.704598 2025] [:error] [pid 8293:tid 8296] [client 91.92.242.56:62104] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LfiGLhDa8A92KWiIK0gAAAkE"]
[Thu Nov 20 02:25:03.268104 2025] [:error] [pid 50236:tid 50382] [client 91.92.242.56:62388] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4Lf2T-l-atWVKihhsuAgAAAJQ"]
[Thu Nov 20 02:25:03.833664 2025] [:error] [pid 8293:tid 8316] [client 91.92.242.56:62745] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aR4LfyGLhDa8A92KWiIK1gAAAlU"]
[Thu Nov 20 03:01:31.841161 2025] [:error] [pid 8396:tid 8405] [client 221.229.106.25:58458] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR4UC4olA09HZQNzyMD8MgAAAsc"]
[Thu Nov 20 05:21:42.198182 2025] [autoindex:error] [pid 55430:tid 55447] [client 4.206.89.49:18375] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 05:21:46.338947 2025] [autoindex:error] [pid 55430:tid 55445] [client 4.206.89.49:18375] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 05:21:50.499540 2025] [autoindex:error] [pid 55430:tid 55435] [client 4.206.89.49:18375] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 20 05:21:59.311869 2025] [:error] [pid 55430:tid 55433] [client 4.206.89.49:18375] [client 4.206.89.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.206.89.49, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR409_PZXaIMEU4pE7s7tQAAAMA"], referer: https://www.google.co.uk/
[Thu Nov 20 05:22:13.425746 2025] [:error] [pid 55430:tid 55454] [client 4.206.89.49:18375] [client 4.206.89.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/filemanager.php"] [unique_id "aR41BfPZXaIMEU4pE7s7xAAAANU"], referer: https://www.google.co.uk/
[Thu Nov 20 05:22:48.293042 2025] [:error] [pid 34444:tid 34450] [client 4.206.89.49:18392] [client 4.206.89.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR41KFNEol4jlmmA_GOBvQAAAUQ"], referer: https://www.google.com/
[Thu Nov 20 05:22:54.802813 2025] [autoindex:error] [pid 34405:tid 34414] [client 4.206.89.49:18351] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 05:22:56.943386 2025] [autoindex:error] [pid 34405:tid 34418] [client 4.206.89.49:18351] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 20 05:22:57.157658 2025] [autoindex:error] [pid 34405:tid 34422] [client 4.206.89.49:18351] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 05:23:08.096342 2025] [autoindex:error] [pid 34405:tid 34413] [client 4.206.89.49:18351] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 20 05:23:08.322254 2025] [autoindex:error] [pid 34405:tid 34409] [client 4.206.89.49:18351] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 05:23:08.533901 2025] [autoindex:error] [pid 34405:tid 34416] [client 4.206.89.49:18351] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 05:23:08.739869 2025] [:error] [pid 34405:tid 34415] [client 4.206.89.49:18351] [client 4.206.89.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR41PDFpvu8oRK7ATftxmwAAAQg"], referer: https://www.google.de/
[Thu Nov 20 05:23:11.561238 2025] [autoindex:error] [pid 55340:tid 55359] [client 4.206.89.49:18388] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 20 05:23:16.168648 2025] [autoindex:error] [pid 55340:tid 55353] [client 4.206.89.49:18388] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 05:23:16.380374 2025] [autoindex:error] [pid 55340:tid 55368] [client 4.206.89.49:18388] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 05:23:43.893127 2025] [:error] [pid 55340:tid 55353] [client 4.206.89.49:18388] [client 4.206.89.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.89.49, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aR41X_OxD-NeMydTybC-qQAAAAg"], referer: https://duckduckgo.com/
[Thu Nov 20 09:01:07.351808 2025] [:error] [pid 55342:tid 55387] [client 182.44.12.37:47515] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aR5oU7g6x32Tvk7fIG9nWwAAAE8"]
[Thu Nov 20 10:04:12.159139 2025] [:error] [pid 55340:tid 55350] [client 43.159.128.247:38488] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aR53HPOxD-NeMydTybAaNAAAAAU"]
[Thu Nov 20 12:10:21.292865 2025] [:error] [pid 34405:tid 34426] [client 98.81.111.26:53646] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6UrTFpvu8oRK7ATfvI5AAAARM"]
[Thu Nov 20 12:10:21.706892 2025] [:error] [pid 804:tid 821] [client 98.81.111.26:52603] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6UrfaRHpUlPL9O0Lk1lQAAAYU"]
[Thu Nov 20 12:10:22.112697 2025] [:error] [pid 55340:tid 55348] [client 98.81.111.26:50534] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6UrvOxD-NeMydTybBJ1QAAAAM"]
[Thu Nov 20 12:10:22.521105 2025] [:error] [pid 55430:tid 55456] [client 98.81.111.26:49740] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6UrvPZXaIMEU4pE7ugygAAANc"]
[Thu Nov 20 12:10:22.929284 2025] [:error] [pid 55340:tid 55369] [client 98.81.111.26:51722] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6UrvOxD-NeMydTybBJ8AAAABg"]
[Thu Nov 20 12:15:50.758464 2025] [:error] [pid 55430:tid 55447] [client 98.81.111.26:50350] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6V9vPZXaIMEU4pE7ul_wAAAM4"]
[Thu Nov 20 12:15:51.162409 2025] [:error] [pid 34444:tid 34462] [client 98.81.111.26:52603] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6V91NEol4jlmmA_GP0cgAAAVA"]
[Thu Nov 20 12:15:51.580429 2025] [:error] [pid 34405:tid 34425] [client 98.81.111.26:55758] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvNAwAAARI"]
[Thu Nov 20 12:15:51.991347 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:59585] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6V9_OxD-NeMydTybBNWwAAABM"]
[Thu Nov 20 12:15:52.404401 2025] [:error] [pid 55430:tid 55436] [client 98.81.111.26:61813] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6V-PPZXaIMEU4pE7umKQAAAMM"]
[Thu Nov 20 15:09:25.825781 2025] [:error] [pid 34405:tid 34424] [client 43.159.149.56:41920] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR6-pTFpvu8oRK7ATfvx-gAAARE"]
[Thu Nov 20 15:31:42.497487 2025] [:error] [pid 55430:tid 55451] [client 182.44.8.254:55168] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR7D3vPZXaIMEU4pE7vepgAAANI"]
[Thu Nov 20 16:35:56.852319 2025] [:error] [pid 34405:tid 34422] [client 103.212.138.241:59297] [client 103.212.138.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.212.138.241, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR7S7DFpvu8oRK7ATfsALwAAAQ8"]
[Thu Nov 20 17:28:32.870665 2025] [autoindex:error] [pid 40445:tid 40497] [client 20.1.168.67:1446] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 17:28:36.325207 2025] [autoindex:error] [pid 40445:tid 40475] [client 20.1.168.67:1446] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 17:28:40.134320 2025] [autoindex:error] [pid 40445:tid 40476] [client 20.1.168.67:1446] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 17:28:50.776949 2025] [:error] [pid 40445:tid 40482] [client 20.1.168.67:1446] [client 20.1.168.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.1.168.67, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR7fUlH-MuFcoWRjXpZAwwAAAkc"], referer: https://www.yahoo.com/
[Thu Nov 20 17:29:03.489969 2025] [:error] [pid 40445:tid 40481] [client 20.1.168.67:1446] [client 20.1.168.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/filemanager.php"] [unique_id "aR7fX1H-MuFcoWRjXpZAzwAAAkY"], referer: https://www.bing.com/
[Thu Nov 20 17:29:41.607818 2025] [:error] [pid 55343:tid 55413] [client 20.1.168.67:5724] [client 20.1.168.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR7fhVWlO3EnyVMV7w6kTgAAAI4"], referer: https://www.google.com/
[Thu Nov 20 17:29:46.051219 2025] [autoindex:error] [pid 40415:tid 40436] [client 20.1.168.67:3879] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 17:29:48.425921 2025] [autoindex:error] [pid 40415:tid 40434] [client 20.1.168.67:3879] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 20 17:29:48.640210 2025] [autoindex:error] [pid 40415:tid 40421] [client 20.1.168.67:3879] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 17:29:58.049688 2025] [autoindex:error] [pid 40415:tid 40440] [client 20.1.168.67:3879] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 17:29:58.285702 2025] [autoindex:error] [pid 40415:tid 40436] [client 20.1.168.67:3879] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 17:29:58.531060 2025] [autoindex:error] [pid 40415:tid 40422] [client 20.1.168.67:3879] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 17:29:58.745918 2025] [:error] [pid 40415:tid 40434] [client 20.1.168.67:3879] [client 20.1.168.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR7flqhjIyLSv09svwOVMQAAAdA"], referer: https://www.yahoo.com/
[Thu Nov 20 17:29:59.823568 2025] [autoindex:error] [pid 40508:tid 40522] [client 20.1.168.67:5073] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 17:30:00.032765 2025] [autoindex:error] [pid 40508:tid 40520] [client 20.1.168.67:5073] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 17:30:00.381530 2025] [autoindex:error] [pid 40508:tid 40519] [client 20.1.168.67:5073] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 17:30:24.904424 2025] [:error] [pid 40508:tid 40523] [client 20.1.168.67:5073] [client 20.1.168.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.1.168.67, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aR7fsKxXNVCMW_ksxPuNCAAAAo0"], referer: https://www.yahoo.com/
[Fri Nov 21 00:01:31.115636 2025] [autoindex:error] [pid 55340:tid 55367] [client 4.233.80.63:6768] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 00:01:35.180430 2025] [proxy_fcgi:error] [pid 55340:tid 55369] [client 4.233.80.63:6768] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 00:01:37.799472 2025] [:error] [pid 55340:tid 55356] [client 4.233.80.63:6768] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/0.php"] [unique_id "aR87YfOxD-NeMydTybDZEwAAAAs"]
[Fri Nov 21 00:01:43.814532 2025] [:error] [pid 40508:tid 40529] [client 4.233.80.63:63176] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aR87Z6xXNVCMW_ksxPsG7AAAApM"]
[Fri Nov 21 00:01:47.012759 2025] [:error] [pid 40445:tid 40484] [client 4.233.80.63:60081] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/m.php"] [unique_id "aR87a1H-MuFcoWRjXpbIBwAAAkk"]
[Fri Nov 21 00:01:48.251716 2025] [:error] [pid 40415:tid 40424] [client 4.233.80.63:6774] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/m.php"] [unique_id "aR87bKhjIyLSv09svwPvAgAAAcY"]
[Fri Nov 21 00:01:50.646671 2025] [:error] [pid 40415:tid 40426] [client 4.233.80.63:6741] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/m.php"] [unique_id "aR87bqhjIyLSv09svwPvCQAAAcg"]
[Fri Nov 21 00:01:52.356107 2025] [:error] [pid 55342:tid 55372] [client 4.233.80.63:6767] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/m.php"] [unique_id "aR87cLg6x32Tvk7fIG8ezgAAAEA"]
[Fri Nov 21 00:01:54.190982 2025] [:error] [pid 55342:tid 55378] [client 4.233.80.63:60036] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aR87crg6x32Tvk7fIG8ezwAAAEY"]
[Fri Nov 21 00:01:55.342348 2025] [:error] [pid 40508:tid 40515] [client 4.233.80.63:6722] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jagoan.php"] [unique_id "aR87c6xXNVCMW_ksxPsHFQAAAoU"]
[Fri Nov 21 00:01:57.140998 2025] [:error] [pid 55342:tid 55390] [client 4.233.80.63:6751] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jagoan.php"] [unique_id "aR87dbg6x32Tvk7fIG8e1wAAAFI"]
[Fri Nov 21 00:01:59.930770 2025] [:error] [pid 55340:tid 55346] [client 4.233.80.63:60086] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jagoan.php"] [unique_id "aR87d_OxD-NeMydTybDZNAAAAAE"]
[Fri Nov 21 00:02:01.380098 2025] [:error] [pid 55340:tid 55358] [client 4.233.80.63:6721] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/jagoan.php"] [unique_id "aR87efOxD-NeMydTybDZNQAAAA0"]
[Fri Nov 21 00:02:03.269432 2025] [:error] [pid 55430:tid 55453] [client 4.233.80.63:6736] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/g3.php"] [unique_id "aR87e_PZXaIMEU4pE7s6VgAAANQ"]
[Fri Nov 21 00:02:04.408440 2025] [:error] [pid 55430:tid 55433] [client 4.233.80.63:6753] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/g3.php"] [unique_id "aR87fPPZXaIMEU4pE7s6WAAAAMA"]
[Fri Nov 21 00:02:06.118955 2025] [:error] [pid 34405:tid 34407] [client 4.233.80.63:63225] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/g3.php"] [unique_id "aR87fjFpvu8oRK7ATftcAgAAAQA"]
[Fri Nov 21 00:02:07.351530 2025] [:error] [pid 40508:tid 40524] [client 4.233.80.63:63169] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/images/g3.php"] [unique_id "aR87f6xXNVCMW_ksxPsHeQAAAo4"]
[Fri Nov 21 00:02:08.549729 2025] [:error] [pid 55342:tid 55385] [client 4.233.80.63:6737] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR87gLg6x32Tvk7fIG8e3wAAAE0"]
[Fri Nov 21 00:02:09.950054 2025] [:error] [pid 40445:tid 40476] [client 4.233.80.63:6725] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR87gVH-MuFcoWRjXpbIOAAAAkE"]
[Fri Nov 21 00:02:10.968287 2025] [:error] [pid 55430:tid 55453] [client 4.233.80.63:60051] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR87gvPZXaIMEU4pE7s6YwAAANQ"]
[Fri Nov 21 00:02:12.214308 2025] [:error] [pid 40445:tid 40497] [client 4.233.80.63:60068] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR87hFH-MuFcoWRjXpbIPgAAAlY"]
[Fri Nov 21 00:02:12.879544 2025] [:error] [pid 40415:tid 40431] [client 4.233.80.63:60075] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR87hKhjIyLSv09svwPvIgAAAc0"]
[Fri Nov 21 00:02:13.581060 2025] [:error] [pid 40415:tid 40422] [client 4.233.80.63:63210] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR87hahjIyLSv09svwPvJQAAAcQ"]
[Fri Nov 21 00:02:14.451793 2025] [:error] [pid 40445:tid 40481] [client 4.233.80.63:63201] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR87hlH-MuFcoWRjXpbIUAAAAkY"]
[Fri Nov 21 00:02:15.538926 2025] [:error] [pid 40445:tid 40491] [client 4.233.80.63:6734] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR87h1H-MuFcoWRjXpbIWQAAAlA"]
[Fri Nov 21 00:02:16.357749 2025] [:error] [pid 40445:tid 40479] [client 4.233.80.63:6756] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/htaccess.php"] [unique_id "aR87iFH-MuFcoWRjXpbIYQAAAkQ"]
[Fri Nov 21 00:02:17.298776 2025] [:error] [pid 34405:tid 34426] [client 4.233.80.63:60058] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/htaccess.php"] [unique_id "aR87iTFpvu8oRK7ATftcJwAAARM"]
[Fri Nov 21 00:02:18.724797 2025] [:error] [pid 55430:tid 55457] [client 4.233.80.63:60076] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/htaccess.php"] [unique_id "aR87ivPZXaIMEU4pE7s6ZAAAANg"]
[Fri Nov 21 00:02:19.577831 2025] [:error] [pid 55342:tid 55388] [client 4.233.80.63:6738] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/htaccess.php"] [unique_id "aR87i7g6x32Tvk7fIG8e5gAAAFA"]
[Fri Nov 21 00:02:20.632585 2025] [:error] [pid 40445:tid 40489] [client 4.233.80.63:6773] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/readme.php"] [unique_id "aR87jFH-MuFcoWRjXpbIdgAAAk4"]
[Fri Nov 21 00:02:21.527581 2025] [:error] [pid 40537:tid 40561] [client 4.233.80.63:6763] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/readme.php"] [unique_id "aR87jaKlsL5kxTa3c1wY1AAAAtQ"]
[Fri Nov 21 00:02:22.578915 2025] [:error] [pid 40537:tid 40553] [client 4.233.80.63:6421] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/readme.php"] [unique_id "aR87jqKlsL5kxTa3c1wY1QAAAsw"]
[Fri Nov 21 00:02:23.398564 2025] [:error] [pid 40537:tid 40551] [client 4.233.80.63:60673] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/readme.php"] [unique_id "aR87j6KlsL5kxTa3c1wY1gAAAso"]
[Fri Nov 21 00:02:24.750722 2025] [:error] [pid 55430:tid 55435] [client 4.233.80.63:63189] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Cok.php"] [unique_id "aR87kPPZXaIMEU4pE7s6ZwAAAMI"]
[Fri Nov 21 00:02:27.129651 2025] [:error] [pid 34405:tid 34414] [client 4.233.80.63:60063] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Cok.php"] [unique_id "aR87kzFpvu8oRK7ATftcNQAAAQc"]
[Fri Nov 21 00:02:28.284492 2025] [:error] [pid 40415:tid 40427] [client 4.233.80.63:6723] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Cok.php"] [unique_id "aR87lKhjIyLSv09svwPvMAAAAck"]
[Fri Nov 21 00:02:31.245966 2025] [:error] [pid 40415:tid 40435] [client 4.233.80.63:6772] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/Cok.php"] [unique_id "aR87l6hjIyLSv09svwPvMgAAAdE"]
[Fri Nov 21 00:02:33.249009 2025] [:error] [pid 40415:tid 40440] [client 4.233.80.63:6765] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/hob.php"] [unique_id "aR87mahjIyLSv09svwPvMwAAAdY"]
[Fri Nov 21 00:02:34.337469 2025] [:error] [pid 55343:tid 55412] [client 4.233.80.63:6771] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/hob.php"] [unique_id "aR87mlWlO3EnyVMV7w7onwAAAI0"]
[Fri Nov 21 00:02:35.957791 2025] [:error] [pid 55343:tid 55413] [client 4.233.80.63:6776] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/hob.php"] [unique_id "aR87m1WlO3EnyVMV7w7oogAAAI4"]
[Fri Nov 21 00:02:37.653667 2025] [:error] [pid 55340:tid 55352] [client 4.233.80.63:6746] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/hob.php"] [unique_id "aR87nfOxD-NeMydTybDZUwAAAAc"]
[Fri Nov 21 00:02:38.962364 2025] [:error] [pid 55340:tid 55345] [client 4.233.80.63:6744] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kal.php"] [unique_id "aR87nvOxD-NeMydTybDZVAAAAAA"]
[Fri Nov 21 00:02:41.941791 2025] [:error] [pid 40415:tid 40434] [client 4.233.80.63:6402] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kal.php"] [unique_id "aR87oahjIyLSv09svwPvNwAAAdA"]
[Fri Nov 21 00:03:07.634157 2025] [:error] [pid 55340:tid 55359] [client 4.233.80.63:6760] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/403.php"] [unique_id "aR87u_OxD-NeMydTybDZZAAAAA4"]
[Fri Nov 21 00:03:08.822003 2025] [:error] [pid 40508:tid 40527] [client 4.233.80.63:6401] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/403.php"] [unique_id "aR87vKxXNVCMW_ksxPsIBAAAApE"]
[Fri Nov 21 00:03:09.905336 2025] [:error] [pid 40508:tid 40517] [client 4.233.80.63:60078] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/403.php"] [unique_id "aR87vaxXNVCMW_ksxPsIBQAAAoc"]
[Fri Nov 21 00:03:11.068194 2025] [:error] [pid 55430:tid 55448] [client 4.233.80.63:60717] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/403.php"] [unique_id "aR87v_PZXaIMEU4pE7s66gAAAM8"]
[Fri Nov 21 00:03:12.212705 2025] [:error] [pid 40508:tid 40521] [client 4.233.80.63:63199] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/max.php"] [unique_id "aR87wKxXNVCMW_ksxPsIBwAAAos"]
[Fri Nov 21 00:03:13.454891 2025] [:error] [pid 40508:tid 40534] [client 4.233.80.63:6457] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/max.php"] [unique_id "aR87waxXNVCMW_ksxPsICQAAApg"]
[Fri Nov 21 00:03:14.126515 2025] [:error] [pid 55340:tid 55349] [client 4.233.80.63:6778] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/max.php"] [unique_id "aR87wvOxD-NeMydTybDZcgAAAAQ"]
[Fri Nov 21 00:03:15.174594 2025] [:error] [pid 40537:tid 40549] [client 4.233.80.63:60085] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/max.php"] [unique_id "aR87w6KlsL5kxTa3c1wY6gAAAsg"]
[Fri Nov 21 00:03:15.856162 2025] [:error] [pid 40636:tid 40654] [client 4.233.80.63:63179] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/m.php"] [unique_id "aR87wwK8BWUoW3xq0HBCUAAAA44"]
[Fri Nov 21 00:03:17.036169 2025] [:error] [pid 40415:tid 40431] [client 4.233.80.63:6275] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/m.php"] [unique_id "aR87xahjIyLSv09svwPvZwAAAc0"]
[Fri Nov 21 00:03:18.827893 2025] [:error] [pid 55430:tid 55437] [client 4.233.80.63:63200] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/m.php"] [unique_id "aR87xvPZXaIMEU4pE7s67AAAAMQ"]
[Fri Nov 21 00:03:20.142274 2025] [:error] [pid 55430:tid 55453] [client 4.233.80.63:6282] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/m.php"] [unique_id "aR87yPPZXaIMEU4pE7s67gAAANQ"]
[Fri Nov 21 00:03:21.010582 2025] [:error] [pid 34405:tid 34418] [client 4.233.80.63:6410] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/post.php"] [unique_id "aR87yTFpvu8oRK7ATftchgAAAQs"]
[Fri Nov 21 00:03:21.703954 2025] [:error] [pid 55342:tid 55374] [client 4.233.80.63:60699] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/post.php"] [unique_id "aR87ybg6x32Tvk7fIG8fGgAAAEI"]
[Fri Nov 21 00:03:23.018705 2025] [:error] [pid 40508:tid 40522] [client 4.233.80.63:6758] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/post.php"] [unique_id "aR87y6xXNVCMW_ksxPsIEQAAAow"]
[Fri Nov 21 00:03:23.989034 2025] [:error] [pid 40537:tid 40565] [client 4.233.80.63:60057] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/post.php"] [unique_id "aR87y6KlsL5kxTa3c1wY7gAAAtg"]
[Fri Nov 21 00:03:24.969605 2025] [:error] [pid 40415:tid 40427] [client 4.233.80.63:63218] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes.php"] [unique_id "aR87zKhjIyLSv09svwPvawAAAck"]
[Fri Nov 21 00:03:26.053776 2025] [:error] [pid 40415:tid 40438] [client 4.233.80.63:60047] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes.php"] [unique_id "aR87zqhjIyLSv09svwPvbQAAAdQ"]
[Fri Nov 21 00:03:27.250381 2025] [:error] [pid 40537:tid 40542] [client 4.233.80.63:6752] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes.php"] [unique_id "aR87z6KlsL5kxTa3c1wY8QAAAsE"]
[Fri Nov 21 00:03:28.606564 2025] [:error] [pid 40415:tid 40420] [client 4.233.80.63:60054] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes.php"] [unique_id "aR870KhjIyLSv09svwPvbwAAAcI"]
[Fri Nov 21 00:03:30.542366 2025] [:error] [pid 34405:tid 34428] [client 4.233.80.63:60069] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR870jFpvu8oRK7ATftctgAAARU"]
[Fri Nov 21 00:03:31.678254 2025] [:error] [pid 55343:tid 55416] [client 4.233.80.63:63222] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR8701WlO3EnyVMV7w7pLQAAAJE"]
[Fri Nov 21 00:03:32.683989 2025] [:error] [pid 40415:tid 40431] [client 4.233.80.63:60090] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR871KhjIyLSv09svwPvdQAAAc0"]
[Fri Nov 21 00:03:33.446487 2025] [:error] [pid 40636:tid 40663] [client 4.233.80.63:6749] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aR871QK8BWUoW3xq0HBCWAAAA5c"]
[Fri Nov 21 00:03:34.766499 2025] [:error] [pid 55340:tid 55367] [client 4.233.80.63:63231] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR871vOxD-NeMydTybDZgAAAABY"]
[Fri Nov 21 00:03:35.838658 2025] [:error] [pid 40445:tid 40490] [client 4.233.80.63:63195] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR8711H-MuFcoWRjXpbIzwAAAk8"]
[Fri Nov 21 00:03:37.334616 2025] [:error] [pid 55340:tid 55368] [client 4.233.80.63:60035] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR872fOxD-NeMydTybDZgQAAABc"]
[Fri Nov 21 00:03:38.974677 2025] [:error] [pid 40636:tid 40658] [client 4.233.80.63:63182] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aR872gK8BWUoW3xq0HBCWQAAA5I"]
[Fri Nov 21 00:03:39.943545 2025] [:error] [pid 55430:tid 55442] [client 4.233.80.63:6742] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR872_PZXaIMEU4pE7s69QAAAMk"]
[Fri Nov 21 00:03:40.925152 2025] [:error] [pid 55430:tid 55443] [client 4.233.80.63:63224] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR873PPZXaIMEU4pE7s69wAAAMo"]
[Fri Nov 21 00:03:42.166885 2025] [:error] [pid 55430:tid 55437] [client 4.233.80.63:60079] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR873vPZXaIMEU4pE7s6-gAAAMQ"]
[Fri Nov 21 00:03:43.392574 2025] [:error] [pid 55340:tid 55357] [client 4.233.80.63:6779] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aR873_OxD-NeMydTybDZhgAAAAw"]
[Fri Nov 21 00:03:44.281004 2025] [:error] [pid 40636:tid 40650] [client 4.233.80.63:60048] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR874AK8BWUoW3xq0HBCXQAAA4o"]
[Fri Nov 21 00:03:45.400991 2025] [:error] [pid 55342:tid 55388] [client 4.233.80.63:63209] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR874bg6x32Tvk7fIG8fKAAAAFA"]
[Fri Nov 21 00:03:46.277488 2025] [:error] [pid 40445:tid 40491] [client 4.233.80.63:6745] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR874lH-MuFcoWRjXpbI2AAAAlA"]
[Fri Nov 21 00:03:47.540592 2025] [:error] [pid 55342:tid 55389] [client 4.233.80.63:6411] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aR8747g6x32Tvk7fIG8fKQAAAFE"]
[Fri Nov 21 00:03:48.572623 2025] [:error] [pid 55343:tid 55414] [client 4.233.80.63:60083] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/click.php"] [unique_id "aR875FWlO3EnyVMV7w7pNQAAAI8"]
[Fri Nov 21 00:03:50.487178 2025] [:error] [pid 40445:tid 40482] [client 4.233.80.63:63221] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/click.php"] [unique_id "aR875lH-MuFcoWRjXpbI2QAAAkc"]
[Fri Nov 21 00:03:51.626630 2025] [:error] [pid 55340:tid 55366] [client 4.233.80.63:6724] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/click.php"] [unique_id "aR875_OxD-NeMydTybDZiQAAABU"]
[Fri Nov 21 00:03:53.382065 2025] [:error] [pid 34405:tid 34423] [client 4.233.80.63:63208] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/click.php"] [unique_id "aR876TFpvu8oRK7ATftcxQAAARA"]
[Fri Nov 21 00:03:54.344568 2025] [:error] [pid 34405:tid 34428] [client 4.233.80.63:6775] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/install.php"] [unique_id "aR876jFpvu8oRK7ATftcxwAAARU"]
[Fri Nov 21 00:03:55.826077 2025] [:error] [pid 40415:tid 40430] [client 4.233.80.63:60064] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/install.php"] [unique_id "aR8766hjIyLSv09svwPvgAAAAcw"]
[Fri Nov 21 00:03:57.022895 2025] [:error] [pid 34405:tid 34410] [client 4.233.80.63:63175] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/install.php"] [unique_id "aR877TFpvu8oRK7ATftcyQAAAQM"]
[Fri Nov 21 00:03:58.771447 2025] [:error] [pid 40445:tid 40484] [client 4.233.80.63:6420] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/install.php"] [unique_id "aR877lH-MuFcoWRjXpbI3gAAAkk"]
[Fri Nov 21 00:03:59.725763 2025] [:error] [pid 40508:tid 40532] [client 4.233.80.63:6447] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aR8776xXNVCMW_ksxPsInQAAApY"]
[Fri Nov 21 00:04:00.693087 2025] [:error] [pid 55342:tid 55380] [client 4.233.80.63:60042] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aR878Lg6x32Tvk7fIG8fMgAAAEg"]
[Fri Nov 21 00:04:02.226465 2025] [:error] [pid 40445:tid 40497] [client 4.233.80.63:6449] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aR878lH-MuFcoWRjXpbI4wAAAlY"]
[Fri Nov 21 00:04:03.222481 2025] [:error] [pid 55340:tid 55363] [client 4.233.80.63:60080] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aR878_OxD-NeMydTybDZjQAAABI"]
[Fri Nov 21 00:04:04.666141 2025] [:error] [pid 40636:tid 40646] [client 4.233.80.63:6755] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/simple.php"] [unique_id "aR879AK8BWUoW3xq0HBCagAAA4Y"]
[Fri Nov 21 00:04:20.475621 2025] [:error] [pid 40445:tid 40497] [client 4.233.80.63:6417] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aR88BFH-MuFcoWRjXpbI_wAAAlY"]
[Fri Nov 21 00:04:31.696472 2025] [:error] [pid 55342:tid 55396] [client 4.233.80.63:63191] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aR88D7g6x32Tvk7fIG8fPwAAAFg"]
[Fri Nov 21 00:04:32.398488 2025] [:error] [pid 40636:tid 40643] [client 4.233.80.63:60055] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aR88EAK8BWUoW3xq0HBCwwAAA4M"]
[Fri Nov 21 00:04:33.584645 2025] [:error] [pid 34405:tid 34427] [client 4.233.80.63:63206] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aR88ETFpvu8oRK7ATftc1QAAARQ"]
[Fri Nov 21 00:04:34.836304 2025] [:error] [pid 55340:tid 55345] [client 4.233.80.63:60066] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aR88EvOxD-NeMydTybDZpAAAAAA"]
[Fri Nov 21 00:04:36.080216 2025] [:error] [pid 40415:tid 40428] [client 4.233.80.63:6782] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88FKhjIyLSv09svwPvlAAAAco"]
[Fri Nov 21 00:04:36.909939 2025] [:error] [pid 40445:tid 40492] [client 4.233.80.63:60046] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88FFH-MuFcoWRjXpbJCwAAAlE"]
[Fri Nov 21 00:04:38.384622 2025] [:error] [pid 40537:tid 40551] [client 4.233.80.63:6290] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88FqKlsL5kxTa3c1wZIQAAAso"]
[Fri Nov 21 00:04:39.143712 2025] [:error] [pid 40445:tid 40495] [client 4.233.80.63:6735] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88F1H-MuFcoWRjXpbJDgAAAlQ"]
[Fri Nov 21 00:04:40.298714 2025] [:error] [pid 55343:tid 55412] [client 4.233.80.63:60073] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ioxi-o.php"] [unique_id "aR88GFWlO3EnyVMV7w7pVwAAAI0"]
[Fri Nov 21 00:04:41.707450 2025] [:error] [pid 40415:tid 40438] [client 4.233.80.63:60678] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ioxi-o.php"] [unique_id "aR88GahjIyLSv09svwPvmAAAAdQ"]
[Fri Nov 21 00:04:42.333170 2025] [:error] [pid 40415:tid 40433] [client 4.233.80.63:6453] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ioxi-o.php"] [unique_id "aR88GqhjIyLSv09svwPvmQAAAc8"]
[Fri Nov 21 00:04:43.060260 2025] [:error] [pid 40415:tid 40440] [client 4.233.80.63:6761] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ioxi-o.php"] [unique_id "aR88G6hjIyLSv09svwPvmgAAAdY"]
[Fri Nov 21 00:04:44.035360 2025] [:error] [pid 55340:tid 55363] [client 4.233.80.63:63217] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aR88HPOxD-NeMydTybDZqQAAABI"]
[Fri Nov 21 00:04:45.505262 2025] [:error] [pid 40537:tid 40562] [client 4.233.80.63:63190] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aR88HaKlsL5kxTa3c1wZJAAAAtU"]
[Fri Nov 21 00:04:47.185808 2025] [:error] [pid 55430:tid 55456] [client 4.233.80.63:6428] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aR88H_PZXaIMEU4pE7s7LgAAANc"]
[Fri Nov 21 00:04:48.883808 2025] [:error] [pid 40636:tid 40656] [client 4.233.80.63:60043] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aR88IAK8BWUoW3xq0HBC3gAAA5A"]
[Fri Nov 21 00:04:50.148202 2025] [:error] [pid 40537:tid 40544] [client 4.233.80.63:63228] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/function.php"] [unique_id "aR88IqKlsL5kxTa3c1wZKAAAAsM"]
[Fri Nov 21 00:04:51.056563 2025] [:error] [pid 40508:tid 40510] [client 4.233.80.63:60061] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/function.php"] [unique_id "aR88I6xXNVCMW_ksxPsJDQAAAoA"]
[Fri Nov 21 00:04:52.025340 2025] [:error] [pid 40508:tid 40517] [client 4.233.80.63:63207] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/function.php"] [unique_id "aR88JKxXNVCMW_ksxPsJDwAAAoc"]
[Fri Nov 21 00:04:53.330059 2025] [:error] [pid 40445:tid 40479] [client 4.233.80.63:61980] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/function.php"] [unique_id "aR88JVH-MuFcoWRjXpbJGAAAAkQ"]
[Fri Nov 21 00:04:54.418090 2025] [:error] [pid 40508:tid 40531] [client 4.233.80.63:6754] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0x.php"] [unique_id "aR88JqxXNVCMW_ksxPsJEwAAApU"]
[Fri Nov 21 00:04:55.312152 2025] [:error] [pid 34405:tid 34421] [client 4.233.80.63:63223] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0x.php"] [unique_id "aR88JzFpvu8oRK7ATftc4gAAAQ4"]
[Fri Nov 21 00:04:56.262394 2025] [:error] [pid 40445:tid 40487] [client 4.233.80.63:6431] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0x.php"] [unique_id "aR88KFH-MuFcoWRjXpbJGwAAAkw"]
[Fri Nov 21 00:04:56.881493 2025] [:error] [pid 34405:tid 34413] [client 4.233.80.63:6769] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/0x.php"] [unique_id "aR88KDFpvu8oRK7ATftc4wAAAQY"]
[Fri Nov 21 00:04:58.031427 2025] [:error] [pid 55342:tid 55392] [client 4.233.80.63:60687] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css.php"] [unique_id "aR88Krg6x32Tvk7fIG8fsAAAAFQ"]
[Fri Nov 21 00:04:58.969771 2025] [:error] [pid 40445:tid 40475] [client 4.233.80.63:60707] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css.php"] [unique_id "aR88KlH-MuFcoWRjXpbJHAAAAkA"]
[Fri Nov 21 00:04:59.637334 2025] [:error] [pid 34405:tid 34423] [client 4.233.80.63:63202] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css.php"] [unique_id "aR88KzFpvu8oRK7ATftc5wAAARA"]
[Fri Nov 21 00:05:00.540646 2025] [:error] [pid 40445:tid 40496] [client 4.233.80.63:60084] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css.php"] [unique_id "aR88LFH-MuFcoWRjXpbJJAAAAlU"]
[Fri Nov 21 00:05:01.519263 2025] [:error] [pid 40445:tid 40490] [client 4.233.80.63:63192] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aR88LVH-MuFcoWRjXpbJKQAAAk8"]
[Fri Nov 21 00:05:02.272833 2025] [:error] [pid 55430:tid 55444] [client 4.233.80.63:63211] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aR88LvPZXaIMEU4pE7s7NAAAAMs"]
[Fri Nov 21 00:05:03.063665 2025] [:error] [pid 40415:tid 40436] [client 4.233.80.63:60041] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aR88L6hjIyLSv09svwPvqAAAAdI"]
[Fri Nov 21 00:05:04.128351 2025] [:error] [pid 55342:tid 55390] [client 4.233.80.63:60677] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/222.php"] [unique_id "aR88MLg6x32Tvk7fIG8fsQAAAFI"]
[Fri Nov 21 00:05:05.252450 2025] [:error] [pid 40508:tid 40531] [client 4.233.80.63:6448] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/index.php"] [unique_id "aR88MaxXNVCMW_ksxPsJUQAAApU"]
[Fri Nov 21 00:05:06.258305 2025] [:error] [pid 40445:tid 40478] [client 4.233.80.63:63185] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/index.php"] [unique_id "aR88MlH-MuFcoWRjXpbJLgAAAkM"]
[Fri Nov 21 00:05:07.306464 2025] [:error] [pid 55342:tid 55382] [client 4.233.80.63:60713] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/index.php"] [unique_id "aR88M7g6x32Tvk7fIG8ftAAAAEo"]
[Fri Nov 21 00:05:07.964719 2025] [:error] [pid 40445:tid 40479] [client 4.233.80.63:60700] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/index.php"] [unique_id "aR88M1H-MuFcoWRjXpbJMQAAAkQ"]
[Fri Nov 21 00:05:09.299019 2025] [:error] [pid 55342:tid 55375] [client 4.233.80.63:60038] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/1.php"] [unique_id "aR88Nbg6x32Tvk7fIG8ftgAAAEM"]
[Fri Nov 21 00:05:10.221588 2025] [:error] [pid 40445:tid 40487] [client 4.233.80.63:6728] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/1.php"] [unique_id "aR88NlH-MuFcoWRjXpbJNAAAAkw"]
[Fri Nov 21 00:05:11.212001 2025] [:error] [pid 34405:tid 34426] [client 4.233.80.63:63212] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/1.php"] [unique_id "aR88NzFpvu8oRK7ATftc6gAAARM"]
[Fri Nov 21 00:05:12.296277 2025] [:error] [pid 55430:tid 55456] [client 4.233.80.63:63204] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/1.php"] [unique_id "aR88OPPZXaIMEU4pE7s7OwAAANc"]
[Fri Nov 21 00:05:13.216507 2025] [:error] [pid 55343:tid 55411] [client 4.233.80.63:6783] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin.php"] [unique_id "aR88OVWlO3EnyVMV7w7pZAAAAIw"]
[Fri Nov 21 00:05:14.165834 2025] [:error] [pid 40415:tid 40435] [client 4.233.80.63:63168] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin.php"] [unique_id "aR88OqhjIyLSv09svwPvsAAAAdE"]
[Fri Nov 21 00:05:15.055710 2025] [:error] [pid 40636:tid 40663] [client 4.233.80.63:60693] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin.php"] [unique_id "aR88OwK8BWUoW3xq0HBC5QAAA5c"]
[Fri Nov 21 00:05:15.861912 2025] [:error] [pid 34405:tid 34421] [client 4.233.80.63:6406] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin.php"] [unique_id "aR88OzFpvu8oRK7ATftc7QAAAQ4"]
[Fri Nov 21 00:05:16.727257 2025] [:error] [pid 40445:tid 40481] [client 4.233.80.63:6409] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR88PFH-MuFcoWRjXpbJOQAAAkY"]
[Fri Nov 21 00:05:17.833960 2025] [:error] [pid 40415:tid 40431] [client 4.233.80.63:60062] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR88PahjIyLSv09svwPvywAAAc0"]
[Fri Nov 21 00:05:19.173447 2025] [:error] [pid 40415:tid 40425] [client 4.233.80.63:60056] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR88P6hjIyLSv09svwPv1QAAAcc"]
[Fri Nov 21 00:05:20.142064 2025] [:error] [pid 55342:tid 55395] [client 4.233.80.63:6452] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aR88QLg6x32Tvk7fIG8fugAAAFc"]
[Fri Nov 21 00:05:21.003430 2025] [:error] [pid 55340:tid 55346] [client 4.233.80.63:6451] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/classwithtostring.php"] [unique_id "aR88QfOxD-NeMydTybDZvAAAAAE"]
[Fri Nov 21 00:05:21.837423 2025] [:error] [pid 40537:tid 40565] [client 4.233.80.63:6413] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/classwithtostring.php"] [unique_id "aR88QaKlsL5kxTa3c1wZLgAAAtg"]
[Fri Nov 21 00:05:22.451767 2025] [:error] [pid 40445:tid 40487] [client 4.233.80.63:6280] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/classwithtostring.php"] [unique_id "aR88QlH-MuFcoWRjXpbJQQAAAkw"]
[Fri Nov 21 00:05:23.440649 2025] [:error] [pid 40445:tid 40475] [client 4.233.80.63:60704] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/classwithtostring.php"] [unique_id "aR88Q1H-MuFcoWRjXpbJQwAAAkA"]
[Fri Nov 21 00:05:24.457371 2025] [:error] [pid 40415:tid 40421] [client 4.233.80.63:6419] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/abcd.php"] [unique_id "aR88RKhjIyLSv09svwPv8AAAAcM"]
[Fri Nov 21 00:05:25.136705 2025] [:error] [pid 40636:tid 40655] [client 4.233.80.63:60697] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/abcd.php"] [unique_id "aR88RQK8BWUoW3xq0HBC6AAAA48"]
[Fri Nov 21 00:05:25.977774 2025] [:error] [pid 55430:tid 55438] [client 4.233.80.63:60074] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/abcd.php"] [unique_id "aR88RfPZXaIMEU4pE7s7QwAAAMU"]
[Fri Nov 21 00:05:26.655487 2025] [:error] [pid 40508:tid 40525] [client 4.233.80.63:6759] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/abcd.php"] [unique_id "aR88RqxXNVCMW_ksxPsJjwAAAo8"]
[Fri Nov 21 00:05:27.448895 2025] [:error] [pid 40445:tid 40481] [client 4.233.80.63:60045] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/dropdown.php"] [unique_id "aR88R1H-MuFcoWRjXpbJRQAAAkY"]
[Fri Nov 21 00:05:28.195514 2025] [:error] [pid 40415:tid 40426] [client 4.233.80.63:6426] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/dropdown.php"] [unique_id "aR88SKhjIyLSv09svwPwCgAAAcg"]
[Fri Nov 21 00:05:48.994636 2025] [:error] [pid 40537:tid 40545] [client 4.233.80.63:6770] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/fm.php"] [unique_id "aR88XKKlsL5kxTa3c1wZQQAAAsQ"]
[Fri Nov 21 00:05:59.797198 2025] [:error] [pid 55340:tid 55364] [client 4.233.80.63:6739] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR88Z_OxD-NeMydTybDZ4QAAABM"]
[Fri Nov 21 00:06:01.167104 2025] [:error] [pid 55342:tid 55394] [client 4.233.80.63:63171] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR88abg6x32Tvk7fIG8f2QAAAFY"]
[Fri Nov 21 00:06:02.258232 2025] [:error] [pid 40636:tid 40640] [client 4.233.80.63:6780] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR88agK8BWUoW3xq0HBC8QAAA4A"]
[Fri Nov 21 00:06:03.497740 2025] [:error] [pid 55342:tid 55378] [client 4.233.80.63:60089] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR88a7g6x32Tvk7fIG8f3QAAAEY"]
[Fri Nov 21 00:06:04.337219 2025] [:error] [pid 55343:tid 55415] [client 4.233.80.63:60071] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR88bFWlO3EnyVMV7w7p1wAAAJA"]
[Fri Nov 21 00:06:05.132723 2025] [:error] [pid 34405:tid 34416] [client 4.233.80.63:60718] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR88bTFpvu8oRK7ATftc_wAAAQk"]
[Fri Nov 21 00:06:06.168831 2025] [:error] [pid 40445:tid 40491] [client 4.233.80.63:60040] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR88blH-MuFcoWRjXpbJZQAAAlA"]
[Fri Nov 21 00:06:06.807223 2025] [:error] [pid 40636:tid 40656] [client 4.233.80.63:63177] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aR88bgK8BWUoW3xq0HBC8wAAA5A"]
[Fri Nov 21 00:06:07.834077 2025] [:error] [pid 55342:tid 55379] [client 4.233.80.63:60072] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR88b7g6x32Tvk7fIG8f3wAAAEc"]
[Fri Nov 21 00:06:08.907876 2025] [:error] [pid 55342:tid 55381] [client 4.233.80.63:6463] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR88cLg6x32Tvk7fIG8f4gAAAEk"]
[Fri Nov 21 00:06:09.729470 2025] [:error] [pid 55342:tid 55389] [client 4.233.80.63:6751] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR88cbg6x32Tvk7fIG8f5QAAAFE"]
[Fri Nov 21 00:06:10.687510 2025] [:error] [pid 55342:tid 55376] [client 4.233.80.63:6427] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aR88crg6x32Tvk7fIG8f6AAAAEQ"]
[Fri Nov 21 00:06:11.835466 2025] [:error] [pid 34405:tid 34431] [client 4.233.80.63:6729] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aR88czFpvu8oRK7ATftdAgAAARg"]
[Fri Nov 21 00:06:12.686816 2025] [:error] [pid 40508:tid 40528] [client 4.233.80.63:6766] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aR88dKxXNVCMW_ksxPsJnQAAApI"]
[Fri Nov 21 00:06:13.580667 2025] [:error] [pid 55343:tid 55423] [client 4.233.80.63:6748] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aR88dVWlO3EnyVMV7w7p2wAAAJg"]
[Fri Nov 21 00:06:14.409317 2025] [:error] [pid 40415:tid 40432] [client 4.233.80.63:6777] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aR88dqhjIyLSv09svwPwPAAAAc4"]
[Fri Nov 21 00:06:15.104127 2025] [:error] [pid 40445:tid 40498] [client 4.233.80.63:60034] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js/fm.php"] [unique_id "aR88d1H-MuFcoWRjXpbJcQAAAlc"]
[Fri Nov 21 00:06:16.460694 2025] [:error] [pid 55343:tid 55414] [client 4.233.80.63:6276] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js/fm.php"] [unique_id "aR88eFWlO3EnyVMV7w7p3wAAAI8"]
[Fri Nov 21 00:06:17.242088 2025] [:error] [pid 40445:tid 40476] [client 4.233.80.63:60676] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js/fm.php"] [unique_id "aR88eVH-MuFcoWRjXpbJfAAAAkE"]
[Fri Nov 21 00:06:18.564545 2025] [:error] [pid 55342:tid 55391] [client 4.233.80.63:6753] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/js/fm.php"] [unique_id "aR88erg6x32Tvk7fIG8f7gAAAFM"]
[Fri Nov 21 00:06:19.411037 2025] [:error] [pid 40508:tid 40524] [client 4.233.80.63:6418] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/item.php"] [unique_id "aR88e6xXNVCMW_ksxPsJoQAAAo4"]
[Fri Nov 21 00:06:20.442006 2025] [:error] [pid 40636:tid 40663] [client 4.233.80.63:6736] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/item.php"] [unique_id "aR88fAK8BWUoW3xq0HBC-wAAA5c"]
[Fri Nov 21 00:06:21.704310 2025] [:error] [pid 40537:tid 40545] [client 4.233.80.63:63229] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/item.php"] [unique_id "aR88faKlsL5kxTa3c1wZTQAAAsQ"]
[Fri Nov 21 00:06:22.582424 2025] [:error] [pid 40537:tid 40560] [client 4.233.80.63:63220] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/item.php"] [unique_id "aR88fqKlsL5kxTa3c1wZTgAAAtM"]
[Fri Nov 21 00:06:23.740886 2025] [:error] [pid 40415:tid 40439] [client 4.233.80.63:6316] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR88f6hjIyLSv09svwPwQQAAAdU"]
[Fri Nov 21 00:06:24.601397 2025] [:error] [pid 55430:tid 55437] [client 4.233.80.63:6434] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR88gPPZXaIMEU4pE7s7WwAAAMQ"]
[Fri Nov 21 00:06:25.289439 2025] [:error] [pid 40636:tid 40640] [client 4.233.80.63:6731] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR88gQK8BWUoW3xq0HBC_QAAA4A"]
[Fri Nov 21 00:06:26.127949 2025] [:error] [pid 55342:tid 55376] [client 4.233.80.63:6747] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aR88grg6x32Tvk7fIG8f8wAAAEQ"]
[Fri Nov 21 00:06:26.949899 2025] [:error] [pid 40508:tid 40518] [client 4.233.80.63:60706] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88gqxXNVCMW_ksxPsJpgAAAog"]
[Fri Nov 21 00:06:27.857070 2025] [:error] [pid 34405:tid 34420] [client 4.233.80.63:60675] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88gzFpvu8oRK7ATftdCQAAAQ0"]
[Fri Nov 21 00:06:28.673329 2025] [:error] [pid 40508:tid 40528] [client 4.233.80.63:6403] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88hKxXNVCMW_ksxPsJqQAAApI"]
[Fri Nov 21 00:06:29.473440 2025] [:error] [pid 40445:tid 40490] [client 4.233.80.63:60094] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aR88hVH-MuFcoWRjXpbJywAAAk8"]
[Fri Nov 21 00:06:30.647313 2025] [:error] [pid 55342:tid 55373] [client 4.233.80.63:63188] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aR88hrg6x32Tvk7fIG8f9wAAAEE"]
[Fri Nov 21 00:06:31.290275 2025] [:error] [pid 40415:tid 40431] [client 4.233.80.63:60725] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aR88h6hjIyLSv09svwPwRwAAAc0"]
[Fri Nov 21 00:06:31.967196 2025] [:error] [pid 55430:tid 55439] [client 4.233.80.63:60033] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aR88h_PZXaIMEU4pE7s7YQAAAMY"]
[Fri Nov 21 00:06:32.737229 2025] [:error] [pid 34405:tid 34431] [client 4.233.80.63:60050] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aR88iDFpvu8oRK7ATftdDAAAARg"]
[Fri Nov 21 00:06:33.369714 2025] [:error] [pid 55343:tid 55408] [client 4.233.80.63:63172] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR88iVWlO3EnyVMV7w7p5wAAAIk"]
[Fri Nov 21 00:06:34.839146 2025] [:error] [pid 40636:tid 40647] [client 4.233.80.63:6287] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR88igK8BWUoW3xq0HBDAgAAA4c"]
[Fri Nov 21 00:06:35.725400 2025] [:error] [pid 40445:tid 40476] [client 4.233.80.63:6438] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR88i1H-MuFcoWRjXpbJ7QAAAkE"]
[Fri Nov 21 00:06:36.485923 2025] [:error] [pid 40415:tid 40438] [client 4.233.80.63:6414] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aR88jKhjIyLSv09svwPwSgAAAdQ"]
[Fri Nov 21 00:06:37.586248 2025] [:error] [pid 40445:tid 40489] [client 4.233.80.63:6319] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sx.php"] [unique_id "aR88jVH-MuFcoWRjXpbJ8wAAAk4"]
[Fri Nov 21 00:06:39.406866 2025] [:error] [pid 40445:tid 40479] [client 4.233.80.63:60068] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sx.php"] [unique_id "aR88j1H-MuFcoWRjXpbJ-AAAAkQ"]
[Fri Nov 21 00:06:40.236760 2025] [:error] [pid 34405:tid 34426] [client 4.233.80.63:6737] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sx.php"] [unique_id "aR88kDFpvu8oRK7ATftdEAAAARM"]
[Fri Nov 21 00:06:41.116115 2025] [:error] [pid 40508:tid 40514] [client 4.233.80.63:60049] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/sx.php"] [unique_id "aR88kaxXNVCMW_ksxPsJsQAAAoQ"]
[Fri Nov 21 00:06:42.316617 2025] [:error] [pid 40508:tid 40531] [client 4.233.80.63:6743] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR88kqxXNVCMW_ksxPsJtwAAApU"]
[Fri Nov 21 00:06:43.005285 2025] [:error] [pid 40415:tid 40437] [client 4.233.80.63:60689] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR88k6hjIyLSv09svwPwUAAAAdM"]
[Fri Nov 21 00:06:43.977853 2025] [:error] [pid 40636:tid 40663] [client 4.233.80.63:63225] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR88kwK8BWUoW3xq0HBDBgAAA5c"]
[Fri Nov 21 00:06:45.360297 2025] [:error] [pid 55430:tid 55438] [client 4.233.80.63:6313] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aR88lfPZXaIMEU4pE7s7ZgAAAMU"]
[Fri Nov 21 00:06:47.163134 2025] [:error] [pid 40537:tid 40544] [client 4.233.80.63:63196] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/article.php"] [unique_id "aR88l6KlsL5kxTa3c1wZewAAAsM"]
[Fri Nov 21 00:06:48.950436 2025] [:error] [pid 40445:tid 40490] [client 4.233.80.63:6762] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/article.php"] [unique_id "aR88mFH-MuFcoWRjXpbKAwAAAk8"]
[Fri Nov 21 00:06:50.747074 2025] [:error] [pid 40415:tid 40423] [client 4.233.80.63:60051] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/article.php"] [unique_id "aR88mqhjIyLSv09svwPwVAAAAcU"]
[Fri Nov 21 00:06:51.919421 2025] [:error] [pid 55342:tid 55386] [client 4.233.80.63:60679] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/article.php"] [unique_id "aR88m7g6x32Tvk7fIG8gCAAAAE4"]
[Fri Nov 21 00:06:52.976478 2025] [:error] [pid 40415:tid 40422] [client 4.233.80.63:63213] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/alfa.php"] [unique_id "aR88nKhjIyLSv09svwPwVgAAAcQ"]
[Fri Nov 21 00:06:54.406626 2025] [:error] [pid 55342:tid 55387] [client 4.233.80.63:6727] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/alfa.php"] [unique_id "aR88nrg6x32Tvk7fIG8gCQAAAE8"]
[Fri Nov 21 00:06:56.224043 2025] [:error] [pid 55340:tid 55349] [client 4.233.80.63:60070] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/alfa.php"] [unique_id "aR88oPOxD-NeMydTybDaSQAAAAQ"]
[Fri Nov 21 00:07:22.891973 2025] [:error] [pid 55430:tid 55445] [client 4.233.80.63:6437] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aR88uvPZXaIMEU4pE7s7ewAAAMw"]
[Fri Nov 21 00:07:47.460310 2025] [:error] [pid 34405:tid 34425] [client 4.233.80.63:60682] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR880zFpvu8oRK7ATftdOAAAARI"]
[Fri Nov 21 00:07:52.608717 2025] [:error] [pid 40445:tid 40498] [client 4.233.80.63:63214] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR882FH-MuFcoWRjXpbKRAAAAlc"]
[Fri Nov 21 00:07:54.068009 2025] [:error] [pid 40508:tid 40512] [client 4.233.80.63:60060] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR882qxXNVCMW_ksxPsKBwAAAoI"]
[Fri Nov 21 00:07:55.210828 2025] [:error] [pid 55342:tid 55375] [client 4.233.80.63:6282] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR8827g6x32Tvk7fIG8gJAAAAEM"]
[Fri Nov 21 00:07:57.060046 2025] [:error] [pid 34405:tid 34421] [client 4.233.80.63:60703] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aR883TFpvu8oRK7ATftdPAAAAQ4"]
[Fri Nov 21 00:07:58.029511 2025] [:error] [pid 40445:tid 40494] [client 4.233.80.63:63189] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aR883lH-MuFcoWRjXpbKTgAAAlM"]
[Fri Nov 21 00:07:58.667193 2025] [:error] [pid 55430:tid 55433] [client 4.233.80.63:6725] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR883vPZXaIMEU4pE7s7iQAAAMA"]
[Fri Nov 21 00:07:59.340180 2025] [:error] [pid 55430:tid 55446] [client 4.233.80.63:6730] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR883_PZXaIMEU4pE7s7jAAAAM0"]
[Fri Nov 21 00:08:00.017088 2025] [:error] [pid 40537:tid 40559] [client 4.233.80.63:63224] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aR884KKlsL5kxTa3c1wZzwAAAtI"]
[Fri Nov 21 00:08:00.730888 2025] [:error] [pid 40636:tid 40646] [client 4.233.80.63:65129] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR884AK8BWUoW3xq0HBDHwAAA4Y"]
[Fri Nov 21 00:08:01.504049 2025] [:error] [pid 40445:tid 40487] [client 4.233.80.63:6745] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR884VH-MuFcoWRjXpbKTwAAAkw"]
[Fri Nov 21 00:08:02.319374 2025] [:error] [pid 40508:tid 40526] [client 4.233.80.63:6432] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR884qxXNVCMW_ksxPsKCgAAApA"]
[Fri Nov 21 00:08:03.116751 2025] [:error] [pid 34405:tid 34420] [client 4.233.80.63:60726] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aR884zFpvu8oRK7ATftdPwAAAQ0"]
[Fri Nov 21 00:08:04.059036 2025] [:error] [pid 34405:tid 34425] [client 4.233.80.63:6455] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR885DFpvu8oRK7ATftdQgAAARI"]
[Fri Nov 21 00:08:04.880174 2025] [:error] [pid 55340:tid 55345] [client 4.233.80.63:6779] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR885POxD-NeMydTybDa0gAAAAA"]
[Fri Nov 21 00:08:05.689840 2025] [:error] [pid 55343:tid 55419] [client 4.233.80.63:6767] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR885VWlO3EnyVMV7w7qbgAAAJQ"]
[Fri Nov 21 00:08:06.456813 2025] [:error] [pid 34405:tid 34418] [client 4.233.80.63:6772] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aR885jFpvu8oRK7ATftdSQAAAQs"]
[Fri Nov 21 00:08:07.220199 2025] [:error] [pid 40636:tid 40648] [client 4.233.80.63:6277] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aR885wK8BWUoW3xq0HBDIAAAA4g"]
[Fri Nov 21 00:08:08.069937 2025] [:error] [pid 55430:tid 55448] [client 4.233.80.63:63205] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aR886PPZXaIMEU4pE7s7zwAAAM8"]
[Fri Nov 21 00:08:08.832607 2025] [:error] [pid 40445:tid 40490] [client 4.233.80.63:63186] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/index/function.php"] [unique_id "aR886FH-MuFcoWRjXpbKagAAAk8"]
[Fri Nov 21 00:08:09.713877 2025] [:error] [pid 40636:tid 40642] [client 4.233.80.63:6272] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/index/function.php"] [unique_id "aR886QK8BWUoW3xq0HBDIwAAA4I"]
[Fri Nov 21 00:08:10.549678 2025] [:error] [pid 55430:tid 55452] [client 4.233.80.63:60075] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/index/function.php"] [unique_id "aR886vPZXaIMEU4pE7s70AAAANM"]
[Fri Nov 21 00:08:12.106266 2025] [:error] [pid 40445:tid 40478] [client 4.233.80.63:60076] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/index/function.php"] [unique_id "aR887FH-MuFcoWRjXpbKbAAAAkM"]
[Fri Nov 21 00:08:12.845806 2025] [:error] [pid 55343:tid 55412] [client 4.233.80.63:6771] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR887FWlO3EnyVMV7w7qdAAAAI0"]
[Fri Nov 21 00:08:13.696654 2025] [:error] [pid 40508:tid 40521] [client 4.233.80.63:6422] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR887axXNVCMW_ksxPsKHgAAAos"]
[Fri Nov 21 00:08:14.538234 2025] [:error] [pid 40636:tid 40654] [client 4.233.80.63:6457] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR887gK8BWUoW3xq0HBDJgAAA44"]
[Fri Nov 21 00:08:16.560197 2025] [:error] [pid 55430:tid 55440] [client 4.233.80.63:60036] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aR888PPZXaIMEU4pE7s74gAAAMc"]
[Fri Nov 21 00:08:18.912002 2025] [:error] [pid 40445:tid 40496] [client 4.233.80.63:60085] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aR888lH-MuFcoWRjXpbKegAAAlU"]
[Fri Nov 21 00:08:20.117288 2025] [:error] [pid 40445:tid 40485] [client 4.233.80.63:6775] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR889FH-MuFcoWRjXpbKfAAAAko"]
[Fri Nov 21 00:08:21.030857 2025] [:error] [pid 34405:tid 34412] [client 4.233.80.63:60722] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww1.php"] [unique_id "aR889TFpvu8oRK7ATftdTwAAAQU"]
[Fri Nov 21 00:08:21.665305 2025] [:error] [pid 40636:tid 40657] [client 4.233.80.63:60053] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww1.php"] [unique_id "aR889QK8BWUoW3xq0HBDLQAAA5E"]
[Fri Nov 21 00:08:22.550891 2025] [:error] [pid 40537:tid 40554] [client 4.233.80.63:6447] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww1.php"] [unique_id "aR889qKlsL5kxTa3c1wZ7wAAAs0"]
[Fri Nov 21 00:08:23.500652 2025] [:error] [pid 40445:tid 40499] [client 4.233.80.63:60723] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww1.php"] [unique_id "aR8891H-MuFcoWRjXpbKgQAAAlg"]
[Fri Nov 21 00:08:24.435477 2025] [:error] [pid 40508:tid 40510] [client 4.233.80.63:6315] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/qqq.php"] [unique_id "aR88-KxXNVCMW_ksxPsKPwAAAoA"]
[Fri Nov 21 00:08:25.131427 2025] [:error] [pid 40445:tid 40478] [client 4.233.80.63:6318] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/qqq.php"] [unique_id "aR88-VH-MuFcoWRjXpbKhQAAAkM"]
[Fri Nov 21 00:08:26.136519 2025] [:error] [pid 34405:tid 34427] [client 4.233.80.63:60699] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/qqq.php"] [unique_id "aR88-jFpvu8oRK7ATftdUQAAARQ"]
[Fri Nov 21 00:08:27.261881 2025] [:error] [pid 40508:tid 40512] [client 4.233.80.63:60091] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/qqq.php"] [unique_id "aR88-6xXNVCMW_ksxPsKQQAAAoI"]
[Fri Nov 21 00:08:28.296312 2025] [:error] [pid 40415:tid 40427] [client 4.233.80.63:6459] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about/function.php"] [unique_id "aR88_KhjIyLSv09svwPwwwAAAck"]
[Fri Nov 21 00:08:30.166458 2025] [:error] [pid 55430:tid 55439] [client 4.233.80.63:60037] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about/function.php"] [unique_id "aR88_vPZXaIMEU4pE7s79gAAAMY"]
[Fri Nov 21 00:08:30.926322 2025] [:error] [pid 34405:tid 34425] [client 4.233.80.63:60681] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about/function.php"] [unique_id "aR88_jFpvu8oRK7ATftdWQAAARI"]
[Fri Nov 21 00:08:31.523534 2025] [:error] [pid 55340:tid 55345] [client 4.233.80.63:60083] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about/function.php"] [unique_id "aR88__OxD-NeMydTybDbPwAAAAA"]
[Fri Nov 21 00:08:32.117368 2025] [:error] [pid 34405:tid 34430] [client 4.233.80.63:60724] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR89ADFpvu8oRK7ATftdWgAAARc"]
[Fri Nov 21 00:08:33.295426 2025] [:error] [pid 34405:tid 34427] [client 4.233.80.63:60032] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/function.php"] [unique_id "aR89ATFpvu8oRK7ATftdXAAAARQ"]
[Fri Nov 21 00:08:34.272044 2025] [:error] [pid 55340:tid 55368] [client 4.233.80.63:63180] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/function.php"] [unique_id "aR89AvOxD-NeMydTybDbQwAAABc"]
[Fri Nov 21 00:08:35.399763 2025] [:error] [pid 40445:tid 40482] [client 4.233.80.63:6412] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/function.php"] [unique_id "aR89A1H-MuFcoWRjXpbKlgAAAkc"]
[Fri Nov 21 00:08:36.346789 2025] [:error] [pid 40537:tid 40541] [client 4.233.80.63:6305] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/function.php"] [unique_id "aR89BKKlsL5kxTa3c1wZ9wAAAsA"]
[Fri Nov 21 00:08:37.526805 2025] [:error] [pid 55342:tid 55378] [client 4.233.80.63:60087] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR89Bbg6x32Tvk7fIG8gXQAAAEY"]
[Fri Nov 21 00:08:38.571065 2025] [:error] [pid 40508:tid 40525] [client 4.233.80.63:6423] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR89BqxXNVCMW_ksxPsKRwAAAo8"]
[Fri Nov 21 00:08:39.442951 2025] [:error] [pid 34405:tid 34414] [client 4.233.80.63:63216] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR89BzFpvu8oRK7ATftdXgAAAQc"]
[Fri Nov 21 00:08:40.604386 2025] [:error] [pid 40636:tid 40655] [client 4.233.80.63:6454] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aR89CAK8BWUoW3xq0HBDNQAAA48"]
[Fri Nov 21 00:08:41.277799 2025] [:error] [pid 40508:tid 40530] [client 4.233.80.63:6304] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR89CaxXNVCMW_ksxPsKSwAAApQ"]
[Fri Nov 21 00:08:41.831370 2025] [:error] [pid 55430:tid 55448] [client 4.233.80.63:60674] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR89CfPZXaIMEU4pE7s7_QAAAM8"]
[Fri Nov 21 00:08:42.359883 2025] [:error] [pid 55430:tid 55435] [client 4.233.80.63:6732] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR89CvPZXaIMEU4pE7s7_gAAAMI"]
[Fri Nov 21 00:08:42.922007 2025] [:error] [pid 40636:tid 40657] [client 4.233.80.63:60067] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aR89CgK8BWUoW3xq0HBDOAAAA5E"]
[Fri Nov 21 00:08:43.669728 2025] [:error] [pid 55343:tid 55410] [client 4.233.80.63:63221] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR89C1WlO3EnyVMV7w7qkgAAAIs"]
[Fri Nov 21 00:08:44.492098 2025] [:error] [pid 34405:tid 34424] [client 4.233.80.63:60063] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR89DDFpvu8oRK7ATftdYgAAARE"]
[Fri Nov 21 00:08:45.191791 2025] [:error] [pid 34405:tid 34425] [client 4.233.80.63:6294] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR89DTFpvu8oRK7ATftdZAAAARI"]
[Fri Nov 21 00:08:45.842100 2025] [:error] [pid 40636:tid 40659] [client 4.233.80.63:60078] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aR89DQK8BWUoW3xq0HBDOgAAA5M"]
[Fri Nov 21 00:08:46.627777 2025] [:error] [pid 40636:tid 40648] [client 4.233.80.63:61956] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR89DgK8BWUoW3xq0HBDOwAAA4g"]
[Fri Nov 21 00:08:47.312071 2025] [:error] [pid 55340:tid 55349] [client 4.233.80.63:6764] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR89D_OxD-NeMydTybDbTAAAAAQ"]
[Fri Nov 21 00:08:48.018516 2025] [:error] [pid 55430:tid 55454] [client 4.233.80.63:63193] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR89EPPZXaIMEU4pE7s8AAAAANU"]
[Fri Nov 21 00:08:48.616435 2025] [:error] [pid 40537:tid 40547] [client 4.233.80.63:6405] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aR89EKKlsL5kxTa3c1wZ_wAAAsY"]
[Fri Nov 21 00:08:49.261967 2025] [:error] [pid 40445:tid 40495] [client 4.233.80.63:6462] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR89EVH-MuFcoWRjXpbKnwAAAlQ"]
[Fri Nov 21 00:08:49.865234 2025] [:error] [pid 40508:tid 40525] [client 4.233.80.63:60081] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aR89EaxXNVCMW_ksxPsKUQAAAo8"]
[Fri Nov 21 00:09:00.730419 2025] [autoindex:error] [pid 40636:tid 40658] [client 4.233.80.63:6441] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 00:09:03.315003 2025] [:error] [pid 40636:tid 40662] [client 4.233.80.63:6441] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aR89HwK8BWUoW3xq0HBDRgAAA5Y"]
[Fri Nov 21 00:09:08.211474 2025] [autoindex:error] [pid 40537:tid 40558] [client 4.233.80.63:63226] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 00:09:16.011288 2025] [:error] [pid 40537:tid 40541] [client 4.233.80.63:63226] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR89LKKlsL5kxTa3c1waEQAAAsA"]
[Fri Nov 21 00:09:16.668901 2025] [:error] [pid 40445:tid 40497] [client 4.233.80.63:63199] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR89LFH-MuFcoWRjXpbK2AAAAlY"]
[Fri Nov 21 00:09:17.471499 2025] [:error] [pid 40445:tid 40477] [client 4.233.80.63:60727] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR89LVH-MuFcoWRjXpbK2gAAAkI"]
[Fri Nov 21 00:09:18.421599 2025] [:error] [pid 40415:tid 40421] [client 4.233.80.63:6741] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aR89LqhjIyLSv09svwPw9QAAAcM"]
[Fri Nov 21 00:09:19.782734 2025] [:error] [pid 40508:tid 40524] [client 4.233.80.63:60055] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/log.php"] [unique_id "aR89L6xXNVCMW_ksxPsKcwAAAo4"]
[Fri Nov 21 00:09:21.136853 2025] [:error] [pid 55342:tid 55374] [client 4.233.80.63:6408] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/log.php"] [unique_id "aR89Mbg6x32Tvk7fIG8gjgAAAEI"]
[Fri Nov 21 00:09:22.464334 2025] [:error] [pid 40445:tid 40490] [client 4.233.80.63:6723] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/log.php"] [unique_id "aR89MlH-MuFcoWRjXpbK5gAAAk8"]
[Fri Nov 21 00:09:23.266990 2025] [:error] [pid 40445:tid 40485] [client 4.233.80.63:6446] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/log.php"] [unique_id "aR89M1H-MuFcoWRjXpbK6QAAAko"]
[Fri Nov 21 00:09:24.077694 2025] [:error] [pid 55343:tid 55399] [client 4.233.80.63:60052] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.php"] [unique_id "aR89NFWlO3EnyVMV7w7rKwAAAIA"]
[Fri Nov 21 00:09:25.069701 2025] [:error] [pid 55342:tid 55372] [client 4.233.80.63:60710] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.php"] [unique_id "aR89Nbg6x32Tvk7fIG8gkwAAAEA"]
[Fri Nov 21 00:09:26.214357 2025] [:error] [pid 40445:tid 40484] [client 4.233.80.63:60696] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.php"] [unique_id "aR89NlH-MuFcoWRjXpbK7wAAAkk"]
[Fri Nov 21 00:09:27.863622 2025] [:error] [pid 40636:tid 40652] [client 4.233.80.63:63173] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/class.php"] [unique_id "aR89NwK8BWUoW3xq0HBDXgAAA4w"]
[Fri Nov 21 00:09:29.043138 2025] [:error] [pid 55342:tid 55381] [client 4.233.80.63:6326] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aR89Obg6x32Tvk7fIG8gmQAAAEk"]
[Fri Nov 21 00:09:29.629256 2025] [:error] [pid 55342:tid 55382] [client 4.233.80.63:6765] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aR89Obg6x32Tvk7fIG8gnAAAAEo"]
[Fri Nov 21 00:09:30.288654 2025] [:error] [pid 55340:tid 55364] [client 4.233.80.63:6724] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aR89OvOxD-NeMydTybDb2QAAABM"]
[Fri Nov 21 00:09:31.357094 2025] [:error] [pid 40415:tid 40428] [client 4.233.80.63:6726] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aR89O6hjIyLSv09svwPxCQAAAco"]
[Fri Nov 21 00:09:32.206737 2025] [:error] [pid 40508:tid 40528] [client 4.233.80.63:6728] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aR89PKxXNVCMW_ksxPsKegAAApI"]
[Fri Nov 21 00:09:33.291234 2025] [:error] [pid 40537:tid 40542] [client 4.233.80.63:6410] [client 4.233.80.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR89PaKlsL5kxTa3c1waHQAAAsE"]
[Fri Nov 21 00:09:34.307642 2025] [:error] [pid 55342:tid 55391] [client 4.233.80.63:60054] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aR89Prg6x32Tvk7fIG8gnwAAAFM"]
[Fri Nov 21 00:09:35.068953 2025] [:error] [pid 55343:tid 55407] [client 4.233.80.63:6308] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aR89P1WlO3EnyVMV7w7rLwAAAIg"]
[Fri Nov 21 00:09:35.927915 2025] [:error] [pid 40537:tid 40554] [client 4.233.80.63:63168] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aR89P6KlsL5kxTa3c1waIgAAAs0"]
[Fri Nov 21 00:09:37.176955 2025] [:error] [pid 55430:tid 55448] [client 4.233.80.63:6740] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aR89QfPZXaIMEU4pE7s8KAAAAM8"]
[Fri Nov 21 00:09:38.406206 2025] [:error] [pid 34405:tid 34430] [client 4.233.80.63:6451] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bge.php"] [unique_id "aR89QjFpvu8oRK7ATftdggAAARc"]
[Fri Nov 21 00:09:39.258410 2025] [:error] [pid 55340:tid 55356] [client 4.233.80.63:63184] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bge.php"] [unique_id "aR89Q_OxD-NeMydTybDb4gAAAAs"]
[Fri Nov 21 00:09:40.089525 2025] [:error] [pid 55340:tid 55358] [client 4.233.80.63:60713] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bge.php"] [unique_id "aR89RPOxD-NeMydTybDb4wAAAA0"]
[Fri Nov 21 00:09:40.932044 2025] [:error] [pid 40415:tid 40442] [client 4.233.80.63:63204] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bge.php"] [unique_id "aR89RKhjIyLSv09svwPxDwAAAdg"]
[Fri Nov 21 00:09:41.902813 2025] [:error] [pid 55430:tid 55440] [client 4.233.80.63:60045] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ifm.php"] [unique_id "aR89RfPZXaIMEU4pE7s8KwAAAMc"]
[Fri Nov 21 00:09:42.928807 2025] [:error] [pid 55340:tid 55346] [client 4.233.80.63:6456] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ifm.php"] [unique_id "aR89RvOxD-NeMydTybDb5gAAAAE"]
[Fri Nov 21 00:09:43.683690 2025] [:error] [pid 34405:tid 34416] [client 4.233.80.63:63198] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ifm.php"] [unique_id "aR89RzFpvu8oRK7ATftdiAAAAQk"]
[Fri Nov 21 00:09:44.557496 2025] [:error] [pid 55430:tid 55447] [client 4.233.80.63:6742] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ifm.php"] [unique_id "aR89SPPZXaIMEU4pE7s8LwAAAM4"]
[Fri Nov 21 00:09:45.306053 2025] [:error] [pid 55343:tid 55406] [client 4.233.80.63:60728] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww5.php"] [unique_id "aR89SVWlO3EnyVMV7w7rNAAAAIc"]
[Fri Nov 21 00:09:46.216708 2025] [:error] [pid 40508:tid 40525] [client 4.233.80.63:6411] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww5.php"] [unique_id "aR89SqxXNVCMW_ksxPsKhwAAAo8"]
[Fri Nov 21 00:09:47.220005 2025] [:error] [pid 55343:tid 55415] [client 4.233.80.63:6752] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww5.php"] [unique_id "aR89S1WlO3EnyVMV7w7rOAAAAJA"]
[Fri Nov 21 00:09:48.150074 2025] [:error] [pid 55430:tid 55446] [client 4.233.80.63:60712] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ww5.php"] [unique_id "aR89TPPZXaIMEU4pE7s8MQAAAM0"]
[Fri Nov 21 00:09:49.438892 2025] [:error] [pid 40445:tid 40482] [client 4.233.80.63:63185] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/thxt.php"] [unique_id "aR89TVH-MuFcoWRjXpbLaAAAAkc"]
[Fri Nov 21 00:09:50.384704 2025] [:error] [pid 40508:tid 40518] [client 4.233.80.63:60048] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/thxt.php"] [unique_id "aR89TqxXNVCMW_ksxPsKjQAAAog"]
[Fri Nov 21 00:09:51.069430 2025] [:error] [pid 40508:tid 40522] [client 4.233.80.63:60088] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/thxt.php"] [unique_id "aR89T6xXNVCMW_ksxPsKjwAAAow"]
[Fri Nov 21 00:09:52.820285 2025] [:error] [pid 40445:tid 40482] [client 4.233.80.63:60714] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/thxt.php"] [unique_id "aR89UFH-MuFcoWRjXpbLdwAAAkc"]
[Fri Nov 21 00:09:53.867802 2025] [:error] [pid 40537:tid 40552] [client 4.233.80.63:6733] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kairolin.php"] [unique_id "aR89UaKlsL5kxTa3c1waMQAAAss"]
[Fri Nov 21 00:09:54.712701 2025] [:error] [pid 40445:tid 40491] [client 4.233.80.63:6778] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kairolin.php"] [unique_id "aR89UlH-MuFcoWRjXpbLegAAAlA"]
[Fri Nov 21 00:09:55.632954 2025] [:error] [pid 40537:tid 40549] [client 4.233.80.63:60734] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kairolin.php"] [unique_id "aR89U6KlsL5kxTa3c1waMwAAAsg"]
[Fri Nov 21 00:09:56.317321 2025] [:error] [pid 55340:tid 55358] [client 4.233.80.63:63210] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/kairolin.php"] [unique_id "aR89VPOxD-NeMydTybDb8QAAAA0"]
[Fri Nov 21 00:09:57.210474 2025] [:error] [pid 40508:tid 40521] [client 4.233.80.63:63200] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/siln.php"] [unique_id "aR89VaxXNVCMW_ksxPsKlwAAAos"]
[Fri Nov 21 00:09:58.130681 2025] [:error] [pid 40537:tid 40547] [client 4.233.80.63:60042] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/siln.php"] [unique_id "aR89VqKlsL5kxTa3c1waOAAAAsY"]
[Fri Nov 21 00:09:59.510943 2025] [:error] [pid 40415:tid 40436] [client 4.233.80.63:6746] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/siln.php"] [unique_id "aR89V6hjIyLSv09svwPxIAAAAdI"]
[Fri Nov 21 00:10:00.455489 2025] [:error] [pid 40445:tid 40481] [client 4.233.80.63:60073] [client 4.233.80.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/siln.php"] [unique_id "aR89WFH-MuFcoWRjXpbLjwAAAkY"]
[Fri Nov 21 04:38:38.405507 2025] [:error] [pid 13412:tid 13418] [client 125.94.144.102:54672] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aR98Tn3-knz3ZB6HogGkQAAAAME"]
[Fri Nov 21 10:46:41.157096 2025] [:error] [pid 13412:tid 13433] [client 223.244.35.77:38384] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aR_SkX3-knz3ZB6HogH9ZAAAANA"]
[Fri Nov 21 13:09:46.653637 2025] [:error] [pid 46276:tid 46293] [client 171.76.85.94:10560] [client 171.76.85.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.94, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aR_0GnbpxuSAfajqqKPfqAAAAgo"]
[Fri Nov 21 14:23:44.177683 2025] [:error] [pid 13412:tid 13425] [client 171.76.85.94:5844] [client 171.76.85.94] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSAFcH3-knz3ZB6HogEqwQAAAMg"]
[Fri Nov 21 14:29:27.755694 2025] [:error] [pid 46276:tid 46307] [client 171.76.85.94:8947] [client 171.76.85.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.94, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAGx3bpxuSAfajqqKP5awAAAhg"]
[Fri Nov 21 14:32:19.934111 2025] [:error] [pid 25431:tid 25503] [client 171.76.85.94:14321] [client 171.76.85.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.94, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAHc8klhXxmoIExII37ywAAAJA"]
[Fri Nov 21 14:34:31.120264 2025] [:error] [pid 25431:tid 25508] [client 213.21.239.4:40840] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSAH98klhXxmoIExII380gAAAJU"]
[Fri Nov 21 14:35:12.589847 2025] [:error] [pid 25521:tid 25531] [client 171.76.85.94:18706] [client 171.76.85.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.94, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAIIPhXnBMilDddn3WuqwAAAMg"]
[Fri Nov 21 14:38:03.009846 2025] [:error] [pid 25429:tid 25448] [client 171.76.85.94:4741] [client 171.76.85.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.94, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAIyz4rZbRSr7vu-NN6YAAAAA8"]
[Fri Nov 21 14:40:55.352200 2025] [:error] [pid 25554:tid 25564] [client 171.76.85.94:25112] [client 171.76.85.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.76.85.94, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAJdx-NtB-9AzFZrk4PlwAAAQY"]
[Fri Nov 21 15:05:37.949457 2025] [:error] [pid 25430:tid 25478] [client 213.21.239.4:57592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSAPQapnWJcWt_4foXke-gAAAFI"]
[Fri Nov 21 15:33:34.811079 2025] [:error] [pid 25521:tid 25544] [client 213.21.239.4:46950] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAVzvhXnBMilDddn3XO2AAAANU"]
[Fri Nov 21 16:04:41.143356 2025] [:error] [pid 25521:tid 25524] [client 213.21.239.4:48544] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAdGfhXnBMilDddn3Xr5wAAAME"]
[Fri Nov 21 17:14:01.637185 2025] [:error] [pid 25431:tid 25508] [client 117.62.235.53:45597] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSAtWcklhXxmoIExII1SwQAAAJU"]
[Fri Nov 21 19:57:48.781673 2025] [:error] [pid 25431:tid 25494] [client 170.106.35.153:38302] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSBTvMklhXxmoIExII2GTwAAAIc"]
[Sat Nov 22 00:34:41.076602 2025] [:error] [pid 49643:tid 49943] [client 64.225.4.240:56578] [client 64.225.4.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSCUoZwUojIRHhF_fj96rwAAANc"]
[Sat Nov 22 00:48:34.363600 2025] [:error] [pid 9180:tid 9199] [client 172.207.169.113:25120] [client 172.207.169.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSCX4rrk9msixUFV2i9_QAAAAFE"]
[Sat Nov 22 00:48:35.781540 2025] [:error] [pid 9180:tid 9202] [client 172.207.169.113:25114] [client 172.207.169.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSCX47rk9msixUFV2i9_RAAAAFQ"]
[Sat Nov 22 00:48:42.667945 2025] [:error] [pid 49642:tid 49893] [client 172.207.169.113:32750] [client 172.207.169.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSCX6oOXTPSuQfgUUtWBegAAAII"]
[Sat Nov 22 05:38:05.338954 2025] [:error] [pid 53477:tid 53500] [client 104.209.218.88:3560] [client 104.209.218.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.209.218.88, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDbvX7Lu30Ku9O40aLY5AAAABM"], referer: https://www.google.com/
[Sat Nov 22 05:38:35.894587 2025] [:error] [pid 53477:tid 53481] [client 104.209.218.88:3560] [client 104.209.218.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/filemanager.php"] [unique_id "aSDb237Lu30Ku9O40aLZGQAAAAA"], referer: https://www.yahoo.com/
[Sat Nov 22 05:39:34.014332 2025] [autoindex:error] [pid 25856:tid 25875] [client 104.209.218.88:4628] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Sat Nov 22 05:39:35.984313 2025] [autoindex:error] [pid 25856:tid 25879] [client 104.209.218.88:4628] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 22 05:39:36.197191 2025] [:error] [pid 25856:tid 25869] [client 104.209.218.88:4628] [client 104.209.218.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDcGBsTP0wy94zKUvGpIwAAAQs"], referer: https://www.google.com/
[Sat Nov 22 05:39:43.019823 2025] [autoindex:error] [pid 53479:tid 53545] [client 104.209.218.88:1489] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 22 05:39:47.290344 2025] [autoindex:error] [pid 53479:tid 53546] [client 104.209.218.88:1489] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Nov 22 05:39:47.507071 2025] [autoindex:error] [pid 53479:tid 53549] [client 104.209.218.88:1489] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Nov 22 05:40:02.461917 2025] [autoindex:error] [pid 53479:tid 53536] [client 104.209.218.88:1489] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Sat Nov 22 05:40:02.678009 2025] [autoindex:error] [pid 53479:tid 53538] [client 104.209.218.88:1489] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sat Nov 22 05:40:03.421885 2025] [autoindex:error] [pid 53479:tid 53543] [client 104.209.218.88:1489] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Sat Nov 22 05:40:04.292395 2025] [:error] [pid 53479:tid 53556] [client 104.209.218.88:1489] [client 104.209.218.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDcNG6cicFF3Aas-oR0SQAAAJQ"], referer: https://www.yahoo.com/
[Sat Nov 22 05:40:07.163527 2025] [autoindex:error] [pid 25856:tid 25870] [client 104.209.218.88:3680] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 22 05:40:07.379414 2025] [autoindex:error] [pid 25856:tid 25872] [client 104.209.218.88:3680] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Sat Nov 22 05:40:09.094169 2025] [autoindex:error] [pid 25856:tid 25876] [client 104.209.218.88:3680] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sat Nov 22 05:40:38.298856 2025] [:error] [pid 25856:tid 25864] [client 104.209.218.88:3680] [client 104.209.218.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.209.218.88, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSDcVhsTP0wy94zKUvGp1wAAAQY"], referer: https://www.bing.com/
[Sat Nov 22 06:14:53.327857 2025] [:error] [pid 53478:tid 53532] [client 58.49.233.126:36063] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSDkXQhUYdXBbQswAdQoSAAAAFc"]
[Sat Nov 22 06:31:16.857050 2025] [:error] [pid 53477:tid 53495] [client 43.130.15.147:55462] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSDoNH7Lu30Ku9O40aL7jwAAAA4"]
[Sat Nov 22 08:32:44.862126 2025] [:error] [pid 25856:tid 25882] [client 64.225.24.70:59448] [client 64.225.24.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSEErBsTP0wy94zKUvENKwAAARg"]
[Sat Nov 22 08:57:47.930651 2025] [:error] [pid 9547:tid 9556] [client 31.158.27.61:60101] [client 31.158.27.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.158.27.61, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEKi9ClOR5qk7DoMeHm4QAAAUM"]
[Sat Nov 22 09:32:49.134951 2025] [:error] [pid 53479:tid 53548] [client 43.152.72.244:54332] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSESwW6cicFF3Aas-oTPoAAAAIw"]
[Sat Nov 22 10:09:03.295214 2025] [:error] [pid 53479:tid 53544] [client 43.157.43.147:37980] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSEbP26cicFF3Aas-oTbXgAAAIg"]
[Sat Nov 22 13:35:48.227984 2025] [:error] [pid 53566:tid 53581] [client 64.225.24.70:55544] [client 64.225.24.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSFLtMbSHDBkRbwMbd7gaQAAAM0"]
[Sat Nov 22 18:49:56.781793 2025] [:error] [pid 53478:tid 53525] [client 206.189.225.181:34572] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSGVVAhUYdXBbQswAdT5TgAAAFA"]
[Sat Nov 22 18:49:57.406920 2025] [:error] [pid 53566:tid 53575] [client 206.189.225.181:34578] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/server"] [unique_id "aSGVVcbSHDBkRbwMbd4qxQAAAMc"]
[Sat Nov 22 18:49:58.029506 2025] [:error] [pid 53479:tid 53545] [client 206.189.225.181:34590] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSGVVm6cicFF3Aas-oSSHgAAAIk"]
[Sat Nov 22 18:49:58.652492 2025] [:error] [pid 53566:tid 53588] [client 206.189.225.181:34762] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about"] [unique_id "aSGVVsbSHDBkRbwMbd4qxgAAANQ"]
[Sat Nov 22 18:49:59.275916 2025] [:error] [pid 53478:tid 53516] [client 206.189.225.181:34770] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aSGVVwhUYdXBbQswAdT5UgAAAEc"]
[Sat Nov 22 18:49:59.896172 2025] [:error] [pid 53566:tid 53579] [client 206.189.225.181:34786] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aSGVV8bSHDBkRbwMbd4qyQAAAMs"]
[Sat Nov 22 18:50:00.523476 2025] [:error] [pid 53477:tid 53482] [client 206.189.225.181:34794] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSGVWH7Lu30Ku9O40aK75QAAAAE"]
[Sat Nov 22 18:50:01.144392 2025] [:error] [pid 9547:tid 9577] [client 206.189.225.181:34798] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aSGVWdClOR5qk7DoMeG11AAAAVg"]
[Sat Nov 22 18:50:01.783090 2025] [:error] [pid 53479:tid 53558] [client 206.189.225.181:34814] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aSGVWW6cicFF3Aas-oSSJgAAAJY"]
[Sat Nov 22 18:50:02.412197 2025] [:error] [pid 53479:tid 53541] [client 206.189.225.181:34826] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/_all_dbs"] [unique_id "aSGVWm6cicFF3Aas-oSSJwAAAIU"]
[Sat Nov 22 18:50:03.032600 2025] [:error] [pid 44259:tid 44269] [client 206.189.225.181:34834] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aSGVW3Xe1xL-_YOdRmR1gwAAAYc"]
[Sat Nov 22 18:50:03.655268 2025] [:error] [pid 9547:tid 9565] [client 206.189.225.181:34848] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aSGVW9ClOR5qk7DoMeG12AAAAUw"]
[Sat Nov 22 18:50:04.276518 2025] [:error] [pid 44259:tid 44273] [client 206.189.225.181:34862] [client 206.189.225.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSGVXHXe1xL-_YOdRmR1iAAAAYs"]
[Sat Nov 22 18:50:04.897099 2025] [:error] [pid 9547:tid 9570] [client 206.189.225.181:34866] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSGVXNClOR5qk7DoMeG12wAAAVE"]
[Sat Nov 22 18:50:05.520092 2025] [:error] [pid 44259:tid 44266] [client 206.189.225.181:34872] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aSGVXXXe1xL-_YOdRmR1jQAAAYQ"]
[Sat Nov 22 18:50:06.140919 2025] [:error] [pid 44259:tid 44264] [client 206.189.225.181:34882] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/telescope/requests"] [unique_id "aSGVXnXe1xL-_YOdRmR1jgAAAYI"]
[Sat Nov 22 18:50:06.763136 2025] [:error] [pid 53479:tid 53552] [client 206.189.225.181:34888] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aSGVXm6cicFF3Aas-oSSMAAAAJA"]
[Sat Nov 22 18:50:07.385876 2025] [:error] [pid 44259:tid 44280] [client 206.189.225.181:34894] [client 206.189.225.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSGVX3Xe1xL-_YOdRmR1lQAAAZI"]
[Sat Nov 22 21:51:49.093784 2025] [:error] [pid 53477:tid 53493] [client 94.102.55.18:54342] [client 94.102.55.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSG_9X7Lu30Ku9O40aL1TQAAAAw"]
[Sat Nov 22 21:51:50.469635 2025] [:error] [pid 53477:tid 53505] [client 94.102.55.18:35772] [client 94.102.55.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSG_9n7Lu30Ku9O40aL1TwAAABg"]
[Sun Nov 23 01:17:55.050563 2025] [:error] [pid 39713:tid 39740] [client 216.73.163.116:24545] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSHwQ0Ugrb325CIAjPqTVgAAABM"]
[Sun Nov 23 01:18:02.754317 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.130:32613] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSHwSkUgrb325CIAjPqTYQAAAAQ"]
[Sun Nov 23 01:18:15.928194 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.148:26719] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSHwV5b4RIAN-_BXnHlVcgAAAIM"]
[Sun Nov 23 01:18:23.385714 2025] [:error] [pid 8816:tid 8901] [client 45.146.54.134:23525] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSHwX5b4RIAN-_BXnHlVhQAAAJA"]
[Sun Nov 23 01:18:36.167656 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.150:63119] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSHwbAQ3B_uDoeItNmNk1wAAAEQ"]
[Sun Nov 23 01:18:39.119625 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.139:41203] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSHwb5b4RIAN-_BXnHlVogAAAJE"]
[Sun Nov 23 01:18:41.793747 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.144:65157] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSHwcQQ3B_uDoeItNmNk4wAAAFU"]
[Sun Nov 23 01:18:42.490257 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.135:23665] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSHwckUgrb325CIAjPqTdQAAAA8"]
[Sun Nov 23 01:18:43.225359 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.154:28909] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSHwcwQ3B_uDoeItNmNk5QAAAEQ"]
[Sun Nov 23 01:18:43.961240 2025] [:error] [pid 8816:tid 8900] [client 45.131.194.123:21463] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSHwc5b4RIAN-_BXnHlVqAAAAI8"]
[Sun Nov 23 01:18:46.343778 2025] [:error] [pid 39719:tid 39791] [client 216.73.163.145:36581] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSHwdhmP4k0tY5Yex-XClAAAAQ8"]
[Sun Nov 23 01:18:51.495949 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.140:49741] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/filemanager.php"] [unique_id "aSHwe5b4RIAN-_BXnHlVugAAAJQ"]
[Sun Nov 23 01:18:56.869959 2025] [:error] [pid 39719:tid 39789] [client 45.146.54.135:57291] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSHwgBmP4k0tY5Yex-XCowAAAQ0"]
[Sun Nov 23 01:18:59.482809 2025] [:error] [pid 8816:tid 8897] [client 45.146.54.139:64975] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSHwg5b4RIAN-_BXnHlVzQAAAIw"]
[Sun Nov 23 01:19:02.659237 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.136:57189] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSHwhqNupsOsQf9D2gxW6wAAAU8"]
[Sun Nov 23 01:19:15.850811 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.149:56489] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSHwkwQ3B_uDoeItNmNlIgAAAFc"]
[Sun Nov 23 01:19:19.230798 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.142:33107] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSHwl6NupsOsQf9D2gxW_QAAAU8"]
[Sun Nov 23 01:19:24.241279 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.151:33411] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSHwnJb4RIAN-_BXnHlV_gAAAJI"]
[Sun Nov 23 01:19:28.852603 2025] [:error] [pid 39718:tid 39754] [client 45.146.54.136:22799] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSHwoAQ3B_uDoeItNmNlLgAAAEU"]
[Sun Nov 23 01:19:38.303782 2025] [:error] [pid 8816:tid 8907] [client 216.73.163.153:50273] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSHwqpb4RIAN-_BXnHlWIgAAAJY"]
[Sun Nov 23 01:19:41.435400 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.136:62547] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSHwraNupsOsQf9D2gxXDQAAAU0"]
[Sun Nov 23 01:19:44.420324 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.148:56883] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSHwsAQ3B_uDoeItNmNlOgAAAEY"]
[Sun Nov 23 01:19:45.155679 2025] [:error] [pid 8816:tid 8905] [client 45.146.54.133:28423] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSHwsZb4RIAN-_BXnHlWLQAAAJQ"]
[Sun Nov 23 01:19:45.914052 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.130:38725] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSHwsUUgrb325CIAjPqTnAAAABI"]
[Sun Nov 23 01:19:54.035075 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.160:30301] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSHwupb4RIAN-_BXnHlWPwAAAJI"]
[Sun Nov 23 01:19:55.641401 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.143:61363] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSHwu6NupsOsQf9D2gxXHQAAAU4"]
[Sun Nov 23 01:19:56.343423 2025] [:error] [pid 39718:tid 39758] [client 45.131.194.123:42205] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSHwvAQ3B_uDoeItNmNlSAAAAEk"]
[Sun Nov 23 01:20:17.577407 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.123:38721] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSHw0Zb4RIAN-_BXnHlWjQAAAJU"]
[Sun Nov 23 01:20:26.128229 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.158:39299] [client 216.73.163.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.158, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSHw2pb4RIAN-_BXnHlWoQAAAIU"]
[Sun Nov 23 01:20:51.956083 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.158:39299] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSHw85b4RIAN-_BXnHlXDwAAAJU"]
[Sun Nov 23 01:20:58.636719 2025] [:error] [pid 39719:tid 39795] [client 45.146.54.139:58953] [client 45.146.54.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.139, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSHw-hmP4k0tY5Yex-XDUgAAARM"]
[Sun Nov 23 01:21:02.567927 2025] [:error] [pid 39719:tid 39783] [client 45.146.54.139:58953] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSHw_hmP4k0tY5Yex-XDXAAAAQc"]
[Sun Nov 23 01:21:19.598205 2025] [:error] [pid 39719:tid 39778] [client 45.146.54.136:59939] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSHxDxmP4k0tY5Yex-XDfAAAAQI"]
[Sun Nov 23 01:21:37.036275 2025] [:error] [pid 39718:tid 39766] [client 216.73.163.130:38343] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSHxIQQ3B_uDoeItNmNl0wAAAFE"]
[Sun Nov 23 01:21:42.232545 2025] [:error] [pid 39718:tid 39765] [client 216.73.163.136:43515] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSHxJgQ3B_uDoeItNmNl3AAAAFA"]
[Sun Nov 23 01:21:49.017827 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.120:21873] [client 216.73.163.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.120, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSHxLUUgrb325CIAjPqT9AAAAAc"]
[Sun Nov 23 01:21:51.025175 2025] [:error] [pid 39713:tid 39731] [client 216.73.163.120:21873] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSHxL0Ugrb325CIAjPqT9gAAAAo"]
[Sun Nov 23 01:22:25.160026 2025] [:error] [pid 39718:tid 39750] [client 216.73.163.133:41697] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSHxUQQ3B_uDoeItNmNmEAAAAEE"]
[Sun Nov 23 01:22:33.329828 2025] [:error] [pid 39718:tid 39750] [client 216.73.163.159:24113] [client 216.73.163.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.159, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSHxWQQ3B_uDoeItNmNmIQAAAEE"]
[Sun Nov 23 01:22:41.922859 2025] [:error] [pid 39718:tid 39765] [client 216.73.163.159:24113] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSHxYQQ3B_uDoeItNmNmLAAAAFA"]
[Sun Nov 23 01:22:44.943363 2025] [:error] [pid 39942:tid 39995] [client 45.146.54.138:46931] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSHxZKNupsOsQf9D2gxYDAAAAUE"]
[Sun Nov 23 01:22:49.685448 2025] [:error] [pid 8816:tid 8910] [client 216.73.163.157:60447] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSHxaZb4RIAN-_BXnHlX1AAAAJg"]
[Sun Nov 23 01:22:56.307515 2025] [:error] [pid 39942:tid 40012] [client 216.73.163.160:22931] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSHxcKNupsOsQf9D2gxYGgAAAVE"]
[Sun Nov 23 01:22:57.079136 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.146:27163] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSHxcRmP4k0tY5Yex-XD4wAAAQI"]
[Sun Nov 23 01:23:07.780642 2025] [:error] [pid 8816:tid 8898] [client 216.73.163.135:49099] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSHxe5b4RIAN-_BXnHlX_QAAAI0"]
[Sun Nov 23 01:23:10.724217 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.155:39869] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSHxfpb4RIAN-_BXnHlYCAAAAJA"]
[Sun Nov 23 01:23:18.208434 2025] [:error] [pid 39942:tid 40011] [client 45.146.54.138:22475] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSHxhqNupsOsQf9D2gxYNgAAAVA"]
[Sun Nov 23 01:23:25.507561 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.155:29935] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSHxjQQ3B_uDoeItNmNmVQAAAEY"]
[Sun Nov 23 01:23:30.662834 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.141:49109] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSHxkgQ3B_uDoeItNmNmXQAAAFU"]
[Sun Nov 23 01:23:38.004121 2025] [:error] [pid 39718:tid 39749] [client 216.73.163.120:44857] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSHxmgQ3B_uDoeItNmNmawAAAEA"]
[Sun Nov 23 01:23:53.333581 2025] [:error] [pid 39719:tid 39785] [client 216.73.163.157:47341] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSHxqRmP4k0tY5Yex-XESQAAAQk"]
[Sun Nov 23 01:23:54.068518 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.143:28035] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSHxqkUgrb325CIAjPqUmQAAAA4"]
[Sun Nov 23 01:23:54.798199 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.135:44247] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSHxqhmP4k0tY5Yex-XESwAAARc"]
[Sun Nov 23 01:23:55.511682 2025] [:error] [pid 39718:tid 39755] [client 216.73.163.140:37245] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSHxqwQ3B_uDoeItNmNmoAAAAEY"]
[Sun Nov 23 01:23:58.703830 2025] [:error] [pid 39942:tid 40013] [client 216.73.163.116:39351] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSHxrqNupsOsQf9D2gxYfgAAAVI"]
[Sun Nov 23 01:23:59.565366 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.116:49787] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSHxr5b4RIAN-_BXnHlYdQAAAJc"]
[Sun Nov 23 01:24:04.703308 2025] [:error] [pid 39942:tid 40015] [client 45.131.194.122:45741] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSHxtKNupsOsQf9D2gxYgwAAAVQ"]
[Sun Nov 23 01:24:05.527469 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.118:32869] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSHxtZb4RIAN-_BXnHlYfQAAAJE"]
[Sun Nov 23 01:24:06.232786 2025] [:error] [pid 8816:tid 8907] [client 45.146.54.134:30025] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSHxtpb4RIAN-_BXnHlYggAAAJY"]
[Sun Nov 23 01:24:07.119652 2025] [:error] [pid 39942:tid 40009] [client 45.146.54.134:62185] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSHxt6NupsOsQf9D2gxYhgAAAU4"]
[Sun Nov 23 01:24:10.414671 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.139:20261] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSHxuhmP4k0tY5Yex-XEWwAAARA"]
[Sun Nov 23 01:24:15.697085 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.119:24671] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSHxv5b4RIAN-_BXnHlYmAAAAIA"]
[Sun Nov 23 01:24:24.687517 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.156:39939] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSHxyBmP4k0tY5Yex-XEaQAAAQE"]
[Sun Nov 23 01:24:40.629774 2025] [:error] [pid 39719:tid 39787] [client 45.146.54.131:38895] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSHx2BmP4k0tY5Yex-XEgAAAAQs"]
[Sun Nov 23 01:24:47.377209 2025] [:error] [pid 39719:tid 39797] [client 45.146.54.137:48125] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSHx3xmP4k0tY5Yex-XEjQAAARU"]
[Sun Nov 23 01:24:48.087785 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.118:31237] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSHx4BmP4k0tY5Yex-XEjwAAAQQ"]
[Sun Nov 23 01:24:56.695704 2025] [:error] [pid 39942:tid 40001] [client 45.146.54.133:35817] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSHx6KNupsOsQf9D2gxYuwAAAUY"]
[Sun Nov 23 01:25:04.113613 2025] [proxy_fcgi:error] [pid 39713:tid 39733] [client 45.146.54.131:28875] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:25:04.553057 2025] [proxy_fcgi:error] [pid 39713:tid 39744] [client 45.146.54.131:28875] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:25:04.902378 2025] [proxy_fcgi:error] [pid 39713:tid 39737] [client 45.146.54.131:28875] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:25:11.965726 2025] [:error] [pid 39713:tid 39745] [client 45.146.54.131:28875] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSHx90Ugrb325CIAjPqVFgAAABg"]
[Sun Nov 23 01:25:12.678699 2025] [:error] [pid 39719:tid 39793] [client 216.73.163.154:45131] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSHx-BmP4k0tY5Yex-XEvAAAARE"]
[Sun Nov 23 01:25:13.585817 2025] [:error] [pid 39718:tid 39755] [client 45.146.54.139:33785] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSHx-QQ3B_uDoeItNmNm-gAAAEY"]
[Sun Nov 23 01:25:14.396131 2025] [:error] [pid 39718:tid 39773] [client 216.73.163.132:23889] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSHx-gQ3B_uDoeItNmNm-wAAAFg"]
[Sun Nov 23 01:25:15.097197 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.141:52761] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSHx-6NupsOsQf9D2gxY9gAAAVU"]
[Sun Nov 23 01:25:15.820332 2025] [:error] [pid 39713:tid 39734] [client 216.73.163.159:44113] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSHx-0Ugrb325CIAjPqVGQAAAA0"]
[Sun Nov 23 01:25:18.369506 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.156:43603] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSHx_gQ3B_uDoeItNmNm_wAAAEc"]
[Sun Nov 23 01:25:19.164024 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.160:34355] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSHx_5b4RIAN-_BXnHlZPgAAAIc"]
[Sun Nov 23 01:25:19.869450 2025] [:error] [pid 39942:tid 39998] [client 216.73.163.138:60441] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSHx_6NupsOsQf9D2gxZCwAAAUM"]
[Sun Nov 23 01:25:20.704488 2025] [:error] [pid 8816:tid 8884] [client 45.146.54.138:25799] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSHyAJb4RIAN-_BXnHlZRwAAAIA"]
[Sun Nov 23 01:25:25.497967 2025] [:error] [pid 8816:tid 8903] [client 45.146.54.135:45133] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSHyBZb4RIAN-_BXnHlZagAAAJI"]
[Sun Nov 23 01:25:27.921269 2025] [:error] [pid 39713:tid 39731] [client 45.146.54.134:54261] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSHyB0Ugrb325CIAjPqVRAAAAAo"]
[Sun Nov 23 01:25:33.536625 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.159:37507] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSHyDZb4RIAN-_BXnHlZmwAAAI4"]
[Sun Nov 23 01:25:38.911471 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.151:58269] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSHyEpb4RIAN-_BXnHlZugAAAIg"]
[Sun Nov 23 01:25:46.593622 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.133:47239] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSHyGgQ3B_uDoeItNmNnMgAAAEc"]
[Sun Nov 23 01:25:55.787531 2025] [:error] [pid 39719:tid 39798] [client 216.73.163.145:63589] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSHyIxmP4k0tY5Yex-XFCwAAARY"]
[Sun Nov 23 01:25:58.809623 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.154:43989] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSHyJpb4RIAN-_BXnHlaCQAAAIY"]
[Sun Nov 23 01:26:32.818290 2025] [:error] [pid 39718:tid 39750] [client 216.73.163.159:63541] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSHySAQ3B_uDoeItNmNncAAAAEE"]
[Sun Nov 23 01:26:33.538670 2025] [:error] [pid 8816:tid 8898] [client 45.131.194.123:37327] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSHySZb4RIAN-_BXnHladgAAAI0"]
[Sun Nov 23 01:26:34.237841 2025] [:error] [pid 8816:tid 8910] [client 216.73.163.155:41769] [client 216.73.163.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.155, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSHySpb4RIAN-_BXnHlaegAAAJg"]
[Sun Nov 23 01:26:38.791688 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.155:41769] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSHyTpb4RIAN-_BXnHlaiQAAAI8"]
[Sun Nov 23 01:26:43.666906 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.129:54165] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSHyUxmP4k0tY5Yex-XFKQAAAQE"]
[Sun Nov 23 01:26:44.352106 2025] [:error] [pid 39718:tid 39762] [client 216.73.163.119:49541] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSHyVAQ3B_uDoeItNmNnegAAAE0"]
[Sun Nov 23 01:26:53.572521 2025] [:error] [pid 39942:tid 40002] [client 45.146.54.137:36201] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSHyXaNupsOsQf9D2gxZ-gAAAUc"]
[Sun Nov 23 01:26:54.429230 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.138:27267] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/fm.php"] [unique_id "aSHyXpb4RIAN-_BXnHlatgAAAIY"]
[Sun Nov 23 01:27:05.518396 2025] [:error] [pid 39718:tid 39767] [client 45.131.194.122:45623] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSHyaQQ3B_uDoeItNmNnkwAAAFI"]
[Sun Nov 23 01:27:10.567933 2025] [proxy_fcgi:error] [pid 39718:tid 39766] [client 216.73.163.138:25429] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:27:13.056943 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.138:25429] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSHycQQ3B_uDoeItNmNnpgAAAEM"]
[Sun Nov 23 01:27:13.816005 2025] [:error] [pid 39719:tid 39788] [client 216.73.163.159:29397] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSHycRmP4k0tY5Yex-XFUwAAAQw"]
[Sun Nov 23 01:27:18.885999 2025] [:error] [pid 39942:tid 40006] [client 45.146.54.130:24313] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSHydqNupsOsQf9D2gxaKwAAAUs"]
[Sun Nov 23 01:27:19.647186 2025] [:error] [pid 39942:tid 40018] [client 45.146.54.139:51593] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSHyd6NupsOsQf9D2gxaLwAAAVc"]
[Sun Nov 23 01:27:34.505682 2025] [:error] [pid 39713:tid 39730] [client 216.73.163.141:62911] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSHyhkUgrb325CIAjPqWRgAAAAk"]
[Sun Nov 23 01:27:35.289489 2025] [:error] [pid 39942:tid 39998] [client 216.73.163.130:61885] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSHyh6NupsOsQf9D2gxadwAAAUM"]
[Sun Nov 23 01:27:44.356661 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.142:57681] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSHykAQ3B_uDoeItNmNn3gAAAEQ"]
[Sun Nov 23 01:27:45.067032 2025] [:error] [pid 39719:tid 39780] [client 45.131.194.123:59241] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSHykRmP4k0tY5Yex-XFhQAAAQQ"]
[Sun Nov 23 01:27:45.757009 2025] [:error] [pid 39719:tid 39783] [client 216.73.163.150:36405] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSHykRmP4k0tY5Yex-XFhwAAAQc"]
[Sun Nov 23 01:27:58.150617 2025] [:error] [pid 8816:tid 8903] [client 45.146.54.133:47891] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSHynpb4RIAN-_BXnHlbVQAAAJI"]
[Sun Nov 23 01:28:01.742127 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.158:59137] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSHyoUUgrb325CIAjPqWkAAAABA"]
[Sun Nov 23 01:28:14.691429 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.133:44009] [client 216.73.163.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.133, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/js/wp-login.php"] [unique_id "aSHyrpb4RIAN-_BXnHlbagAAAIk"]
[Sun Nov 23 01:28:26.807533 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.133:44009] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSHyupb4RIAN-_BXnHlbhwAAAIY"]
[Sun Nov 23 01:28:27.519545 2025] [:error] [pid 39713:tid 39741] [client 216.73.163.136:44797] [client 216.73.163.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.136, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSHyu0Ugrb325CIAjPqWxQAAABQ"]
[Sun Nov 23 01:28:49.943096 2025] [proxy_fcgi:error] [pid 39713:tid 39744] [client 216.73.163.136:44797] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:29:17.705750 2025] [:error] [pid 39713:tid 39727] [client 216.73.163.136:44797] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSHy7UUgrb325CIAjPqXLAAAAAY"]
[Sun Nov 23 01:29:24.790296 2025] [:error] [pid 8816:tid 8897] [client 45.131.194.123:64677] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSHy9Jb4RIAN-_BXnHlcPgAAAIw"]
[Sun Nov 23 01:29:30.010435 2025] [:error] [pid 39719:tid 39776] [client 216.73.163.147:53873] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSHy-hmP4k0tY5Yex-XGPAAAAQA"]
[Sun Nov 23 01:29:49.415013 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.146:56125] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSHzDQQ3B_uDoeItNmNoiAAAAFU"]
[Sun Nov 23 01:29:55.441711 2025] [:error] [pid 39942:tid 39994] [client 216.73.163.140:44227] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSHzE6NupsOsQf9D2gxbgAAAAUA"]
[Sun Nov 23 01:29:58.433425 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.132:52341] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSHzFqNupsOsQf9D2gxbiQAAAUs"]
[Sun Nov 23 01:30:07.708253 2025] [proxy_fcgi:error] [pid 8816:tid 8907] [client 216.73.163.153:54359] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:30:08.108334 2025] [proxy_fcgi:error] [pid 8816:tid 8897] [client 216.73.163.153:54359] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:30:08.496186 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.153:54359] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSHzIJb4RIAN-_BXnHlcqAAAAIQ"]
[Sun Nov 23 01:30:09.243718 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.134:22499] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSHzIZb4RIAN-_BXnHlcrAAAAJc"]
[Sun Nov 23 01:30:24.253476 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.143:50953] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSHzMEUgrb325CIAjPqXsgAAABY"]
[Sun Nov 23 01:30:27.303503 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.120:35961] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/tiny.php"] [unique_id "aSHzM5b4RIAN-_BXnHlc4QAAAJI"]
[Sun Nov 23 01:30:36.494985 2025] [:error] [pid 39713:tid 39733] [client 216.73.163.137:32679] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSHzPEUgrb325CIAjPqXwAAAAAw"]
[Sun Nov 23 01:30:53.659601 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.136:23303] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSHzTQQ3B_uDoeItNmNo2gAAAFc"]
[Sun Nov 23 01:30:54.427396 2025] [proxy_fcgi:error] [pid 39942:tid 40012] [client 216.73.163.139:56111] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:31:00.293051 2025] [:error] [pid 39942:tid 40016] [client 216.73.163.139:56111] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSHzVKNupsOsQf9D2gxcAAAAAVU"]
[Sun Nov 23 01:31:12.486206 2025] [proxy_fcgi:error] [pid 39718:tid 39754] [client 45.146.54.137:32445] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:31:15.166051 2025] [:error] [pid 39718:tid 39757] [client 45.146.54.137:32445] [client 45.146.54.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.137, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSHzYwQ3B_uDoeItNmNo-gAAAEg"]
[Sun Nov 23 01:31:26.246059 2025] [:error] [pid 39718:tid 39763] [client 45.146.54.137:32445] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSHzbgQ3B_uDoeItNmNpGgAAAE4"]
[Sun Nov 23 01:31:31.095700 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.157:43029] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSHzc5b4RIAN-_BXnHldrQAAAJI"]
[Sun Nov 23 01:31:40.368657 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.136:54697] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSHzfAQ3B_uDoeItNmNpPAAAAFc"]
[Sun Nov 23 01:31:49.096015 2025] [:error] [pid 39942:tid 40012] [client 45.131.194.122:62833] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSHzhaNupsOsQf9D2gxciwAAAVE"]
[Sun Nov 23 01:31:52.091730 2025] [:error] [pid 8816:tid 8902] [client 216.73.163.158:26583] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSHziJb4RIAN-_BXnHld9wAAAJE"]
[Sun Nov 23 01:31:59.068977 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.118:64257] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSHzj5b4RIAN-_BXnHleEwAAAIM"]
[Sun Nov 23 01:32:04.862747 2025] [proxy_fcgi:error] [pid 39942:tid 40017] [client 216.73.163.130:25901] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:32:05.220170 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.130:25901] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSHzlaNupsOsQf9D2gxcmAAAAU8"]
[Sun Nov 23 01:32:08.338098 2025] [:error] [pid 8816:tid 8906] [client 216.73.163.130:21973] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSHzmJb4RIAN-_BXnHleMgAAAJU"]
[Sun Nov 23 01:32:10.151674 2025] [:error] [pid 39719:tid 39784] [client 216.73.163.153:57841] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSHzmhmP4k0tY5Yex-XHfAAAAQg"]
[Sun Nov 23 01:32:10.942444 2025] [:error] [pid 39942:tid 39998] [client 45.131.194.123:28947] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSHzmqNupsOsQf9D2gxcpgAAAUM"]
[Sun Nov 23 01:32:11.713428 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.159:50019] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSHzm6NupsOsQf9D2gxcqAAAAUw"]
[Sun Nov 23 01:32:12.410981 2025] [:error] [pid 39719:tid 39782] [client 45.146.54.135:25557] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSHznBmP4k0tY5Yex-XHfgAAAQY"]
[Sun Nov 23 01:32:13.086815 2025] [:error] [pid 39942:tid 40000] [client 216.73.163.136:48165] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSHznaNupsOsQf9D2gxcrgAAAUU"]
[Sun Nov 23 01:32:18.227903 2025] [:error] [pid 8816:tid 8896] [client 45.146.54.132:21173] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSHzopb4RIAN-_BXnHleVAAAAIs"]
[Sun Nov 23 01:32:18.937768 2025] [:error] [pid 39942:tid 40003] [client 216.73.163.130:60647] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSHzoqNupsOsQf9D2gxcugAAAUg"]
[Sun Nov 23 01:32:19.638357 2025] [:error] [pid 8816:tid 8885] [client 216.73.163.131:34573] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSHzo5b4RIAN-_BXnHleVgAAAIE"]
[Sun Nov 23 01:32:22.187459 2025] [:error] [pid 39942:tid 40003] [client 45.146.54.135:56995] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSHzpqNupsOsQf9D2gxcxgAAAUg"]
[Sun Nov 23 01:32:27.333912 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.143:29449] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSHzq5b4RIAN-_BXnHleZAAAAIg"]
[Sun Nov 23 01:32:28.091201 2025] [proxy_fcgi:error] [pid 8816:tid 8906] [client 45.146.54.133:59115] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:32:40.457295 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.151:43321] [client 216.73.163.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.151, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSHzuEUgrb325CIAjPqYgAAAABY"]
[Sun Nov 23 01:32:54.004983 2025] [:error] [pid 39713:tid 39722] [client 216.73.163.151:43321] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSHzxkUgrb325CIAjPqYqgAAAAE"]
[Sun Nov 23 01:32:54.712561 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.132:57169] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSHzxkUgrb325CIAjPqYrQAAAAM"]
[Sun Nov 23 01:33:28.474681 2025] [:error] [pid 39713:tid 39744] [client 216.73.163.123:56141] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSHz6EUgrb325CIAjPqY8AAAABc"]
[Sun Nov 23 01:33:29.178573 2025] [:error] [pid 39942:tid 40004] [client 45.146.54.130:48581] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSHz6aNupsOsQf9D2gxdVAAAAUk"]
[Sun Nov 23 01:33:29.883456 2025] [:error] [pid 39719:tid 39779] [client 216.73.163.133:60987] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSHz6RmP4k0tY5Yex-XH_QAAAQM"]
[Sun Nov 23 01:33:44.165436 2025] [:error] [pid 39718:tid 39753] [client 216.73.163.148:51439] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSHz-AQ3B_uDoeItNmNqNwAAAEQ"]
[Sun Nov 23 01:33:44.929657 2025] [:error] [pid 8816:tid 8887] [client 45.146.54.134:46457] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSHz-Jb4RIAN-_BXnHlfPwAAAIM"]
[Sun Nov 23 01:33:45.625126 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.144:64267] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSHz-Zb4RIAN-_BXnHlfRQAAAI4"]
[Sun Nov 23 01:33:54.955513 2025] [:error] [pid 39713:tid 39741] [client 216.73.163.140:63813] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSH0AkUgrb325CIAjPqZHwAAABQ"]
[Sun Nov 23 01:33:58.141754 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.147:64679] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSH0BqNupsOsQf9D2gxd1wAAAU0"]
[Sun Nov 23 01:34:05.062464 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.131:42117] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSH0DaNupsOsQf9D2gxd_AAAAUE"]
[Sun Nov 23 01:34:30.256854 2025] [:error] [pid 39719:tid 39799] [client 216.73.163.117:36603] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSH0JhmP4k0tY5Yex-XIsQAAARc"]
[Sun Nov 23 01:34:35.235466 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.160:45181] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSH0K6NupsOsQf9D2gxeVAAAAUY"]
[Sun Nov 23 01:34:47.583949 2025] [:error] [pid 8816:tid 8886] [client 216.73.163.139:26007] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSH0N5b4RIAN-_BXnHlgCQAAAII"]
[Sun Nov 23 01:34:52.635501 2025] [:error] [pid 39718:tid 39771] [client 45.146.54.132:48861] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSH0PAQ3B_uDoeItNmNqpAAAAFY"]
[Sun Nov 23 01:35:01.773659 2025] [:error] [pid 39942:tid 39998] [client 216.73.163.132:36725] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSH0RaNupsOsQf9D2gxekgAAAUM"]
[Sun Nov 23 01:35:13.629721 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.152:35733] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSH0UZb4RIAN-_BXnHlgYAAAAI4"]
[Sun Nov 23 01:35:19.324126 2025] [:error] [pid 39718:tid 39759] [client 216.73.163.135:21237] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSH0VwQ3B_uDoeItNmNq1QAAAEo"]
[Sun Nov 23 01:35:20.130739 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.145:38597] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSH0WJb4RIAN-_BXnHlgawAAAIY"]
[Sun Nov 23 01:35:31.288392 2025] [:error] [pid 8816:tid 8891] [client 216.73.163.136:26733] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSH0Y5b4RIAN-_BXnHlghAAAAIc"]
[Sun Nov 23 01:35:41.745832 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.157:32843] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSH0bZb4RIAN-_BXnHlgnQAAAI4"]
[Sun Nov 23 01:35:50.638781 2025] [:error] [pid 39942:tid 40007] [client 216.73.163.144:23037] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSH0dqNupsOsQf9D2gxfGAAAAUw"]
[Sun Nov 23 01:35:51.350346 2025] [:error] [pid 8816:tid 8897] [client 45.131.194.122:52121] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSH0d5b4RIAN-_BXnHlgvgAAAIw"]
[Sun Nov 23 01:35:56.526889 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.156:26851] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSH0fAQ3B_uDoeItNmNrBAAAAEM"]
[Sun Nov 23 01:36:03.249781 2025] [:error] [pid 39719:tid 39795] [client 45.146.54.137:64091] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSH0gxmP4k0tY5Yex-XJqAAAARM"]
[Sun Nov 23 01:36:03.983430 2025] [:error] [pid 39718:tid 39767] [client 216.73.163.133:60103] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSH0gwQ3B_uDoeItNmNrDQAAAFI"]
[Sun Nov 23 01:36:17.776279 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.122:60451] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSH0kaNupsOsQf9D2gxfWQAAAUE"]
[Sun Nov 23 01:36:22.791810 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.118:55993] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSH0lpb4RIAN-_BXnHlhCgAAAIg"]
[Sun Nov 23 01:36:23.552943 2025] [:error] [pid 39719:tid 39777] [client 216.73.163.150:61383] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSH0lxmP4k0tY5Yex-XJxAAAAQE"]
[Sun Nov 23 01:36:28.865293 2025] [:error] [pid 39942:tid 40018] [client 45.146.54.137:20269] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSH0nKNupsOsQf9D2gxfaQAAAVc"]
[Sun Nov 23 01:36:31.776656 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.156:24177] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSH0n5b4RIAN-_BXnHlhKAAAAIM"]
[Sun Nov 23 01:36:42.910380 2025] [:error] [pid 39713:tid 39740] [client 45.146.54.130:52597] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSH0qkUgrb325CIAjPqaRAAAABM"]
[Sun Nov 23 01:36:48.274875 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.159:53851] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSH0sJb4RIAN-_BXnHlhYwAAAIs"]
[Sun Nov 23 01:36:53.306825 2025] [:error] [pid 39718:tid 39751] [client 216.73.163.160:55001] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSH0tQQ3B_uDoeItNmNrTgAAAEI"]
[Sun Nov 23 01:36:56.382057 2025] [:error] [pid 8816:tid 8888] [client 216.73.163.123:36971] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSH0uJb4RIAN-_BXnHlhggAAAIQ"]
[Sun Nov 23 01:36:59.454012 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.148:54657] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSH0uxmP4k0tY5Yex-XJ4QAAAQI"]
[Sun Nov 23 01:37:00.231040 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.129:64343] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSH0vAQ3B_uDoeItNmNrWAAAAE8"]
[Sun Nov 23 01:37:00.977539 2025] [:error] [pid 39713:tid 39724] [client 216.73.163.158:52949] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSH0vEUgrb325CIAjPqaggAAAAM"]
[Sun Nov 23 01:37:14.167212 2025] [:error] [pid 39719:tid 39792] [client 216.73.163.129:42023] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSH0yhmP4k0tY5Yex-XKJwAAARA"]
[Sun Nov 23 01:37:21.474444 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.156:44369] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSH00aNupsOsQf9D2gxftgAAAUE"]
[Sun Nov 23 01:37:28.347439 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.155:25617] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSH02BmP4k0tY5Yex-XKZQAAAQQ"]
[Sun Nov 23 01:37:35.589674 2025] [:error] [pid 39942:tid 40013] [client 45.146.54.131:45783] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSH036NupsOsQf9D2gxfxwAAAVI"]
[Sun Nov 23 01:37:48.180123 2025] [:error] [pid 39713:tid 39728] [client 216.73.163.134:41855] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSH07EUgrb325CIAjPqbKQAAAAc"]
[Sun Nov 23 01:37:51.223052 2025] [:error] [pid 39942:tid 39999] [client 45.146.54.134:41685] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSH076NupsOsQf9D2gxf2wAAAUQ"]
[Sun Nov 23 01:37:54.350975 2025] [:error] [pid 39719:tid 39790] [client 216.73.163.148:40925] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSH08hmP4k0tY5Yex-XKkAAAAQ4"]
[Sun Nov 23 01:37:59.523843 2025] [:error] [pid 39719:tid 39778] [client 216.73.163.122:40469] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSH09xmP4k0tY5Yex-XKmwAAAQI"]
[Sun Nov 23 01:38:16.516895 2025] [:error] [pid 39718:tid 39751] [client 45.146.54.135:50977] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSH1CAQ3B_uDoeItNmNr5wAAAEI"]
[Sun Nov 23 01:38:17.212230 2025] [:error] [pid 8816:tid 8901] [client 216.73.163.131:48899] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSH1CZb4RIAN-_BXnHliTgAAAJA"]
[Sun Nov 23 01:38:24.247992 2025] [:error] [pid 8816:tid 8902] [client 45.146.54.131:45769] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSH1EJb4RIAN-_BXnHliWQAAAJE"]
[Sun Nov 23 01:38:24.949475 2025] [:error] [pid 39713:tid 39726] [client 45.146.54.136:54255] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSH1EEUgrb325CIAjPqboAAAAAU"]
[Sun Nov 23 01:38:29.976731 2025] [:error] [pid 39718:tid 39770] [client 216.73.163.129:26547] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSH1FQQ3B_uDoeItNmNr-wAAAFU"]
[Sun Nov 23 01:38:30.718646 2025] [:error] [pid 39942:tid 39995] [client 216.73.163.129:23259] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSH1FqNupsOsQf9D2gxgGAAAAUE"]
[Sun Nov 23 01:38:31.463739 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.129:44647] [client 216.73.163.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.129, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSH1F5b4RIAN-_BXnHliXwAAAJQ"]
[Sun Nov 23 01:38:31.467978 2025] [proxy_fcgi:error] [pid 8816:tid 8905] [client 216.73.163.129:44647] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:38:31.815457 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.129:44647] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSH1F5b4RIAN-_BXnHliYAAAAIY"]
[Sun Nov 23 01:38:38.621780 2025] [:error] [pid 39942:tid 40010] [client 216.73.163.141:31563] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSH1HqNupsOsQf9D2gxgJgAAAU8"]
[Sun Nov 23 01:38:40.426601 2025] [:error] [pid 39713:tid 39734] [client 45.146.54.134:27391] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSH1IEUgrb325CIAjPqb2AAAAA0"]
[Sun Nov 23 01:38:55.134101 2025] [:error] [pid 8816:tid 8900] [client 45.146.54.131:34077] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSH1L5b4RIAN-_BXnHlioQAAAI8"]
[Sun Nov 23 01:38:55.909931 2025] [:error] [pid 39713:tid 39738] [client 45.146.54.137:32305] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSH1L0Ugrb325CIAjPqcCwAAABE"]
[Sun Nov 23 01:39:00.059397 2025] [:error] [pid 39718:tid 39769] [client 216.73.163.147:63805] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSH1NAQ3B_uDoeItNmNsHwAAAFQ"]
[Sun Nov 23 01:39:00.849048 2025] [:error] [pid 39713:tid 39742] [client 216.73.163.149:58477] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSH1NEUgrb325CIAjPqcGwAAABU"]
[Sun Nov 23 01:39:01.593755 2025] [proxy_fcgi:error] [pid 8816:tid 8885] [client 216.73.163.121:50783] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:39:01.968280 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.121:50783] [client 216.73.163.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.121, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSH1NZb4RIAN-_BXnHliuAAAAI8"]
[Sun Nov 23 01:39:06.504456 2025] [:error] [pid 8816:tid 8889] [client 216.73.163.121:50783] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSH1Opb4RIAN-_BXnHlivQAAAIU"]
[Sun Nov 23 01:39:14.522382 2025] [:error] [pid 39719:tid 39788] [client 216.73.163.120:45011] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSH1QhmP4k0tY5Yex-XK7QAAAQw"]
[Sun Nov 23 01:39:17.677493 2025] [:error] [pid 39942:tid 40006] [client 216.73.163.118:43255] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSH1RaNupsOsQf9D2gxgZAAAAUs"]
[Sun Nov 23 01:39:18.360007 2025] [:error] [pid 39718:tid 39763] [client 45.146.54.135:63741] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSH1RgQ3B_uDoeItNmNsOQAAAE4"]
[Sun Nov 23 01:39:25.401880 2025] [:error] [pid 39942:tid 40009] [client 45.146.54.131:32515] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSH1TaNupsOsQf9D2gxgfAAAAU4"]
[Sun Nov 23 01:39:30.296883 2025] [:error] [pid 8816:tid 8897] [client 45.131.194.122:42723] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSH1Upb4RIAN-_BXnHli-AAAAIw"]
[Sun Nov 23 01:39:39.268457 2025] [:error] [pid 8816:tid 8903] [client 216.73.163.123:31311] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSH1W5b4RIAN-_BXnHljKQAAAJI"]
[Sun Nov 23 01:39:40.080790 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.136:43813] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSH1XKNupsOsQf9D2gxgtAAAAUY"]
[Sun Nov 23 01:39:43.063811 2025] [:error] [pid 8816:tid 8910] [client 216.73.163.144:44971] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSH1X5b4RIAN-_BXnHljMQAAAJg"]
[Sun Nov 23 01:39:56.271316 2025] [:error] [pid 39942:tid 40008] [client 45.146.54.135:30291] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSH1bKNupsOsQf9D2gxg7AAAAU0"]
[Sun Nov 23 01:40:01.312848 2025] [:error] [pid 39718:tid 39758] [client 216.73.163.121:34429] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "emuartaustralia.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSH1cQQ3B_uDoeItNmNsmQAAAEk"]
[Sun Nov 23 01:40:01.666816 2025] [:error] [pid 39718:tid 39767] [client 216.73.163.121:34429] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSH1cQQ3B_uDoeItNmNsmgAAAFI"]
[Sun Nov 23 01:40:06.876682 2025] [:error] [pid 8816:tid 8899] [client 216.73.163.140:23629] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSH1dpb4RIAN-_BXnHljZQAAAI4"]
[Sun Nov 23 01:40:07.880698 2025] [:error] [pid 39719:tid 39791] [client 216.73.163.136:30523] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSH1dxmP4k0tY5Yex-XLLwAAAQ8"]
[Sun Nov 23 01:40:21.086920 2025] [:error] [pid 39942:tid 39994] [client 216.73.163.151:45923] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSH1haNupsOsQf9D2gxhGgAAAUA"]
[Sun Nov 23 01:40:26.455584 2025] [:error] [pid 39719:tid 39787] [client 216.73.163.134:26147] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSH1ihmP4k0tY5Yex-XLRAAAAQs"]
[Sun Nov 23 01:40:29.583848 2025] [:error] [pid 8816:tid 8905] [client 216.73.163.140:48435] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSH1jZb4RIAN-_BXnHljdQAAAJQ"]
[Sun Nov 23 01:40:40.230766 2025] [:error] [pid 39942:tid 40002] [client 216.73.163.144:24395] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSH1mKNupsOsQf9D2gxhQQAAAUc"]
[Sun Nov 23 01:40:44.366662 2025] [:error] [pid 8816:tid 8892] [client 216.73.163.146:29187] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSH1nJb4RIAN-_BXnHljhQAAAIg"]
[Sun Nov 23 01:40:47.399891 2025] [:error] [pid 39719:tid 39791] [client 216.73.163.135:60911] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSH1nxmP4k0tY5Yex-XLagAAAQ8"]
[Sun Nov 23 01:40:48.124471 2025] [:error] [pid 8816:tid 8895] [client 216.73.163.137:40883] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSH1oJb4RIAN-_BXnHljjAAAAIo"]
[Sun Nov 23 01:40:53.998691 2025] [:error] [pid 8816:tid 8896] [client 216.73.163.153:20157] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSH1pZb4RIAN-_BXnHljnAAAAIs"]
[Sun Nov 23 01:41:03.918757 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.122:61919] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSH1r6NupsOsQf9D2gxhXwAAAVA"]
[Sun Nov 23 01:41:04.609914 2025] [:error] [pid 39719:tid 39789] [client 216.73.163.119:50281] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSH1sBmP4k0tY5Yex-XLcgAAAQ0"]
[Sun Nov 23 01:41:16.904724 2025] [:error] [pid 39718:tid 39750] [client 216.73.163.116:53289] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSH1vAQ3B_uDoeItNmNtGQAAAEE"]
[Sun Nov 23 01:41:22.446092 2025] [:error] [pid 39718:tid 39767] [client 216.73.163.155:48107] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSH1wgQ3B_uDoeItNmNtIQAAAFI"]
[Sun Nov 23 01:41:29.524652 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.131:23697] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSH1yZb4RIAN-_BXnHlkGgAAAIY"]
[Sun Nov 23 01:41:30.280917 2025] [:error] [pid 8816:tid 8891] [client 45.146.54.138:29483] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSH1ypb4RIAN-_BXnHlkHQAAAIc"]
[Sun Nov 23 01:41:33.347151 2025] [:error] [pid 39718:tid 39772] [client 216.73.163.155:37809] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSH1zQQ3B_uDoeItNmNtLgAAAFc"]
[Sun Nov 23 01:41:38.459379 2025] [:error] [pid 8816:tid 8908] [client 216.73.163.133:35849] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSH10pb4RIAN-_BXnHlkLgAAAJc"]
[Sun Nov 23 01:41:43.469245 2025] [:error] [pid 39719:tid 39781] [client 216.73.163.149:38289] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSH11xmP4k0tY5Yex-XLvAAAAQU"]
[Sun Nov 23 01:41:44.229188 2025] [:error] [pid 39942:tid 40001] [client 216.73.163.137:51541] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSH12KNupsOsQf9D2gxhrQAAAUY"]
[Sun Nov 23 01:41:47.322711 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.123:41493] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSH126NupsOsQf9D2gxhsQAAAU4"]
[Sun Nov 23 01:41:49.016801 2025] [:error] [pid 39719:tid 39800] [client 45.146.54.135:58041] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSH13RmP4k0tY5Yex-XLvgAAARg"]
[Sun Nov 23 01:41:54.391654 2025] [:error] [pid 8816:tid 8897] [client 216.73.163.130:23821] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSH14pb4RIAN-_BXnHlkSwAAAIw"]
[Sun Nov 23 01:41:56.796936 2025] [:error] [pid 39718:tid 39760] [client 216.73.163.147:24443] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSH15AQ3B_uDoeItNmNtYwAAAEs"]
[Sun Nov 23 01:41:57.554092 2025] [:error] [pid 39718:tid 39762] [client 216.73.163.149:55247] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSH15QQ3B_uDoeItNmNtZQAAAE0"]
[Sun Nov 23 01:41:58.394155 2025] [:error] [pid 39713:tid 39736] [client 216.73.163.132:54365] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSH15kUgrb325CIAjPqdEAAAAA8"]
[Sun Nov 23 01:42:06.636709 2025] [:error] [pid 8816:tid 8887] [client 216.73.163.116:26479] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSH17pb4RIAN-_BXnHlkcQAAAIM"]
[Sun Nov 23 01:42:12.095770 2025] [:error] [pid 8816:tid 8899] [client 45.146.54.137:31101] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSH19Jb4RIAN-_BXnHlkewAAAI4"]
[Sun Nov 23 01:42:16.530361 2025] [:error] [pid 39942:tid 40004] [client 45.146.54.133:27561] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSH1-KNupsOsQf9D2gxhxgAAAUk"]
[Sun Nov 23 01:42:17.237863 2025] [proxy_fcgi:error] [pid 39713:tid 39737] [client 216.73.163.160:54923] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_locale() in /home/stunnedemuadmin/public_html/wp-admin/includes/admin.php:16\nStack trace:\n#0 {main}\n  thrown in /home/stunnedemuadmin/public_html/wp-admin/includes/admin.php on line 16'
[Sun Nov 23 01:42:17.918003 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.158:29041] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSH1-aNupsOsQf9D2gxhyAAAAU0"]
[Sun Nov 23 01:42:31.204396 2025] [:error] [pid 8816:tid 8890] [client 216.73.163.154:52961] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSH2B5b4RIAN-_BXnHlkkwAAAIY"]
[Sun Nov 23 01:42:31.907087 2025] [:error] [pid 39942:tid 40004] [client 216.73.163.134:43267] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSH2B6NupsOsQf9D2gxh0QAAAUk"]
[Sun Nov 23 01:42:37.109509 2025] [:error] [pid 39718:tid 39767] [client 216.73.163.141:33259] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSH2DQQ3B_uDoeItNmNtlgAAAFI"]
[Sun Nov 23 01:42:46.321566 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.117:44217] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSH2FqNupsOsQf9D2gxh4QAAAU0"]
[Sun Nov 23 01:42:51.675466 2025] [:error] [pid 39713:tid 39725] [client 216.73.163.145:59661] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSH2G0Ugrb325CIAjPqdSAAAAAQ"]
[Sun Nov 23 01:42:55.872640 2025] [:error] [pid 39713:tid 39728] [client 45.146.54.136:62569] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSH2H0Ugrb325CIAjPqdUAAAAAc"]
[Sun Nov 23 01:42:59.001951 2025] [:error] [pid 8816:tid 8894] [client 216.73.163.120:61917] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSH2I5b4RIAN-_BXnHlkwgAAAIk"]
[Sun Nov 23 01:43:02.211174 2025] [:error] [pid 39713:tid 39721] [client 45.146.54.135:21755] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSH2JkUgrb325CIAjPqdUwAAAAA"]
[Sun Nov 23 01:43:11.254788 2025] [:error] [pid 39942:tid 39997] [client 216.73.163.145:26459] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSH2L6NupsOsQf9D2gxiEQAAAUI"]
[Sun Nov 23 01:43:18.078239 2025] [:error] [pid 39719:tid 39791] [client 216.73.163.118:59143] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSH2NhmP4k0tY5Yex-XMMwAAAQ8"]
[Sun Nov 23 01:43:18.820272 2025] [proxy_fcgi:error] [pid 39719:tid 39789] [client 216.73.163.153:48947] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 01:43:19.223888 2025] [:error] [pid 39719:tid 39787] [client 216.73.163.153:48947] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSH2NxmP4k0tY5Yex-XMNgAAAQs"]
[Sun Nov 23 01:43:19.916746 2025] [:error] [pid 39718:tid 39756] [client 216.73.163.123:55155] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSH2NwQ3B_uDoeItNmNtzAAAAEc"]
[Sun Nov 23 01:43:25.415933 2025] [:error] [pid 39713:tid 39737] [client 216.73.163.157:43151] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSH2PUUgrb325CIAjPqdeQAAABA"]
[Sun Nov 23 01:43:26.110101 2025] [:error] [pid 39713:tid 39724] [client 45.146.54.137:51407] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSH2PkUgrb325CIAjPqdewAAAAM"]
[Sun Nov 23 01:43:38.811862 2025] [:error] [pid 8816:tid 8899] [client 45.146.54.137:59631] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSH2Spb4RIAN-_BXnHllfQAAAI4"]
[Sun Nov 23 01:43:39.531476 2025] [:error] [pid 39942:tid 40009] [client 216.73.163.133:49699] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSH2S6NupsOsQf9D2gxiSAAAAU4"]
[Sun Nov 23 01:43:42.715333 2025] [:error] [pid 39942:tid 40008] [client 216.73.163.120:56797] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSH2TqNupsOsQf9D2gxiUQAAAU0"]
[Sun Nov 23 01:43:43.505615 2025] [:error] [pid 39942:tid 40017] [client 45.146.54.131:27601] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSH2T6NupsOsQf9D2gxiVQAAAVY"]
[Sun Nov 23 01:43:44.322680 2025] [:error] [pid 39718:tid 39771] [client 216.73.163.120:58093] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSH2UAQ3B_uDoeItNmNt5QAAAFY"]
[Sun Nov 23 01:43:45.019300 2025] [:error] [pid 39719:tid 39780] [client 45.146.54.138:44913] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSH2URmP4k0tY5Yex-XMSQAAAQQ"]
[Sun Nov 23 01:43:53.897871 2025] [:error] [pid 39719:tid 39787] [client 216.73.163.158:47685] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSH2WRmP4k0tY5Yex-XMWgAAAQs"]
[Sun Nov 23 01:43:54.614520 2025] [:error] [pid 39713:tid 39739] [client 216.73.163.146:29675] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSH2WkUgrb325CIAjPqdoAAAABI"]
[Sun Nov 23 01:43:59.597413 2025] [:error] [pid 39713:tid 39735] [client 216.73.163.156:25443] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSH2X0Ugrb325CIAjPqdqQAAAA4"]
[Sun Nov 23 01:44:00.334499 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.116:47623] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSH2YJb4RIAN-_BXnHllugAAAI8"]
[Sun Nov 23 01:44:06.451640 2025] [:error] [pid 8816:tid 8896] [client 45.146.54.135:63155] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSH2Zpb4RIAN-_BXnHll0AAAAIs"]
[Sun Nov 23 01:44:07.152316 2025] [:error] [pid 39942:tid 39994] [client 216.73.163.136:44631] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSH2Z6NupsOsQf9D2gxizAAAAUA"]
[Sun Nov 23 01:44:22.322103 2025] [:error] [pid 39942:tid 40011] [client 216.73.163.123:35933] [client 216.73.163.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSH2dqNupsOsQf9D2gxi3QAAAVA"]
[Sun Nov 23 01:44:24.451913 2025] [:error] [pid 8816:tid 8884] [client 216.73.163.156:36397] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSH2eJb4RIAN-_BXnHll8AAAAIA"]
[Sun Nov 23 01:44:29.462561 2025] [:error] [pid 39719:tid 39780] [client 216.73.163.116:23599] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSH2fRmP4k0tY5Yex-XMjAAAAQQ"]
[Sun Nov 23 01:44:34.027730 2025] [:error] [pid 39718:tid 39764] [client 216.73.163.151:39727] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSH2ggQ3B_uDoeItNmNuHwAAAE8"]
[Sun Nov 23 01:44:37.146364 2025] [:error] [pid 39942:tid 40000] [client 45.131.194.122:46587] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSH2haNupsOsQf9D2gxi8QAAAUU"]
[Sun Nov 23 01:44:37.942295 2025] [:error] [pid 39942:tid 40018] [client 216.73.163.151:48501] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSH2haNupsOsQf9D2gxi8wAAAVc"]
[Sun Nov 23 01:44:38.642182 2025] [:error] [pid 39718:tid 39752] [client 216.73.163.132:47393] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSH2hgQ3B_uDoeItNmNuJgAAAEM"]
[Sun Nov 23 01:44:45.814683 2025] [:error] [pid 39713:tid 39730] [client 216.73.163.132:22287] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSH2jUUgrb325CIAjPqeNQAAAAk"]
[Sun Nov 23 01:44:49.255983 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.129:54329] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSH2kZb4RIAN-_BXnHlmQwAAAI8"]
[Sun Nov 23 01:44:56.859887 2025] [:error] [pid 39718:tid 39757] [client 216.73.163.153:62271] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSH2mAQ3B_uDoeItNmNucQAAAEg"]
[Sun Nov 23 01:44:57.543246 2025] [:error] [pid 8816:tid 8900] [client 216.73.163.157:40563] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSH2mZb4RIAN-_BXnHlmYQAAAI8"]
[Sun Nov 23 01:45:00.737701 2025] [:error] [pid 39713:tid 39743] [client 216.73.163.133:45813] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSH2nEUgrb325CIAjPqeZQAAABY"]
[Sun Nov 23 01:45:20.851057 2025] [:error] [pid 39713:tid 39745] [client 45.146.54.131:61637] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSH2sEUgrb325CIAjPqehgAAABg"]
[Sun Nov 23 01:45:23.407424 2025] [:error] [pid 39719:tid 39796] [client 45.146.54.139:63375] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSH2sxmP4k0tY5Yex-XM6gAAARQ"]
[Sun Nov 23 01:45:28.504966 2025] [:error] [pid 39719:tid 39786] [client 216.73.163.160:31385] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSH2uBmP4k0tY5Yex-XM7gAAAQo"]
[Sun Nov 23 01:45:29.228167 2025] [:error] [pid 39719:tid 39779] [client 45.146.54.135:48875] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSH2uRmP4k0tY5Yex-XM7wAAAQM"]
[Sun Nov 23 01:45:30.022510 2025] [:error] [pid 39719:tid 39789] [client 216.73.163.151:41801] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSH2uhmP4k0tY5Yex-XM8QAAAQ0"]
[Sun Nov 23 01:45:33.407588 2025] [autoindex:error] [pid 39713:tid 39737] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:33.788651 2025] [autoindex:error] [pid 39713:tid 39745] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:34.180248 2025] [autoindex:error] [pid 39713:tid 39740] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:34.528613 2025] [autoindex:error] [pid 39713:tid 39729] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:36.957177 2025] [autoindex:error] [pid 39713:tid 39726] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:37.345253 2025] [autoindex:error] [pid 39713:tid 39736] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:37.696206 2025] [autoindex:error] [pid 39713:tid 39737] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:38.042520 2025] [autoindex:error] [pid 39713:tid 39728] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:38.432164 2025] [autoindex:error] [pid 39713:tid 39731] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:39.913649 2025] [autoindex:error] [pid 39713:tid 39742] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:40.612038 2025] [autoindex:error] [pid 39713:tid 39730] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:43.032910 2025] [autoindex:error] [pid 39713:tid 39724] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:43.378246 2025] [autoindex:error] [pid 39713:tid 39741] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:47.604142 2025] [autoindex:error] [pid 39713:tid 39721] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:48.049674 2025] [autoindex:error] [pid 39713:tid 39726] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:48.403895 2025] [autoindex:error] [pid 39713:tid 39741] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:48.778136 2025] [autoindex:error] [pid 39713:tid 39744] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:53.302958 2025] [autoindex:error] [pid 39713:tid 39741] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:55.533435 2025] [autoindex:error] [pid 39713:tid 39728] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:45:59.717988 2025] [autoindex:error] [pid 39713:tid 39745] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:00.102441 2025] [autoindex:error] [pid 39713:tid 39743] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:00.459185 2025] [autoindex:error] [pid 39713:tid 39737] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:14.071227 2025] [autoindex:error] [pid 39713:tid 39740] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:16.637412 2025] [autoindex:error] [pid 39713:tid 39743] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:16.979715 2025] [autoindex:error] [pid 39713:tid 39728] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:18.028712 2025] [autoindex:error] [pid 39713:tid 39737] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:18.439513 2025] [autoindex:error] [pid 39713:tid 39735] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:18.785578 2025] [autoindex:error] [pid 39713:tid 39729] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:46:25.657007 2025] [autoindex:error] [pid 39713:tid 39743] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:21.036918 2025] [autoindex:error] [pid 39713:tid 39732] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:21.426219 2025] [autoindex:error] [pid 39713:tid 39740] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:21.831213 2025] [autoindex:error] [pid 39713:tid 39743] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:22.193923 2025] [autoindex:error] [pid 39713:tid 39735] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:22.538063 2025] [autoindex:error] [pid 39713:tid 39741] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:23.427144 2025] [autoindex:error] [pid 39713:tid 39738] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:23.772725 2025] [autoindex:error] [pid 39713:tid 39737] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:24.130777 2025] [autoindex:error] [pid 39713:tid 39721] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:26.770228 2025] [autoindex:error] [pid 39713:tid 39744] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:29.083786 2025] [autoindex:error] [pid 39713:tid 39745] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:29.442784 2025] [autoindex:error] [pid 39713:tid 39738] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:29.806765 2025] [autoindex:error] [pid 39713:tid 39737] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:32.102082 2025] [autoindex:error] [pid 39713:tid 39729] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:32.474902 2025] [autoindex:error] [pid 39713:tid 39727] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:32.816733 2025] [autoindex:error] [pid 39713:tid 39734] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:47:33.158702 2025] [autoindex:error] [pid 39713:tid 39742] [client 216.73.163.117:56865] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:48:22.487654 2025] [autoindex:error] [pid 39719:tid 39786] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:48:54.058434 2025] [autoindex:error] [pid 39719:tid 39790] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:05.731769 2025] [autoindex:error] [pid 39719:tid 39791] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:06.101207 2025] [autoindex:error] [pid 39719:tid 39782] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:15.469831 2025] [autoindex:error] [pid 39719:tid 39786] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:15.846878 2025] [autoindex:error] [pid 39719:tid 39792] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:16.233145 2025] [autoindex:error] [pid 39719:tid 39778] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:16.631150 2025] [autoindex:error] [pid 39719:tid 39793] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:17.004343 2025] [autoindex:error] [pid 39719:tid 39780] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:17.387396 2025] [autoindex:error] [pid 39719:tid 39776] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:17.757795 2025] [autoindex:error] [pid 39719:tid 39795] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:18.116116 2025] [autoindex:error] [pid 39719:tid 39783] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:18.476585 2025] [autoindex:error] [pid 39719:tid 39798] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:49:59.003912 2025] [autoindex:error] [pid 39719:tid 39778] [client 216.73.163.130:28225] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 01:53:27.417429 2025] [:error] [pid 39713:tid 39737] [client 182.42.111.156:50960] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSH4l0Ugrb325CIAjPqi0QAAABA"]
[Sun Nov 23 02:49:14.849876 2025] [:error] [pid 39718:tid 39750] [client 216.126.225.91:49166] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSIFqgQ3B_uDoeItNmOGegAAAEE"]
[Sun Nov 23 05:57:46.970489 2025] [:error] [pid 38740:tid 38813] [client 138.186.233.105:46245] [client 138.186.233.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.186.233.105, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSIx2g13QPZSi6O8umWgJgAAAJE"]
[Sun Nov 23 06:01:09.663160 2025] [:error] [pid 38740:tid 38807] [client 138.186.233.105:8869] [client 138.186.233.105] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSIypQ13QPZSi6O8umWg-AAAAIs"]
[Sun Nov 23 06:02:27.735122 2025] [:error] [pid 38824:tid 38841] [client 138.186.233.105:8736] [client 138.186.233.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.186.233.105, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSIy808WZjXLvbHTHPfP4AAAAM4"]
[Sun Nov 23 06:03:39.225509 2025] [:error] [pid 38739:tid 38772] [client 138.186.233.105:57619] [client 138.186.233.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.186.233.105, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSIzOwdvEgJm2n2cDmoLIgAAAEM"]
[Sun Nov 23 06:04:46.575694 2025] [:error] [pid 38738:tid 38761] [client 138.186.233.105:46134] [client 138.186.233.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.186.233.105, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSIzfgytc6TL9XavPmPUlQAAABM"]
[Sun Nov 23 06:05:49.514988 2025] [:error] [pid 38738:tid 38743] [client 138.186.233.105:46086] [client 138.186.233.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.186.233.105, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSIzvQytc6TL9XavPmPU6wAAAAE"]
[Sun Nov 23 08:14:03.976650 2025] [:error] [pid 38739:tid 38793] [client 170.106.187.106:36086] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSJRywdvEgJm2n2cDmpQVAAAAFg"]
[Sun Nov 23 18:21:54.531603 2025] [:error] [pid 38738:tid 38750] [client 176.65.132.18:60952] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSLgQgytc6TL9XavPmM1OgAAAAg"]
[Sun Nov 23 18:25:38.358255 2025] [:error] [pid 14602:tid 14627] [client 172.70.246.51:11047] [client 172.70.246.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSLhIh-I77jdD81pU-nREgAAAUY"]
[Sun Nov 23 19:34:32.833123 2025] [:error] [pid 38824:tid 38849] [client 176.65.132.18:50480] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSLxSE8WZjXLvbHTHPf06gAAANY"]
[Sun Nov 23 20:54:17.608788 2025] [:error] [pid 44652:tid 44715] [client 117.62.235.53:41743] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSMD-diQFwsyXQDhwyAYPgAAAQk"]
[Mon Nov 24 02:40:14.163248 2025] [:error] [pid 1453:tid 1488] [client 172.70.246.125:9697] [client 172.70.246.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSNVDhUBCt7LU0bO_GBi1wAAAIQ"]
[Mon Nov 24 02:41:13.815096 2025] [:error] [pid 8337:tid 8340] [client 176.65.132.18:36588] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSNVSeSmps4S2j95D5ibMgAAAAE"]
[Mon Nov 24 03:59:05.988253 2025] [:error] [pid 29259:tid 29340] [client 176.65.132.18:56606] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSNniYdbI6tjKToOYwSsjwAAAJY"]
[Mon Nov 24 05:02:07.214402 2025] [:error] [pid 12999:tid 13024] [client 52.236.123.156:43715] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSN2T1tj_teEYJ8vu7ED0wAAANU"]
[Mon Nov 24 05:02:09.816496 2025] [:error] [pid 12912:tid 12988] [client 52.236.123.156:43743] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSN2UZMj_Lgt36UonYKy4QAAAJM"]
[Mon Nov 24 05:02:32.112069 2025] [:error] [pid 12910:tid 12935] [client 52.236.123.156:26033] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSN2aGkWgvzAF2Nei2VmRQAAABQ"]
[Mon Nov 24 05:02:34.981794 2025] [:error] [pid 12910:tid 12929] [client 52.236.123.156:43667] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aSN2amkWgvzAF2Nei2VmRwAAAA4"]
[Mon Nov 24 05:02:39.660327 2025] [:error] [pid 12999:tid 13008] [client 52.236.123.156:55483] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aSN2b1tj_teEYJ8vu7EEAQAAAMU"]
[Mon Nov 24 05:02:41.862850 2025] [:error] [pid 12999:tid 13024] [client 52.236.123.156:54191] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aSN2cVtj_teEYJ8vu7EEAwAAANU"]
[Mon Nov 24 05:02:51.294212 2025] [:error] [pid 12912:tid 12973] [client 52.236.123.156:44962] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nc4.php"] [unique_id "aSN2e5Mj_Lgt36UonYKzBAAAAIQ"]
[Mon Nov 24 05:02:53.285437 2025] [:error] [pid 12912:tid 12986] [client 52.236.123.156:44991] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nc4.php"] [unique_id "aSN2fZMj_Lgt36UonYKzBQAAAJE"]
[Mon Nov 24 05:03:02.349581 2025] [:error] [pid 12999:tid 13005] [client 52.236.123.156:26108] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/nc4.php"] [unique_id "aSN2hltj_teEYJ8vu7EEKQAAAMI"]
[Mon Nov 24 05:03:04.064644 2025] [:error] [pid 12910:tid 12932] [client 52.236.123.156:44286] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSN2iGkWgvzAF2Nei2VmWAAAABE"]
[Mon Nov 24 05:03:05.830342 2025] [:error] [pid 12999:tid 13017] [client 52.236.123.156:44251] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSN2iVtj_teEYJ8vu7EELwAAAM4"]
[Mon Nov 24 05:03:09.097222 2025] [:error] [pid 12999:tid 13023] [client 52.236.123.156:55542] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSN2jVtj_teEYJ8vu7EENQAAANQ"]
[Mon Nov 24 05:03:11.322604 2025] [:error] [pid 12999:tid 13017] [client 52.236.123.156:43685] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSN2j1tj_teEYJ8vu7EEOwAAAM4"]
[Mon Nov 24 05:03:13.630136 2025] [:error] [pid 12999:tid 13013] [client 52.236.123.156:53646] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/g.php"] [unique_id "aSN2kVtj_teEYJ8vu7EEPQAAAMo"]
[Mon Nov 24 05:03:17.311459 2025] [:error] [pid 12910:tid 12922] [client 52.236.123.156:26164] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/g.php"] [unique_id "aSN2lWkWgvzAF2Nei2VmYQAAAAc"]
[Mon Nov 24 05:04:15.786541 2025] [:error] [pid 12912:tid 12983] [client 52.236.123.156:49907] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSN2z5Mj_Lgt36UonYKzVQAAAI4"]
[Mon Nov 24 05:04:16.807723 2025] [proxy_fcgi:error] [pid 12912:tid 12979] [client 52.236.123.156:49913] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 05:04:17.057459 2025] [:error] [pid 12912:tid 12977] [client 52.236.123.156:49913] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSN20ZMj_Lgt36UonYKzVwAAAIg"]
[Mon Nov 24 05:04:22.263023 2025] [:error] [pid 12912:tid 12989] [client 52.236.123.156:49903] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSN21pMj_Lgt36UonYKzXQAAAJQ"]
[Mon Nov 24 05:04:41.279324 2025] [:error] [pid 12911:tid 12955] [client 52.236.123.156:26170] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xx.php"] [unique_id "aSN26UDMbk9464jnIl7f0QAAAE0"]
[Mon Nov 24 05:04:43.904860 2025] [:error] [pid 12999:tid 13012] [client 52.236.123.156:26507] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xx.php"] [unique_id "aSN261tj_teEYJ8vu7EEygAAAMk"]
[Mon Nov 24 05:04:45.514087 2025] [:error] [pid 12912:tid 12987] [client 52.236.123.156:43057] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xx.php"] [unique_id "aSN27ZMj_Lgt36UonYKzjgAAAJI"]
[Mon Nov 24 05:04:51.029140 2025] [:error] [pid 12999:tid 13005] [client 52.236.123.156:25884] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/xx.php"] [unique_id "aSN281tj_teEYJ8vu7EE7wAAAMI"]
[Mon Nov 24 05:04:52.875015 2025] [:error] [pid 12999:tid 13004] [client 52.236.123.156:25896] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSN29Ftj_teEYJ8vu7EFBgAAAME"]
[Mon Nov 24 05:04:55.213938 2025] [:error] [pid 12912:tid 12973] [client 52.236.123.156:26513] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSN295Mj_Lgt36UonYKzqQAAAIQ"]
[Mon Nov 24 05:04:57.946900 2025] [:error] [pid 12910:tid 12922] [client 52.236.123.156:25900] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSN2-WkWgvzAF2Nei2VmrwAAAAc"]
[Mon Nov 24 05:04:59.949459 2025] [:error] [pid 12910:tid 12925] [client 52.236.123.156:26152] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSN2-2kWgvzAF2Nei2VmsQAAAAo"]
[Mon Nov 24 05:05:01.512595 2025] [:error] [pid 12999:tid 13017] [client 52.236.123.156:49888] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSN2_Vtj_teEYJ8vu7EFIgAAAM4"]
[Mon Nov 24 05:05:10.689624 2025] [:error] [pid 12910:tid 12931] [client 52.236.123.156:49880] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSN3BmkWgvzAF2Nei2VmswAAABA"]
[Mon Nov 24 05:05:21.655010 2025] [:error] [pid 12912:tid 12988] [client 52.236.123.156:26122] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/17.php"] [unique_id "aSN3EZMj_Lgt36UonYKzvQAAAJM"]
[Mon Nov 24 05:05:26.669644 2025] [:error] [pid 12999:tid 13019] [client 52.236.123.156:26223] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/17.php"] [unique_id "aSN3Fltj_teEYJ8vu7EFRwAAANA"]
[Mon Nov 24 05:05:29.229442 2025] [:error] [pid 12999:tid 13007] [client 52.236.123.156:45031] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/17.php"] [unique_id "aSN3GVtj_teEYJ8vu7EFTQAAAMQ"]
[Mon Nov 24 05:06:29.834565 2025] [:error] [pid 12912:tid 12983] [client 52.236.123.156:47866] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSN3VZMj_Lgt36UonYK0XQAAAI4"]
[Mon Nov 24 05:06:50.558494 2025] [autoindex:error] [pid 12999:tid 13006] [client 52.236.123.156:44196] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 05:06:55.228912 2025] [:error] [pid 12999:tid 13014] [client 52.236.123.156:44196] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSN3b1tj_teEYJ8vu7EF5wAAAMs"]
[Mon Nov 24 05:06:57.253638 2025] [:error] [pid 12912:tid 12972] [client 52.236.123.156:25721] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSN3cZMj_Lgt36UonYK0dgAAAIM"]
[Mon Nov 24 05:07:07.540114 2025] [:error] [pid 12999:tid 13012] [client 52.236.123.156:25682] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSN3e1tj_teEYJ8vu7EF7AAAAMk"]
[Mon Nov 24 05:07:09.318044 2025] [:error] [pid 53508:tid 53520] [client 52.236.123.156:26334] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSN3fW639qxbKCcL09yqewAAAQo"]
[Mon Nov 24 05:07:13.872722 2025] [:error] [pid 12999:tid 13008] [client 52.236.123.156:26362] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aSN3gVtj_teEYJ8vu7EF8QAAAMU"]
[Mon Nov 24 05:07:16.028644 2025] [:error] [pid 12910:tid 12931] [client 52.236.123.156:54227] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aSN3hGkWgvzAF2Nei2VnmAAAABA"]
[Mon Nov 24 05:07:17.709642 2025] [:error] [pid 12999:tid 13011] [client 52.236.123.156:54155] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aSN3hVtj_teEYJ8vu7EF9AAAAMg"]
[Mon Nov 24 05:07:19.799220 2025] [:error] [pid 12911:tid 12950] [client 52.236.123.156:55476] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aSN3h0DMbk9464jnIl7gQwAAAEg"]
[Mon Nov 24 05:07:22.749132 2025] [:error] [pid 12912:tid 12981] [client 52.236.123.156:47789] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/multi.php"] [unique_id "aSN3ipMj_Lgt36UonYK0gwAAAIw"]
[Mon Nov 24 05:07:24.431873 2025] [:error] [pid 12912:tid 12969] [client 52.236.123.156:55446] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/multi.php"] [unique_id "aSN3jJMj_Lgt36UonYK0hwAAAIA"]
[Mon Nov 24 05:07:26.523033 2025] [:error] [pid 12912:tid 12984] [client 52.236.123.156:55484] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/multi.php"] [unique_id "aSN3jpMj_Lgt36UonYK0iwAAAI8"]
[Mon Nov 24 05:07:28.028078 2025] [:error] [pid 12910:tid 12922] [client 52.236.123.156:54224] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/uploads/multi.php"] [unique_id "aSN3kGkWgvzAF2Nei2VnowAAAAc"]
[Mon Nov 24 05:07:30.883110 2025] [:error] [pid 12911:tid 12963] [client 52.236.123.156:55434] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aSN3kkDMbk9464jnIl7gTgAAAFU"]
[Mon Nov 24 05:07:33.196814 2025] [:error] [pid 53508:tid 53512] [client 52.236.123.156:54230] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aSN3lW639qxbKCcL09yqnAAAAQI"]
[Mon Nov 24 05:07:36.116060 2025] [:error] [pid 53508:tid 53531] [client 52.236.123.156:55454] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aSN3mG639qxbKCcL09yqogAAARU"]
[Mon Nov 24 05:07:38.720378 2025] [:error] [pid 12911:tid 12945] [client 52.236.123.156:55491] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/3.php"] [unique_id "aSN3mkDMbk9464jnIl7gUwAAAEM"]
[Mon Nov 24 05:07:41.861578 2025] [:error] [pid 12912:tid 12970] [client 52.236.123.156:55444] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSN3nZMj_Lgt36UonYK0mQAAAIE"]
[Mon Nov 24 05:07:44.329932 2025] [:error] [pid 12999:tid 13020] [client 52.236.123.156:44280] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSN3oFtj_teEYJ8vu7EGAwAAANE"]
[Mon Nov 24 05:07:49.364517 2025] [:error] [pid 12910:tid 12926] [client 52.236.123.156:43459] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSN3pWkWgvzAF2Nei2VntQAAAAs"]
[Mon Nov 24 05:08:38.076614 2025] [:error] [pid 12910:tid 12923] [client 52.236.123.156:44238] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/oo.php"] [unique_id "aSN31mkWgvzAF2Nei2Vn5gAAAAg"]
[Mon Nov 24 05:08:44.333609 2025] [:error] [pid 12910:tid 12916] [client 52.236.123.156:26032] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/oo.php"] [unique_id "aSN33GkWgvzAF2Nei2Vn7AAAAAE"]
[Mon Nov 24 05:09:04.213347 2025] [:error] [pid 53508:tid 53516] [client 52.236.123.156:49843] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/alfanew.php"] [unique_id "aSN38G639qxbKCcL09yrVQAAAQY"]
[Mon Nov 24 05:09:14.413388 2025] [:error] [pid 12912:tid 12979] [client 52.236.123.156:26028] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/alfanew.php"] [unique_id "aSN3-pMj_Lgt36UonYK0-QAAAIo"]
[Mon Nov 24 05:09:22.177532 2025] [:error] [pid 12912:tid 12990] [client 52.236.123.156:26015] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSN4ApMj_Lgt36UonYK0_AAAAJU"]
[Mon Nov 24 05:09:23.473033 2025] [:error] [pid 12912:tid 12978] [client 52.236.123.156:43090] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSN4A5Mj_Lgt36UonYK1AQAAAIk"]
[Mon Nov 24 05:09:23.961598 2025] [:error] [pid 12910:tid 12929] [client 193.37.33.58:28167] [client 193.37.33.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.58, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSN4A2kWgvzAF2Nei2VoFgAAAA4"]
[Mon Nov 24 05:09:25.320281 2025] [:error] [pid 12911:tid 12947] [client 52.236.123.156:25994] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSN4BUDMbk9464jnIl7gvAAAAEU"]
[Mon Nov 24 05:09:27.953098 2025] [:error] [pid 12999:tid 13024] [client 52.236.123.156:26615] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSN4B1tj_teEYJ8vu7EGqQAAANU"]
[Mon Nov 24 05:09:32.763874 2025] [:error] [pid 53508:tid 53529] [client 52.236.123.156:43083] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSN4DG639qxbKCcL09yrpgAAARM"]
[Mon Nov 24 05:09:41.048547 2025] [:error] [pid 12910:tid 12915] [client 52.236.123.156:43133] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSN4FWkWgvzAF2Nei2VoMwAAAAA"]
[Mon Nov 24 05:09:52.213601 2025] [:error] [pid 12911:tid 12950] [client 52.236.123.156:25747] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSN4IEDMbk9464jnIl7gzwAAAEg"]
[Mon Nov 24 05:10:09.637464 2025] [:error] [pid 53508:tid 53513] [client 52.236.123.156:26137] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSN4MW639qxbKCcL09yr7QAAAQM"]
[Mon Nov 24 05:10:14.554340 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:43962] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zews.php"] [unique_id "aSN4NpMj_Lgt36UonYK1LAAAAIU"]
[Mon Nov 24 05:10:18.845424 2025] [:error] [pid 12999:tid 13016] [client 52.236.123.156:26521] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zews.php"] [unique_id "aSN4Oltj_teEYJ8vu7EG1AAAAM0"]
[Mon Nov 24 05:10:20.460160 2025] [:error] [pid 12912:tid 12986] [client 52.236.123.156:43923] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zews.php"] [unique_id "aSN4PJMj_Lgt36UonYK1LwAAAJE"]
[Mon Nov 24 05:10:24.575810 2025] [:error] [pid 53508:tid 53531] [client 52.236.123.156:26533] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/zews.php"] [unique_id "aSN4QG639qxbKCcL09ysGQAAARU"]
[Mon Nov 24 05:10:26.234902 2025] [:error] [pid 12910:tid 12917] [client 52.236.123.156:26526] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSN4QmkWgvzAF2Nei2VodQAAAAI"]
[Mon Nov 24 05:10:28.831963 2025] [:error] [pid 12999:tid 13023] [client 52.236.123.156:45010] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSN4RFtj_teEYJ8vu7EG6gAAANQ"]
[Mon Nov 24 05:10:30.017856 2025] [:error] [pid 53508:tid 53534] [client 52.236.123.156:44999] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSN4Rm639qxbKCcL09ysIAAAARg"]
[Mon Nov 24 05:10:33.470409 2025] [:error] [pid 12910:tid 12930] [client 52.236.123.156:55032] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSN4SWkWgvzAF2Nei2VoeQAAAA8"]
[Mon Nov 24 05:11:30.374416 2025] [:error] [pid 53508:tid 53527] [client 52.236.123.156:47165] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSN4gm639qxbKCcL09yszAAAARE"]
[Mon Nov 24 05:11:35.326854 2025] [:error] [pid 12912:tid 12993] [client 52.236.123.156:47167] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/menu.php"] [unique_id "aSN4h5Mj_Lgt36UonYK1xAAAAJg"]
[Mon Nov 24 05:11:38.115814 2025] [:error] [pid 12911:tid 12966] [client 52.236.123.156:26072] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/menu.php"] [unique_id "aSN4ikDMbk9464jnIl7hRgAAAFg"]
[Mon Nov 24 05:11:40.015680 2025] [:error] [pid 12999:tid 13024] [client 52.236.123.156:26312] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/menu.php"] [unique_id "aSN4jFtj_teEYJ8vu7EHcgAAANU"]
[Mon Nov 24 05:11:46.271403 2025] [:error] [pid 12999:tid 13010] [client 52.236.123.156:25718] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/menu.php"] [unique_id "aSN4kltj_teEYJ8vu7EHdAAAAMc"]
[Mon Nov 24 05:11:49.549835 2025] [:error] [pid 12910:tid 12924] [client 52.236.123.156:47145] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bs1.php"] [unique_id "aSN4lWkWgvzAF2Nei2Vo3wAAAAk"]
[Mon Nov 24 05:11:55.001484 2025] [:error] [pid 12910:tid 12938] [client 52.236.123.156:26272] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bs1.php"] [unique_id "aSN4m2kWgvzAF2Nei2Vo6AAAABc"]
[Mon Nov 24 05:11:57.205820 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:54164] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/bs1.php"] [unique_id "aSN4nZMj_Lgt36UonYK13QAAAIU"]
[Mon Nov 24 05:12:28.332200 2025] [:error] [pid 12912:tid 12980] [client 52.236.123.156:54167] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/build.php"] [unique_id "aSN4vJMj_Lgt36UonYK1-gAAAIs"]
[Mon Nov 24 05:12:31.957838 2025] [:error] [pid 12999:tid 13015] [client 52.236.123.156:26290] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/build.php"] [unique_id "aSN4v1tj_teEYJ8vu7EHyAAAAMw"]
[Mon Nov 24 05:21:55.288584 2025] [:error] [pid 12910:tid 12929] [client 193.37.33.91:40129] [client 193.37.33.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.91, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSN682kWgvzAF2Nei2VrkgAAAA4"]
[Mon Nov 24 05:21:55.330086 2025] [:error] [pid 12911:tid 12958] [client 193.37.33.97:44477] [client 193.37.33.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.97, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSN680DMbk9464jnIl7kiAAAAFA"]
[Mon Nov 24 05:38:56.373175 2025] [:error] [pid 12910:tid 12917] [client 193.37.33.71:64549] [client 193.37.33.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.71, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSN-8GkWgvzAF2Nei2VwbgAAAAI"]
[Mon Nov 24 05:38:56.383513 2025] [:error] [pid 53508:tid 53516] [client 193.37.33.71:59695] [client 193.37.33.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.71, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSN-8G639qxbKCcL09y5KAAAAQY"]
[Mon Nov 24 05:52:09.872669 2025] [:error] [pid 53508:tid 53513] [client 193.37.33.77:45091] [client 193.37.33.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.77, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSOCCW639qxbKCcL09y_LgAAAQM"]
[Mon Nov 24 05:52:09.872671 2025] [:error] [pid 53508:tid 53516] [client 193.37.33.84:52987] [client 193.37.33.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.84, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSOCCW639qxbKCcL09y_LQAAAQY"]
[Mon Nov 24 05:56:22.078873 2025] [:error] [pid 53508:tid 53522] [client 143.105.141.99:12483] [client 143.105.141.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.141.99, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSODBm639qxbKCcL09zATwAAAQw"]
[Mon Nov 24 07:53:22.788765 2025] [:error] [pid 53508:tid 53526] [client 143.105.141.99:48362] [client 143.105.141.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSOecm639qxbKCcL09z_pgAAARA"]
[Mon Nov 24 07:54:42.647593 2025] [:error] [pid 12912:tid 12989] [client 143.105.141.99:40713] [client 143.105.141.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.141.99, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOewpMj_Lgt36UonYLvRQAAAJQ"]
[Mon Nov 24 07:56:01.416655 2025] [:error] [pid 53508:tid 53532] [client 143.105.141.99:50578] [client 143.105.141.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.141.99, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOfEW639qxbKCcL09wA6gAAARY"]
[Mon Nov 24 07:57:31.093970 2025] [:error] [pid 12911:tid 12953] [client 143.105.141.99:9310] [client 143.105.141.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.141.99, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOfa0DMbk9464jnIl4Z4AAAAEs"]
[Mon Nov 24 07:58:59.588503 2025] [:error] [pid 12910:tid 12915] [client 143.105.141.99:34978] [client 143.105.141.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.141.99, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOfw2kWgvzAF2Nei2WhCAAAAAA"]
[Mon Nov 24 08:00:28.419491 2025] [:error] [pid 12999:tid 13015] [client 143.105.141.99:12189] [client 143.105.141.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.141.99, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOgHFtj_teEYJ8vu7FNWAAAAMw"]
[Mon Nov 24 08:17:41.078767 2025] [:error] [pid 48601:tid 48675] [client 103.65.237.124:63354] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkJYMM4MaVTk74-AYnKgAAAhI"]
[Mon Nov 24 09:45:02.301719 2025] [:error] [pid 48688:tid 48692] [client 182.44.2.148:51489] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSO4nhm2q1FkzLam7A1H0AAAAkA"]
[Mon Nov 24 14:03:13.006486 2025] [:error] [pid 48688:tid 48716] [client 167.71.175.236:42558] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSP1IRm2q1FkzLam7A17BgAAAlg"]
[Mon Nov 24 14:03:13.627382 2025] [:error] [pid 48688:tid 48692] [client 167.71.175.236:42564] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/server"] [unique_id "aSP1IRm2q1FkzLam7A17BwAAAkA"]
[Mon Nov 24 14:03:14.255029 2025] [:error] [pid 16516:tid 16530] [client 167.71.175.236:42576] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSP1IvqZbniwaNwL8XnJ7AAAAQs"]
[Mon Nov 24 14:03:14.876822 2025] [:error] [pid 48688:tid 48702] [client 167.71.175.236:42578] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/about"] [unique_id "aSP1Ihm2q1FkzLam7A17CAAAAko"]
[Mon Nov 24 14:03:15.498098 2025] [:error] [pid 48600:tid 48643] [client 167.71.175.236:42584] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aSP1I_tOzSUAQvWVjBdfBgAAAc0"]
[Mon Nov 24 14:03:16.122384 2025] [:error] [pid 49900:tid 49925] [client 167.71.175.236:42598] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aSP1JDCyPLrvg06aornjBwAAABc"]
[Mon Nov 24 14:03:16.743634 2025] [:error] [pid 48600:tid 48636] [client 167.71.175.236:42604] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSP1JPtOzSUAQvWVjBdfCAAAAcY"]
[Mon Nov 24 14:03:17.364128 2025] [:error] [pid 48600:tid 48644] [client 167.71.175.236:42606] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aSP1JftOzSUAQvWVjBdfCQAAAc4"]
[Mon Nov 24 14:03:17.984718 2025] [:error] [pid 48601:tid 48663] [client 167.71.175.236:42618] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aSP1JYMM4MaVTk74-AaMiQAAAgY"]
[Mon Nov 24 14:03:18.607844 2025] [:error] [pid 16516:tid 16537] [client 167.71.175.236:42628] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/_all_dbs"] [unique_id "aSP1JvqZbniwaNwL8XnJ7wAAARI"]
[Mon Nov 24 14:03:19.229726 2025] [:error] [pid 16516:tid 16532] [client 167.71.175.236:58512] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aSP1J_qZbniwaNwL8XnJ8AAAAQ0"]
[Mon Nov 24 14:03:19.851442 2025] [:error] [pid 48688:tid 48703] [client 167.71.175.236:58516] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.env"] [unique_id "aSP1Jxm2q1FkzLam7A17DQAAAks"]
[Mon Nov 24 14:03:20.471599 2025] [:error] [pid 16549:tid 16565] [client 167.71.175.236:58530] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSP1KKeWW19A99PUw_cdLwAAAU0"]
[Mon Nov 24 14:03:21.094801 2025] [:error] [pid 48599:tid 48616] [client 167.71.175.236:58538] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSP1KZzvu6PDJiRKE3IDpQAAAY0"]
[Mon Nov 24 14:03:21.716754 2025] [:error] [pid 48600:tid 48651] [client 167.71.175.236:58548] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aSP1KftOzSUAQvWVjBdfDgAAAdU"]
[Mon Nov 24 14:03:22.340640 2025] [:error] [pid 48601:tid 48668] [client 167.71.175.236:58554] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/telescope/requests"] [unique_id "aSP1KoMM4MaVTk74-AaMjAAAAgs"]
[Mon Nov 24 14:03:22.963802 2025] [:error] [pid 48688:tid 48716] [client 167.71.175.236:58568] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aSP1Khm2q1FkzLam7A17DgAAAlg"]
[Mon Nov 24 14:03:23.584871 2025] [:error] [pid 48601:tid 48664] [client 167.71.175.236:58570] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSP1K4MM4MaVTk74-AaMjwAAAgc"]
[Mon Nov 24 16:18:10.455304 2025] [:error] [pid 49900:tid 49919] [client 123.187.240.242:52690] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSQUwjCyPLrvg06aorn_eQAAABE"]
[Mon Nov 24 18:55:27.563335 2025] [:error] [pid 9630:tid 9656] [client 43.157.147.3:41644] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSQ5nyrSgUgPGkizt2oKqgAAAFg"]
[Mon Nov 24 21:45:37.938037 2025] [:error] [pid 16593:tid 16617] [client 193.32.126.212:54059] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSRhgRVGznHBJI2LKpRr5gAAApY"]
[Mon Nov 24 21:45:38.432187 2025] [:error] [pid 16441:tid 16445] [client 193.32.126.212:54516] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSRhgoq_bc5MOa9HflmTPwAAAIE"]
[Mon Nov 24 21:45:38.927635 2025] [:error] [pid 48601:tid 48666] [client 193.32.126.212:55156] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgoMM4MaVTk74-AbnFgAAAgk"]
[Mon Nov 24 23:04:31.570361 2025] [:error] [pid 49900:tid 49921] [client 113.219.218.197:54378] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSRz_zCyPLrvg06aorlb6QAAABM"]
[Mon Nov 24 23:04:57.161949 2025] [:error] [pid 48601:tid 48664] [client 43.167.239.66:41018] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSR0GYMM4MaVTk74-Ab5CgAAAgc"]
[Tue Nov 25 02:20:49.648669 2025] [:error] [pid 16441:tid 16451] [client 157.119.200.53:50381] [client 157.119.200.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.200.53, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSiAYq_bc5MOa9HflnuvQAAAIc"]
[Tue Nov 25 02:25:02.263855 2025] [:error] [pid 9630:tid 9648] [client 157.119.200.53:54544] [client 157.119.200.53] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSSi_irSgUgPGkizt2p8hAAAAFA"]
[Tue Nov 25 02:26:24.805323 2025] [:error] [pid 49900:tid 49925] [client 157.119.200.53:55640] [client 157.119.200.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.200.53, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSjUDCyPLrvg06aormFBwAAABc"]
[Tue Nov 25 02:27:40.051232 2025] [:error] [pid 48688:tid 48704] [client 157.119.200.53:56104] [client 157.119.200.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.200.53, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSjnBm2q1FkzLam7A0BKQAAAkw"]
[Tue Nov 25 02:27:41.618057 2025] [:error] [pid 48688:tid 48709] [client 49.42.116.243:49159] [client 49.42.116.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.116.243, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSjnRm2q1FkzLam7A0BKgAAAlE"]
[Tue Nov 25 02:28:56.955450 2025] [:error] [pid 9630:tid 9646] [client 157.119.200.53:56485] [client 157.119.200.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.200.53, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSj6CrSgUgPGkizt2p9agAAAE4"]
[Tue Nov 25 02:30:15.513895 2025] [:error] [pid 48688:tid 48701] [client 157.119.200.53:57296] [client 157.119.200.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.119.200.53, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSkNxm2q1FkzLam7A0BcgAAAkk"]
[Tue Nov 25 02:32:27.693638 2025] [:error] [pid 9630:tid 9633] [client 49.42.116.243:53271] [client 49.42.116.243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSSkuyrSgUgPGkizt2p-NQAAAEE"]
[Tue Nov 25 02:34:04.863427 2025] [:error] [pid 16441:tid 16465] [client 49.42.116.243:54556] [client 49.42.116.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.116.243, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSlHIq_bc5MOa9HflnzlgAAAJU"]
[Tue Nov 25 02:35:48.665764 2025] [:error] [pid 16441:tid 16466] [client 49.42.116.243:55763] [client 49.42.116.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.116.243, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSlhIq_bc5MOa9Hflnz_gAAAJY"]
[Tue Nov 25 02:38:23.193919 2025] [:error] [pid 16441:tid 16445] [client 49.42.116.243:57362] [client 49.42.116.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.116.243, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSmH4q_bc5MOa9Hfln0cgAAAIE"]
[Tue Nov 25 02:39:51.685619 2025] [:error] [pid 48600:tid 48643] [client 49.42.116.243:58655] [client 49.42.116.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.42.116.243, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSmd_tOzSUAQvWVjBfIpAAAAc0"]
[Tue Nov 25 03:02:38.076064 2025] [:error] [pid 48600:tid 48635] [client 4.233.92.206:64840] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/v.php"] [unique_id "aSSrzvtOzSUAQvWVjBfMQQAAAcU"]
[Tue Nov 25 03:02:50.812447 2025] [:error] [pid 16441:tid 16461] [client 4.233.92.206:65382] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/v.php"] [unique_id "aSSr2oq_bc5MOa9Hfln8LQAAAJE"]
[Tue Nov 25 03:02:53.629677 2025] [:error] [pid 16441:tid 16460] [client 4.233.92.206:65386] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/v.php"] [unique_id "aSSr3Yq_bc5MOa9Hfln8MQAAAJA"]
[Tue Nov 25 03:02:54.619656 2025] [:error] [pid 48600:tid 48653] [client 4.233.92.206:64833] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/d2.php"] [unique_id "aSSr3vtOzSUAQvWVjBfMRQAAAdc"]
[Tue Nov 25 03:03:01.846807 2025] [:error] [pid 9630:tid 9643] [client 4.233.92.206:65387] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/d2.php"] [unique_id "aSSr5SrSgUgPGkizt2qFXwAAAEs"]
[Tue Nov 25 03:03:02.634042 2025] [:error] [pid 9630:tid 9641] [client 4.233.92.206:65354] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/d2.php"] [unique_id "aSSr5irSgUgPGkizt2qFYAAAAEk"]
[Tue Nov 25 03:03:04.833432 2025] [:error] [pid 16549:tid 16563] [client 4.233.92.206:64849] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/d2.php"] [unique_id "aSSr6KeWW19A99PUw_eVxQAAAUs"]
[Tue Nov 25 03:03:06.332305 2025] [:error] [pid 48599:tid 48614] [client 4.233.92.206:65379] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/snus.php"] [unique_id "aSSr6pzvu6PDJiRKE3KFXgAAAYs"]
[Tue Nov 25 03:03:14.009064 2025] [:error] [pid 49900:tid 49905] [client 4.233.92.206:65371] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/snus.php"] [unique_id "aSSr8jCyPLrvg06aormM0AAAAAM"]
[Tue Nov 25 03:03:16.098669 2025] [:error] [pid 16441:tid 16468] [client 4.233.92.206:65349] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/snus.php"] [unique_id "aSSr9Iq_bc5MOa9Hfln8SwAAAJg"]
[Tue Nov 25 03:03:21.364380 2025] [:error] [pid 9630:tid 9633] [client 4.233.92.206:65310] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/011i.php"] [unique_id "aSSr-SrSgUgPGkizt2qFaAAAAEE"]
[Tue Nov 25 03:03:22.520430 2025] [:error] [pid 16441:tid 16454] [client 4.233.92.206:64870] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/011i.php"] [unique_id "aSSr-oq_bc5MOa9Hfln8UwAAAIo"]
[Tue Nov 25 03:03:33.195711 2025] [:error] [pid 48599:tid 48604] [client 4.233.92.206:65336] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/011i.php"] [unique_id "aSSsBZzvu6PDJiRKE3KFaAAAAYE"]
[Tue Nov 25 03:04:19.862733 2025] [:error] [pid 48601:tid 48673] [client 4.233.92.206:64883] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/content-over.php"] [unique_id "aSSsM4MM4MaVTk74-AYkYgAAAhA"]
[Tue Nov 25 03:04:21.065427 2025] [:error] [pid 49900:tid 49914] [client 4.233.92.206:65335] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/content-over.php"] [unique_id "aSSsNTCyPLrvg06aormNKgAAAAw"]
[Tue Nov 25 03:04:22.599814 2025] [:error] [pid 48688:tid 48708] [client 4.233.92.206:64873] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/content-over.php"] [unique_id "aSSsNhm2q1FkzLam7A0HFgAAAlA"]
[Tue Nov 25 03:04:24.274364 2025] [:error] [pid 48600:tid 48640] [client 4.233.92.206:65294] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/content-over.php"] [unique_id "aSSsOPtOzSUAQvWVjBfMdQAAAco"]
[Tue Nov 25 03:04:28.821032 2025] [:error] [pid 9630:tid 9645] [client 4.233.92.206:65293] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gm.php"] [unique_id "aSSsPCrSgUgPGkizt2qFkgAAAE0"]
[Tue Nov 25 03:05:01.224099 2025] [:error] [pid 49900:tid 49922] [client 4.233.92.206:64867] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/naxc.php"] [unique_id "aSSsXTCyPLrvg06aormNegAAABQ"]
[Tue Nov 25 03:05:04.200123 2025] [:error] [pid 9630:tid 9652] [client 4.233.92.206:64893] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/naxc.php"] [unique_id "aSSsYCrSgUgPGkizt2qF6AAAAFQ"]
[Tue Nov 25 03:05:05.165089 2025] [:error] [pid 9630:tid 9648] [client 4.233.92.206:64838] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/naxc.php"] [unique_id "aSSsYSrSgUgPGkizt2qF6QAAAFA"]
[Tue Nov 25 03:05:09.844346 2025] [:error] [pid 48600:tid 48634] [client 4.233.92.206:65381] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/naxc.php"] [unique_id "aSSsZftOzSUAQvWVjBfMkAAAAcQ"]
[Tue Nov 25 03:05:14.709687 2025] [:error] [pid 48600:tid 48640] [client 4.233.92.206:65397] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aSSsavtOzSUAQvWVjBfMkQAAAco"]
[Tue Nov 25 03:05:24.350905 2025] [:error] [pid 16593:tid 16614] [client 4.233.92.206:65299] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSSsdBVGznHBJI2LKpSbQQAAApM"]
[Tue Nov 25 03:05:48.067687 2025] [:error] [pid 16441:tid 16447] [client 4.233.92.206:65377] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gifclass.php"] [unique_id "aSSsjIq_bc5MOa9Hfln8zwAAAIM"]
[Tue Nov 25 03:05:56.771497 2025] [:error] [pid 49900:tid 49906] [client 4.233.92.206:65284] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gifclass.php"] [unique_id "aSSslDCyPLrvg06aormNzQAAAAQ"]
[Tue Nov 25 03:06:00.006544 2025] [:error] [pid 16593:tid 16617] [client 4.233.92.206:65390] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gifclass.php"] [unique_id "aSSsmBVGznHBJI2LKpSbUgAAApY"]
[Tue Nov 25 03:06:01.232815 2025] [:error] [pid 9630:tid 9654] [client 4.233.92.206:65363] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/gifclass.php"] [unique_id "aSSsmSrSgUgPGkizt2qGDwAAAFY"]
[Tue Nov 25 03:06:05.236056 2025] [:error] [pid 48688:tid 48699] [client 4.233.92.206:64853] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aSSsnRm2q1FkzLam7A0HjwAAAkc"]
[Tue Nov 25 03:06:07.807446 2025] [:error] [pid 16593:tid 16615] [client 4.233.92.206:64888] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aSSsnxVGznHBJI2LKpSbUwAAApQ"]
[Tue Nov 25 03:06:12.841490 2025] [:error] [pid 48599:tid 48613] [client 4.233.92.206:65385] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aSSspJzvu6PDJiRKE3KFwgAAAYo"]
[Tue Nov 25 03:06:16.153717 2025] [:error] [pid 16593:tid 16600] [client 4.233.92.206:65355] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aSSsqBVGznHBJI2LKpSbWgAAAoU"]
[Tue Nov 25 03:06:17.849182 2025] [:error] [pid 48600:tid 48639] [client 4.233.92.206:65281] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/as.php"] [unique_id "aSSsqftOzSUAQvWVjBfMrQAAAck"]
[Tue Nov 25 03:06:24.982875 2025] [:error] [pid 49900:tid 49921] [client 4.233.92.206:65339] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/as.php"] [unique_id "aSSssDCyPLrvg06aormN7wAAABM"]
[Tue Nov 25 03:06:30.739811 2025] [:error] [pid 49900:tid 49910] [client 4.233.92.206:65329] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/as.php"] [unique_id "aSSstjCyPLrvg06aormN8AAAAAg"]
[Tue Nov 25 03:06:34.013095 2025] [:error] [pid 48688:tid 48700] [client 4.233.92.206:65320] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aSSsuhm2q1FkzLam7A0HmQAAAkg"]
[Tue Nov 25 03:06:37.894964 2025] [:error] [pid 16593:tid 16619] [client 4.233.92.206:65319] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aSSsvRVGznHBJI2LKpSbXwAAApg"]
[Tue Nov 25 03:06:39.513496 2025] [:error] [pid 48600:tid 48633] [client 4.233.92.206:64882] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aSSsv_tOzSUAQvWVjBfMsQAAAcM"]
[Tue Nov 25 03:06:43.978763 2025] [:error] [pid 9630:tid 9654] [client 4.233.92.206:64865] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/product.php"] [unique_id "aSSswyrSgUgPGkizt2qGLAAAAFY"]
[Tue Nov 25 03:07:09.081563 2025] [:error] [pid 9630:tid 9654] [client 4.233.92.206:64871] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/X7x.php"] [unique_id "aSSs3SrSgUgPGkizt2qGTgAAAFY"]
[Tue Nov 25 03:07:10.736336 2025] [:error] [pid 16549:tid 16557] [client 4.233.92.206:64828] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/X7x.php"] [unique_id "aSSs3qeWW19A99PUw_eW8gAAAUU"]
[Tue Nov 25 03:07:12.333821 2025] [:error] [pid 16516:tid 16537] [client 4.233.92.206:65298] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/X7x.php"] [unique_id "aSSs4PqZbniwaNwL8Xk7QgAAARI"]
[Tue Nov 25 03:07:14.946958 2025] [:error] [pid 16593:tid 16606] [client 4.233.92.206:65364] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/X7x.php"] [unique_id "aSSs4hVGznHBJI2LKpSbcwAAAos"]
[Tue Nov 25 03:07:18.400350 2025] [:error] [pid 48688:tid 48696] [client 4.233.92.206:65405] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about.php"] [unique_id "aSSs5hm2q1FkzLam7A0HxgAAAkQ"]
[Tue Nov 25 03:07:20.369168 2025] [:error] [pid 16593:tid 16614] [client 4.233.92.206:64845] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about.php"] [unique_id "aSSs6BVGznHBJI2LKpSbdAAAApM"]
[Tue Nov 25 03:07:21.661673 2025] [:error] [pid 16441:tid 16457] [client 4.233.92.206:65325] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about.php"] [unique_id "aSSs6Yq_bc5MOa9Hfln9HAAAAI0"]
[Tue Nov 25 03:07:26.112992 2025] [:error] [pid 16549:tid 16556] [client 4.233.92.206:65358] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about.php"] [unique_id "aSSs7qeWW19A99PUw_eW-AAAAUQ"]
[Tue Nov 25 03:07:27.919298 2025] [:error] [pid 48599:tid 48624] [client 4.233.92.206:64782] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/r.php"] [unique_id "aSSs75zvu6PDJiRKE3KGCQAAAZU"]
[Tue Nov 25 03:08:35.476406 2025] [:error] [pid 48601:tid 48680] [client 4.233.92.206:65286] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/02.php"] [unique_id "aSStM4MM4MaVTk74-AYlmwAAAhc"]
[Tue Nov 25 03:08:36.088409 2025] [:error] [pid 16593:tid 16602] [client 4.233.92.206:65318] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/02.php"] [unique_id "aSStNBVGznHBJI2LKpSbpQAAAoc"]
[Tue Nov 25 03:08:38.401446 2025] [:error] [pid 48601:tid 48675] [client 4.233.92.206:65288] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/02.php"] [unique_id "aSStNoMM4MaVTk74-AYlnwAAAhI"]
[Tue Nov 25 03:08:39.851090 2025] [:error] [pid 16593:tid 16597] [client 4.233.92.206:64793] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/02.php"] [unique_id "aSStNxVGznHBJI2LKpSbqAAAAoI"]
[Tue Nov 25 03:08:40.853672 2025] [:error] [pid 48600:tid 48641] [client 4.233.92.206:64891] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aSStOPtOzSUAQvWVjBfNMQAAAcs"]
[Tue Nov 25 03:08:46.260002 2025] [:error] [pid 48599:tid 48613] [client 4.233.92.206:65315] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aSStPpzvu6PDJiRKE3KGawAAAYo"]
[Tue Nov 25 03:08:49.712281 2025] [:error] [pid 16549:tid 16557] [client 4.233.92.206:64776] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aSStQaeWW19A99PUw_eXHwAAAUU"]
[Tue Nov 25 03:08:52.362438 2025] [:error] [pid 16549:tid 16573] [client 4.233.92.206:65307] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/w.php"] [unique_id "aSStRKeWW19A99PUw_eXIAAAAVQ"]
[Tue Nov 25 03:08:53.873685 2025] [:error] [pid 48601:tid 48671] [client 4.233.92.206:65332] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/go.php"] [unique_id "aSStRYMM4MaVTk74-AYlrAAAAg4"]
[Tue Nov 25 03:08:55.438186 2025] [:error] [pid 16549:tid 16563] [client 4.233.92.206:64849] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/go.php"] [unique_id "aSStR6eWW19A99PUw_eXIwAAAUs"]
[Tue Nov 25 03:08:57.951462 2025] [:error] [pid 9630:tid 9644] [client 4.233.92.206:65403] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/go.php"] [unique_id "aSStSSrSgUgPGkizt2qGsQAAAEw"]
[Tue Nov 25 03:08:59.795381 2025] [:error] [pid 48599:tid 48610] [client 4.233.92.206:64881] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/go.php"] [unique_id "aSStS5zvu6PDJiRKE3KGdQAAAYc"]
[Tue Nov 25 03:09:01.218436 2025] [:error] [pid 16549:tid 16565] [client 4.233.92.206:65335] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aSStTaeWW19A99PUw_eXJQAAAU0"]
[Tue Nov 25 03:09:02.963820 2025] [:error] [pid 48599:tid 48614] [client 4.233.92.206:64785] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aSStTpzvu6PDJiRKE3KGdwAAAYs"]
[Tue Nov 25 03:09:07.082892 2025] [:error] [pid 49900:tid 49909] [client 4.233.92.206:65346] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aSStUzCyPLrvg06aormOmAAAAAc"]
[Tue Nov 25 03:09:09.192238 2025] [:error] [pid 16593:tid 16599] [client 4.233.92.206:64889] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aSStVRVGznHBJI2LKpSbvQAAAoQ"]
[Tue Nov 25 03:09:15.903535 2025] [:error] [pid 49900:tid 49913] [client 4.233.92.206:64846] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp.php"] [unique_id "aSStWzCyPLrvg06aormOnwAAAAs"]
[Tue Nov 25 03:09:17.295033 2025] [:error] [pid 48600:tid 48642] [client 4.233.92.206:64869] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp.php"] [unique_id "aSStXftOzSUAQvWVjBfNUQAAAcw"]
[Tue Nov 25 03:09:18.600594 2025] [:error] [pid 48599:tid 48622] [client 4.233.92.206:65401] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp.php"] [unique_id "aSStXpzvu6PDJiRKE3KGgwAAAZM"]
[Tue Nov 25 03:09:46.297860 2025] [:error] [pid 48688:tid 48695] [client 4.233.92.206:65376] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSStehm2q1FkzLam7A0IRwAAAkM"]
[Tue Nov 25 03:09:50.262144 2025] [:error] [pid 16593:tid 16610] [client 4.233.92.206:64878] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSStfhVGznHBJI2LKpSb2wAAAo8"]
[Tue Nov 25 03:10:07.713058 2025] [:error] [pid 48688:tid 48709] [client 4.233.92.206:65340] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSStjxm2q1FkzLam7A0IYwAAAlE"]
[Tue Nov 25 03:10:11.427693 2025] [autoindex:error] [pid 48601:tid 48662] [client 4.233.92.206:64094] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 03:10:13.822001 2025] [:error] [pid 48601:tid 48669] [client 4.233.92.206:64094] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aSStlYMM4MaVTk74-AYl0gAAAgw"]
[Tue Nov 25 03:10:18.671511 2025] [:error] [pid 16441:tid 16454] [client 4.233.92.206:65383] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aSStmoq_bc5MOa9Hfln99gAAAIo"]
[Tue Nov 25 03:10:20.210183 2025] [:error] [pid 49900:tid 49912] [client 4.233.92.206:65322] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aSStnDCyPLrvg06aormO1wAAAAo"]
[Tue Nov 25 03:10:21.095644 2025] [:error] [pid 16441:tid 16445] [client 4.233.92.206:64843] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lv.php"] [unique_id "aSStnYq_bc5MOa9Hfln9-gAAAIE"]
[Tue Nov 25 03:10:22.050134 2025] [:error] [pid 9630:tid 9632] [client 4.233.92.206:65403] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSStnirSgUgPGkizt2qG9wAAAEA"]
[Tue Nov 25 03:10:29.398307 2025] [:error] [pid 16549:tid 16557] [client 4.233.92.206:65399] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSStpaeWW19A99PUw_eXTQAAAUU"]
[Tue Nov 25 03:10:32.475710 2025] [:error] [pid 48599:tid 48620] [client 4.233.92.206:65310] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSStqJzvu6PDJiRKE3KGzwAAAZE"]
[Tue Nov 25 03:10:33.315140 2025] [:error] [pid 16516:tid 16539] [client 4.233.92.206:65314] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSStqfqZbniwaNwL8Xk73gAAARQ"]
[Tue Nov 25 03:10:40.933144 2025] [:error] [pid 48599:tid 48603] [client 4.233.92.206:65369] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/marijuana.php"] [unique_id "aSStsJzvu6PDJiRKE3KG2gAAAYA"]
[Tue Nov 25 03:10:43.811170 2025] [:error] [pid 48600:tid 48639] [client 4.233.92.206:64790] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/marijuana.php"] [unique_id "aSSts_tOzSUAQvWVjBfNfgAAAck"]
[Tue Nov 25 03:10:47.116731 2025] [:error] [pid 48600:tid 48651] [client 4.233.92.206:65302] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/marijuana.php"] [unique_id "aSStt_tOzSUAQvWVjBfNgAAAAdU"]
[Tue Nov 25 03:10:48.406961 2025] [:error] [pid 48600:tid 48632] [client 4.233.92.206:65402] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/marijuana.php"] [unique_id "aSStuPtOzSUAQvWVjBfNgQAAAcI"]
[Tue Nov 25 03:11:02.311912 2025] [:error] [pid 48601:tid 48673] [client 4.233.92.206:65301] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSStxoMM4MaVTk74-AYl9wAAAhA"]
[Tue Nov 25 03:11:09.448997 2025] [:error] [pid 48600:tid 48632] [client 4.233.92.206:64837] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/403.php"] [unique_id "aSStzftOzSUAQvWVjBfNlAAAAcI"]
[Tue Nov 25 03:12:00.203936 2025] [:error] [pid 48599:tid 48620] [client 4.233.92.206:65312] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSSuAJzvu6PDJiRKE3KHDQAAAZE"]
[Tue Nov 25 03:12:00.856685 2025] [:error] [pid 16516:tid 16523] [client 4.233.92.206:65331] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSSuAPqZbniwaNwL8Xk77wAAAQQ"]
[Tue Nov 25 03:12:05.602902 2025] [:error] [pid 16593:tid 16595] [client 4.233.92.206:65308] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/tiny.php"] [unique_id "aSSuBRVGznHBJI2LKpScIgAAAoA"]
[Tue Nov 25 03:12:06.850334 2025] [:error] [pid 16516:tid 16530] [client 4.233.92.206:65344] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock.php"] [unique_id "aSSuBvqZbniwaNwL8Xk79QAAAQs"]
[Tue Nov 25 03:12:10.514833 2025] [:error] [pid 48688:tid 48711] [client 4.233.92.206:65382] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock.php"] [unique_id "aSSuChm2q1FkzLam7A0I8gAAAlM"]
[Tue Nov 25 03:12:12.132567 2025] [:error] [pid 49900:tid 49916] [client 4.233.92.206:65349] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock.php"] [unique_id "aSSuDDCyPLrvg06aormPPwAAAA4"]
[Tue Nov 25 03:12:13.864834 2025] [:error] [pid 49900:tid 49902] [client 4.233.92.206:65380] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/lock.php"] [unique_id "aSSuDTCyPLrvg06aormPRAAAAAA"]
[Tue Nov 25 03:12:17.463244 2025] [:error] [pid 49900:tid 49920] [client 4.233.92.206:64854] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSSuETCyPLrvg06aormPRwAAABI"]
[Tue Nov 25 03:12:18.453593 2025] [:error] [pid 9630:tid 9634] [client 4.233.92.206:65392] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSSuEirSgUgPGkizt2qHtwAAAEI"]
[Tue Nov 25 03:12:23.831283 2025] [:error] [pid 48601:tid 48673] [client 4.233.92.206:64857] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSSuF4MM4MaVTk74-AYmIAAAAhA"]
[Tue Nov 25 03:12:25.155513 2025] [:error] [pid 16593:tid 16617] [client 4.233.92.206:65280] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSSuGRVGznHBJI2LKpScOwAAApY"]
[Tue Nov 25 03:12:26.782026 2025] [:error] [pid 48601:tid 48672] [client 4.233.92.206:64833] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSSuGoMM4MaVTk74-AYmIgAAAg8"]
[Tue Nov 25 03:12:32.221694 2025] [:error] [pid 49900:tid 49902] [client 4.233.92.206:65293] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSSuIDCyPLrvg06aormPUgAAAAA"]
[Tue Nov 25 03:12:33.966332 2025] [:error] [pid 48688:tid 48708] [client 4.233.92.206:65285] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSSuIRm2q1FkzLam7A0JBAAAAlA"]
[Tue Nov 25 03:12:41.338348 2025] [:error] [pid 48599:tid 48606] [client 4.233.92.206:65357] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aSSuKZzvu6PDJiRKE3KHPwAAAYM"]
[Tue Nov 25 03:12:42.633328 2025] [:error] [pid 9630:tid 9653] [client 4.233.92.206:65324] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aSSuKirSgUgPGkizt2qHzQAAAFU"]
[Tue Nov 25 03:12:43.433827 2025] [:error] [pid 48601:tid 48661] [client 4.233.92.206:64046] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aSSuK4MM4MaVTk74-AYmLQAAAgQ"]
[Tue Nov 25 03:12:44.792879 2025] [:error] [pid 49900:tid 49911] [client 4.233.92.206:64848] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aSSuLDCyPLrvg06aormPXwAAAAk"]
[Tue Nov 25 03:12:46.829668 2025] [:error] [pid 48599:tid 48604] [client 4.233.92.206:64893] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/as.php"] [unique_id "aSSuLpzvu6PDJiRKE3KHQQAAAYE"]
[Tue Nov 25 03:12:48.460964 2025] [:error] [pid 16549:tid 16552] [client 4.233.92.206:65362] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/as.php"] [unique_id "aSSuMKeWW19A99PUw_eXrAAAAUA"]
[Tue Nov 25 03:12:52.723150 2025] [:error] [pid 9630:tid 9645] [client 4.233.92.206:65296] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/as.php"] [unique_id "aSSuNCrSgUgPGkizt2qH4gAAAE0"]
[Tue Nov 25 03:12:53.617878 2025] [:error] [pid 49900:tid 49909] [client 4.233.92.206:65393] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/as.php"] [unique_id "aSSuNTCyPLrvg06aormPYgAAAAc"]
[Tue Nov 25 03:13:04.150610 2025] [proxy_fcgi:error] [pid 48599:tid 48603] [client 4.233.92.206:64859] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 03:13:13.740864 2025] [:error] [pid 48599:tid 48612] [client 4.233.92.206:64859] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSSuSZzvu6PDJiRKE3KHVQAAAYk"]
[Tue Nov 25 03:13:15.721692 2025] [:error] [pid 48599:tid 48613] [client 4.233.92.206:64895] [client 4.233.92.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSSuS5zvu6PDJiRKE3KHVwAAAYo"]
[Tue Nov 25 03:13:19.583065 2025] [autoindex:error] [pid 16593:tid 16611] [client 4.233.92.206:64099] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 03:13:25.939319 2025] [proxy_fcgi:error] [pid 16593:tid 16619] [client 4.233.92.206:64099] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 05:45:55.326030 2025] [autoindex:error] [pid 1103:tid 1119] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:45:55.489268 2025] [autoindex:error] [pid 1103:tid 1128] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Nov 25 05:45:55.615769 2025] [autoindex:error] [pid 1103:tid 1110] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 05:45:55.738817 2025] [autoindex:error] [pid 1103:tid 1117] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:45:55.858531 2025] [autoindex:error] [pid 1103:tid 1129] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:45:56.022715 2025] [autoindex:error] [pid 1103:tid 1111] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 05:45:56.169690 2025] [autoindex:error] [pid 1103:tid 1133] [client 4.189.168.224:50065] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:46:21.539845 2025] [autoindex:error] [pid 14168:tid 14189] [client 4.189.168.224:50163] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Nov 25 05:46:31.130230 2025] [autoindex:error] [pid 1103:tid 1125] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 05:46:32.377338 2025] [autoindex:error] [pid 1103:tid 1127] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:46:32.497217 2025] [autoindex:error] [pid 1103:tid 1118] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:46:32.678608 2025] [autoindex:error] [pid 1103:tid 1110] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:46:32.802033 2025] [autoindex:error] [pid 1103:tid 1119] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Nov 25 05:46:32.931615 2025] [autoindex:error] [pid 1103:tid 1121] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Nov 25 05:46:33.052586 2025] [autoindex:error] [pid 1103:tid 1117] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 05:46:33.173434 2025] [autoindex:error] [pid 1103:tid 1132] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Nov 25 05:46:40.836473 2025] [autoindex:error] [pid 1103:tid 1120] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:46:41.117303 2025] [autoindex:error] [pid 1103:tid 1115] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:46:41.353714 2025] [autoindex:error] [pid 1103:tid 1125] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:46:41.597665 2025] [autoindex:error] [pid 1103:tid 1126] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:46:41.992981 2025] [autoindex:error] [pid 1103:tid 1123] [client 4.189.168.224:50172] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:46:48.428495 2025] [autoindex:error] [pid 1103:tid 1116] [client 4.189.168.224:50172] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:47:44.839729 2025] [autoindex:error] [pid 14168:tid 14182] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:47:44.958518 2025] [autoindex:error] [pid 14168:tid 14172] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Nov 25 05:47:45.313195 2025] [autoindex:error] [pid 14168:tid 14180] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:47:45.462220 2025] [autoindex:error] [pid 14168:tid 14178] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:47:45.580830 2025] [autoindex:error] [pid 14168:tid 14174] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:47:50.915417 2025] [autoindex:error] [pid 14168:tid 14181] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Nov 25 05:47:51.075042 2025] [autoindex:error] [pid 14168:tid 14184] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Nov 25 05:48:00.986377 2025] [autoindex:error] [pid 14168:tid 14193] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Nov 25 05:48:03.261445 2025] [autoindex:error] [pid 14168:tid 14183] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:48:03.379723 2025] [autoindex:error] [pid 14168:tid 14173] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Nov 25 05:48:03.561380 2025] [autoindex:error] [pid 14168:tid 14175] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Nov 25 05:48:03.681677 2025] [autoindex:error] [pid 14168:tid 14194] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 05:48:06.095301 2025] [autoindex:error] [pid 14168:tid 14174] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Tue Nov 25 05:48:10.277866 2025] [autoindex:error] [pid 14168:tid 14180] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 05:48:10.421187 2025] [autoindex:error] [pid 14168:tid 14186] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:48:12.416618 2025] [autoindex:error] [pid 14168:tid 14184] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:48:12.604083 2025] [autoindex:error] [pid 14168:tid 14190] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:48:12.789995 2025] [autoindex:error] [pid 14168:tid 14181] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:48:14.816693 2025] [autoindex:error] [pid 14168:tid 14195] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Tue Nov 25 05:48:14.943869 2025] [autoindex:error] [pid 14168:tid 14182] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:48:15.503840 2025] [autoindex:error] [pid 14168:tid 14172] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:48:15.652949 2025] [autoindex:error] [pid 14168:tid 14178] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Tue Nov 25 05:48:15.802087 2025] [autoindex:error] [pid 14168:tid 14171] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Tue Nov 25 05:48:16.214279 2025] [autoindex:error] [pid 14168:tid 14174] [client 4.189.168.224:50169] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Nov 25 08:09:26.381655 2025] [:error] [pid 14078:tid 14161] [client 43.166.247.155:54976] [client 43.166.247.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSTzttVXYbb0ii_rVoJybwAAAJg"]
[Tue Nov 25 11:39:13.164744 2025] [:error] [pid 28842:tid 28991] [client 182.42.105.144:57457] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSUk4dNmoaPf6T4-6C31egAAA0E"]
[Tue Nov 25 11:50:42.560309 2025] [:error] [pid 14077:tid 14117] [client 213.209.157.170:52612] [client 213.209.157.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aSUnkhG9n7UHEkwDTyjN6wAAAEc"]
[Tue Nov 25 11:50:46.952695 2025] [:error] [pid 14076:tid 14102] [client 213.209.157.170:64916] [client 213.209.157.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env.production"] [unique_id "aSUnlnsB4Gz6Qw-pvBt1vAAAABU"]
[Tue Nov 25 11:50:46.984559 2025] [:error] [pid 28842:tid 29000] [client 213.209.157.170:54330] [client 213.209.157.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env.yaml"] [unique_id "aSUnltNmoaPf6T4-6C34egAAA0o"]
[Tue Nov 25 11:50:47.101314 2025] [:error] [pid 14076:tid 14084] [client 213.209.157.170:54185] [client 213.209.157.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env.prod"] [unique_id "aSUnl3sB4Gz6Qw-pvBt1vQAAAAM"]
[Tue Nov 25 11:50:53.182655 2025] [:error] [pid 14078:tid 14143] [client 213.209.157.170:54601] [client 213.209.157.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/api/config"] [unique_id "aSUnndVXYbb0ii_rVoK2oQAAAIY"]
[Tue Nov 25 11:50:53.208839 2025] [:error] [pid 14688:tid 14710] [client 213.209.157.170:50719] [client 213.209.157.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/aws.env"] [unique_id "aSUnnW9vYrBoEsiDnixFuAAAARQ"]
[Tue Nov 25 12:29:04.744838 2025] [:error] [pid 14076:tid 14087] [client 213.21.239.4:36726] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/.git/config;"] [unique_id "aSUwkHsB4Gz6Qw-pvBuMKAAAAAY"]
[Tue Nov 25 12:29:04.745900 2025] [:error] [pid 14078:tid 14150] [client 213.21.239.4:36778] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/.git/%0Aconfig"] [unique_id "aSUwkNVXYbb0ii_rVoLGtAAAAI0"]
[Tue Nov 25 12:29:04.746753 2025] [:error] [pid 14078:tid 14148] [client 213.21.239.4:36776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/.git/config;.."] [unique_id "aSUwkNVXYbb0ii_rVoLGtQAAAIs"]
[Tue Nov 25 12:29:04.748808 2025] [:error] [pid 14078:tid 14139] [client 213.21.239.4:36802] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/dev/.git/config"] [unique_id "aSUwkNVXYbb0ii_rVoLGtgAAAII"]
[Tue Nov 25 12:29:04.749442 2025] [:error] [pid 14078:tid 14142] [client 213.21.239.4:36840] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/.git/config"] [unique_id "aSUwkNVXYbb0ii_rVoLGtwAAAIU"]
[Tue Nov 25 12:29:04.754677 2025] [:error] [pid 14078:tid 14156] [client 213.21.239.4:36746] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/admin/.git/config"] [unique_id "aSUwkNVXYbb0ii_rVoLGuAAAAJM"]
[Tue Nov 25 12:29:04.755433 2025] [:error] [pid 14688:tid 14691] [client 213.21.239.4:36730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia../.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS8gAAAQE"]
[Tue Nov 25 12:29:04.757432 2025] [:error] [pid 14078:tid 14138] [client 213.21.239.4:36870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/css../.git/config"] [unique_id "aSUwkNVXYbb0ii_rVoLGuQAAAIE"]
[Tue Nov 25 12:29:04.762156 2025] [:error] [pid 14688:tid 14704] [client 213.21.239.4:36764] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/developer/.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS8wAAAQ4"]
[Tue Nov 25 12:29:04.764123 2025] [:error] [pid 28739:tid 28775] [client 213.21.239.4:36910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/common/.git/config"] [unique_id "aSUwkBxGpKmlkG4FexQZtwAAAg0"]
[Tue Nov 25 12:29:04.765293 2025] [:error] [pid 14688:tid 14702] [client 213.21.239.4:36920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/assets../.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS9AAAAQw"]
[Tue Nov 25 12:29:04.765430 2025] [:error] [pid 14168:tid 14176] [client 213.21.239.4:36884] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/backup/.git/config"] [unique_id "aSUwkPR-ZDU0QEgAIIvvdAAAAMU"]
[Tue Nov 25 12:29:04.766033 2025] [:error] [pid 14688:tid 14710] [client 213.21.239.4:36824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/api/.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS9QAAARQ"]
[Tue Nov 25 12:29:04.766238 2025] [:error] [pid 14168:tid 14188] [client 213.21.239.4:36848] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/;/.git/config"] [unique_id "aSUwkPR-ZDU0QEgAIIvvdQAAANE"]
[Tue Nov 25 12:29:04.770377 2025] [:error] [pid 14688:tid 14701] [client 213.21.239.4:36752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/application/.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS9gAAAQs"]
[Tue Nov 25 12:29:04.771185 2025] [:error] [pid 14688:tid 14694] [client 213.21.239.4:36796] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/..;/.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS9wAAAQQ"]
[Tue Nov 25 12:29:04.774351 2025] [:error] [pid 28739:tid 28764] [client 213.21.239.4:36862] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/content../.git/config"] [unique_id "aSUwkBxGpKmlkG4FexQZuAAAAgI"]
[Tue Nov 25 12:29:04.774391 2025] [:error] [pid 14688:tid 14713] [client 213.21.239.4:36858] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/database/.git/config"] [unique_id "aSUwkG9vYrBoEsiDnixS-AAAARc"]
[Tue Nov 25 12:29:04.774995 2025] [:error] [pid 28739:tid 28766] [client 213.21.239.4:36856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia/static../.git/config"] [unique_id "aSUwkBxGpKmlkG4FexQZuQAAAgQ"]
[Tue Nov 25 12:29:04.775439 2025] [:error] [pid 28739:tid 28785] [client 213.21.239.4:36820] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/app/.git/config"] [unique_id "aSUwkBxGpKmlkG4FexQZugAAAhc"]
[Tue Nov 25 12:29:07.479697 2025] [:error] [pid 28739:tid 28772] [client 213.21.239.4:37150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config;.."] [unique_id "aSUwkxxGpKmlkG4FexQZwwAAAgo"]
[Tue Nov 25 12:29:07.481430 2025] [:error] [pid 28842:tid 28990] [client 213.21.239.4:37138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/images../.git/config"] [unique_id "aSUwk9NmoaPf6T4-6C0F_QAAA0A"]
[Tue Nov 25 12:29:07.482245 2025] [:error] [pid 28740:tid 28804] [client 213.21.239.4:37294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/git/.git/config"] [unique_id "aSUwk1ppQCoYxWW6V0UKmwAAAk0"]
[Tue Nov 25 12:29:07.484453 2025] [:error] [pid 28609:tid 28623] [client 213.21.239.4:37214] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/config;.."] [unique_id "aSUwkyGGdT-nZJVs3x1gBQAAAYU"]
[Tue Nov 25 12:29:07.486089 2025] [:error] [pid 28740:tid 28814] [client 213.21.239.4:37176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/..;/.git/config"] [unique_id "aSUwk1ppQCoYxWW6V0UKnAAAAlc"]
[Tue Nov 25 12:29:07.487252 2025] [:error] [pid 28740:tid 28810] [client 213.21.239.4:37240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/%0Aconfig"] [unique_id "aSUwk1ppQCoYxWW6V0UKnQAAAlM"]
[Tue Nov 25 12:29:07.488174 2025] [:error] [pid 28740:tid 28799] [client 213.21.239.4:37242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSUwk1ppQCoYxWW6V0UKngAAAkg"]
[Tue Nov 25 12:29:07.488174 2025] [:error] [pid 14168:tid 14185] [client 213.21.239.4:37258] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au../.git/config"] [unique_id "aSUwk_R-ZDU0QEgAIIvvfwAAAM4"]
[Tue Nov 25 12:29:07.489087 2025] [:error] [pid 14688:tid 14707] [client 213.21.239.4:37200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSUwk29vYrBoEsiDnixS-gAAARE"]
[Tue Nov 25 12:29:07.491227 2025] [:error] [pid 14076:tid 14090] [client 213.21.239.4:37282] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/static../.git/config"] [unique_id "aSUwk3sB4Gz6Qw-pvBuMMgAAAAk"]
[Tue Nov 25 12:29:07.494334 2025] [:error] [pid 28609:tid 28636] [client 213.21.239.4:37302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/;/.git/config"] [unique_id "aSUwkyGGdT-nZJVs3x1gBgAAAZI"]
[Tue Nov 25 12:29:07.495501 2025] [:error] [pid 28740:tid 28805] [client 213.21.239.4:37160] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/config;"] [unique_id "aSUwk1ppQCoYxWW6V0UKnwAAAk4"]
[Tue Nov 25 12:29:07.496212 2025] [:error] [pid 14168:tid 14193] [client 213.21.239.4:37184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/;/.git/config"] [unique_id "aSUwk_R-ZDU0QEgAIIvvgAAAANY"]
[Tue Nov 25 12:29:07.497835 2025] [:error] [pid 14076:tid 14088] [client 213.21.239.4:37226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/..;/.git/config"] [unique_id "aSUwk3sB4Gz6Qw-pvBuMMwAAAAc"]
[Tue Nov 25 12:29:07.498311 2025] [:error] [pid 14076:tid 14087] [client 213.21.239.4:37158] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/config"] [unique_id "aSUwk3sB4Gz6Qw-pvBuMNAAAAAY"]
[Tue Nov 25 12:29:07.500520 2025] [:error] [pid 14076:tid 14084] [client 213.21.239.4:37270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config;"] [unique_id "aSUwk3sB4Gz6Qw-pvBuMNgAAAAM"]
[Tue Nov 25 12:29:08.470682 2025] [:error] [pid 14168:tid 14184] [client 213.21.239.4:37326] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/img../.git/config"] [unique_id "aSUwlPR-ZDU0QEgAIIvvgQAAAM0"]
[Tue Nov 25 12:29:10.470963 2025] [:error] [pid 14077:tid 14118] [client 213.21.239.4:37490] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/public/.git/config"] [unique_id "aSUwlhG9n7UHEkwDTyjaSwAAAEg"]
[Tue Nov 25 12:29:10.483860 2025] [:error] [pid 14688:tid 14702] [client 213.21.239.4:37514] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/m/.git/config"] [unique_id "aSUwlm9vYrBoEsiDnixS-wAAAQw"]
[Tue Nov 25 12:29:10.485038 2025] [:error] [pid 14076:tid 14082] [client 213.21.239.4:37536] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/;/.git/config"] [unique_id "aSUwlnsB4Gz6Qw-pvBuMPgAAAAE"]
[Tue Nov 25 12:29:10.486349 2025] [:error] [pid 28836:tid 28969] [client 213.21.239.4:37668] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/config"] [unique_id "aSUwlpwNRsoxcLQGkTdWJwAAAs4"]
[Tue Nov 25 12:29:10.486703 2025] [:error] [pid 14076:tid 14084] [client 213.21.239.4:37610] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/lib../.git/config"] [unique_id "aSUwlnsB4Gz6Qw-pvBuMPwAAAAM"]
[Tue Nov 25 12:29:10.489328 2025] [:error] [pid 14168:tid 14180] [client 213.21.239.4:37538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/qa/.git/config"] [unique_id "aSUwlvR-ZDU0QEgAIIvvhAAAAMk"]
[Tue Nov 25 12:29:10.492222 2025] [:error] [pid 28739:tid 28782] [client 213.21.239.4:37600] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au../.git/config"] [unique_id "aSUwlhxGpKmlkG4FexQZxgAAAhQ"]
[Tue Nov 25 12:29:10.492517 2025] [:error] [pid 14077:tid 14112] [client 213.21.239.4:37640] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/message-api/.git/config"] [unique_id "aSUwlhG9n7UHEkwDTyjaTQAAAEI"]
[Tue Nov 25 12:29:10.494276 2025] [:error] [pid 28842:tid 29026] [client 213.21.239.4:37596] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/%0Aconfig"] [unique_id "aSUwltNmoaPf6T4-6C0GBQAAA1g"]
[Tue Nov 25 12:29:10.498334 2025] [:error] [pid 28739:tid 28777] [client 213.21.239.4:37618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/config;"] [unique_id "aSUwlhxGpKmlkG4FexQZxwAAAg8"]
[Tue Nov 25 12:29:10.500304 2025] [:error] [pid 14688:tid 14710] [client 213.21.239.4:37616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/..;/.git/config"] [unique_id "aSUwlm9vYrBoEsiDnixS_AAAARQ"]
[Tue Nov 25 12:29:10.502310 2025] [:error] [pid 28609:tid 28624] [client 213.21.239.4:37522] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/prod/.git/config"] [unique_id "aSUwliGGdT-nZJVs3x1gCwAAAYY"]
[Tue Nov 25 12:29:10.503686 2025] [:error] [pid 28842:tid 28998] [client 213.21.239.4:37652] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/.git/config;.."] [unique_id "aSUwltNmoaPf6T4-6C0GBgAAA0g"]
[Tue Nov 25 12:29:10.506149 2025] [:error] [pid 14078:tid 14149] [client 213.21.239.4:37584] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/js../.git/config"] [unique_id "aSUwltVXYbb0ii_rVoLGwAAAAIw"]
[Tue Nov 25 12:29:10.507759 2025] [:error] [pid 14168:tid 14190] [client 213.21.239.4:37624] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/live/.git/config"] [unique_id "aSUwlvR-ZDU0QEgAIIvvhQAAANM"]
[Tue Nov 25 12:29:10.513398 2025] [:error] [pid 14076:tid 14101] [client 213.21.239.4:37680] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/new/.git/config"] [unique_id "aSUwlnsB4Gz6Qw-pvBuMQgAAABQ"]
[Tue Nov 25 12:29:11.457332 2025] [:error] [pid 14076:tid 14084] [client 213.21.239.4:55972] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/emuartaustralia.com.au/static../.git/config"] [unique_id "aSUwl3sB4Gz6Qw-pvBuMRQAAAAM"]
[Tue Nov 25 12:29:11.487663 2025] [:error] [pid 28842:tid 29005] [client 213.21.239.4:55980] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/../config"] [unique_id "aSUwl9NmoaPf6T4-6C0GCAAAA08"]
[Tue Nov 25 12:29:12.484487 2025] [:error] [pid 28836:tid 28986] [client 213.21.239.4:55988] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/config"] [unique_id "aSUwmJwNRsoxcLQGkTdWKwAAAs8"]
[Tue Nov 25 12:29:13.468979 2025] [:error] [pid 14078:tid 14158] [client 213.21.239.4:56014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/../.git/config"] [unique_id "aSUwmdVXYbb0ii_rVoLGwQAAAJU"]
[Tue Nov 25 12:29:13.483276 2025] [:error] [pid 28836:tid 29011] [client 213.21.239.4:56098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSUwmZwNRsoxcLQGkTdWLwAAAtU"]
[Tue Nov 25 12:29:13.483598 2025] [:error] [pid 28739:tid 28763] [client 213.21.239.4:56240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/static../.git/config"] [unique_id "aSUwmRxGpKmlkG4FexQZ0QAAAgE"]
[Tue Nov 25 12:29:13.485592 2025] [:error] [pid 14688:tid 14703] [client 213.21.239.4:56138] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/uat/.git/config"] [unique_id "aSUwmW9vYrBoEsiDnixTAwAAAQ0"]
[Tue Nov 25 12:29:13.486888 2025] [:error] [pid 14077:tid 14131] [client 213.21.239.4:56130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/..;/.git/config"] [unique_id "aSUwmRG9n7UHEkwDTyjaUQAAAFU"]
[Tue Nov 25 12:29:13.487249 2025] [:error] [pid 14076:tid 14095] [client 213.21.239.4:56022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/staging/.git/config"] [unique_id "aSUwmXsB4Gz6Qw-pvBuMTwAAAA4"]
[Tue Nov 25 12:29:13.496631 2025] [:error] [pid 28836:tid 28957] [client 213.21.239.4:56214] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/web/.git/config"] [unique_id "aSUwmZwNRsoxcLQGkTdWMAAAAsI"]
[Tue Nov 25 12:29:13.515648 2025] [:error] [pid 14688:tid 14695] [client 213.21.239.4:56050] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.git;/config"] [unique_id "aSUwmW9vYrBoEsiDnixTBQAAAQU"]
[Tue Nov 25 12:29:13.522325 2025] [:error] [pid 14688:tid 14706] [client 213.21.239.4:56156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config;"] [unique_id "aSUwmW9vYrBoEsiDnixTBgAAARA"]
[Tue Nov 25 12:29:13.523364 2025] [:error] [pid 28836:tid 28958] [client 213.21.239.4:56080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/static../.git/config"] [unique_id "aSUwmZwNRsoxcLQGkTdWMQAAAsM"]
[Tue Nov 25 12:29:13.525187 2025] [:error] [pid 14076:tid 14081] [client 213.21.239.4:56054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSUwmXsB4Gz6Qw-pvBuMUQAAAAA"]
[Tue Nov 25 12:29:13.526098 2025] [:error] [pid 28739:tid 28762] [client 213.21.239.4:56236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config;.."] [unique_id "aSUwmRxGpKmlkG4FexQZ1QAAAgA"]
[Tue Nov 25 12:29:13.528051 2025] [:error] [pid 28836:tid 29014] [client 213.21.239.4:56194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSUwmZwNRsoxcLQGkTdWMgAAAtg"]
[Tue Nov 25 12:29:13.532066 2025] [:error] [pid 14077:tid 14121] [client 213.21.239.4:56252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/;/.git/config"] [unique_id "aSUwmRG9n7UHEkwDTyjaUwAAAEs"]
[Tue Nov 25 12:29:13.535177 2025] [:error] [pid 28836:tid 28968] [client 213.21.239.4:56184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSUwmZwNRsoxcLQGkTdWMwAAAs0"]
[Tue Nov 25 12:29:13.545495 2025] [:error] [pid 28739:tid 28784] [client 213.21.239.4:56276] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/../config"] [unique_id "aSUwmRxGpKmlkG4FexQZ1wAAAhY"]
[Tue Nov 25 12:29:13.549043 2025] [:error] [pid 14077:tid 14117] [client 213.21.239.4:56264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSUwmRG9n7UHEkwDTyjaVAAAAEc"]
[Tue Nov 25 12:29:14.514445 2025] [:error] [pid 14076:tid 14101] [client 213.21.239.4:56298] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/config"] [unique_id "aSUwmnsB4Gz6Qw-pvBuMWwAAABQ"]
[Tue Nov 25 12:29:15.538930 2025] [:error] [pid 28740:tid 28815] [client 213.21.239.4:56388] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.git;/config"] [unique_id "aSUwm1ppQCoYxWW6V0UKugAAAlg"]
[Tue Nov 25 14:02:25.848134 2025] [:error] [pid 28842:tid 29004] [client 209.50.168.109:35935] [client 209.50.168.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/HEAD"] [unique_id "aSVGcdNmoaPf6T4-6C0mYQAAA04"]
[Tue Nov 25 14:02:29.205597 2025] [:error] [pid 28740:tid 28797] [client 65.111.13.171:44763] [client 65.111.13.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aSVGdVppQCoYxWW6V0UjhwAAAkY"]
[Tue Nov 25 14:02:30.365043 2025] [:error] [pid 14168:tid 14174] [client 216.26.226.42:41599] [client 216.26.226.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.svn/wc.db"] [unique_id "aSVGdvR-ZDU0QEgAIIsWlAAAAMM"]
[Tue Nov 25 14:03:50.620743 2025] [:error] [pid 14078:tid 14159] [client 54.173.250.15:43684] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSVGxtVXYbb0ii_rVoLpjgAAAJY"]
[Tue Nov 25 17:03:03.767228 2025] [:error] [pid 28739:tid 28783] [client 159.223.59.45:50050] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSVwxxxGpKmlkG4FexRYGQAAAhU"]
[Tue Nov 25 17:03:06.818170 2025] [:error] [pid 28740:tid 28802] [client 159.223.59.45:51372] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSVwylppQCoYxWW6V0VQ3gAAAks"]
[Tue Nov 25 18:02:36.370505 2025] [:error] [pid 28836:tid 28960] [client 125.75.66.97:38348] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.emuartaustralia.com.au"] [uri "/"] [unique_id "aSV-vJwNRsoxcLQGkTerhQAAAsU"]
[Tue Nov 25 20:13:20.023766 2025] [:error] [pid 14168:tid 14185] [client 170.106.11.141:54854] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSWdYPR-ZDU0QEgAIItxKwAAAM4"]
[Tue Nov 25 22:06:34.133601 2025] [:error] [pid 28739:tid 28785] [client 34.21.123.100:57949] [client 34.21.123.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.123.100, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSW36hxGpKmlkG4FexS3VwAAAhc"]
[Tue Nov 25 22:06:45.750047 2025] [:error] [pid 14078:tid 14138] [client 34.21.123.100:63023] [client 34.21.123.100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/news/wp-json/wp/v2/users/"] [unique_id "aSW39dVXYbb0ii_rVoKN3gAAAIE"]
[Tue Nov 25 22:06:47.879394 2025] [:error] [pid 14078:tid 14154] [client 34.21.123.100:63023] [client 34.21.123.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.123.100, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/news//xmlrpc.php"] [unique_id "aSW399VXYbb0ii_rVoKN6QAAAJE"]
[Tue Nov 25 23:11:16.439958 2025] [:error] [pid 2987:tid 3008] [client 39.45.136.255:56786] [client 39.45.136.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.45.136.255, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXHFM-djEt-pTzPxnzldgAAAVM"]
[Tue Nov 25 23:15:04.333319 2025] [:error] [pid 14078:tid 14161] [client 39.45.136.255:54458] [client 39.45.136.255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSXH-NVXYbb0ii_rVoKtFgAAAJg"]
[Wed Nov 26 00:39:58.792864 2025] [:error] [pid 14078:tid 14160] [client 54.173.250.15:45286] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSXb3tVXYbb0ii_rVoLUcAAAAJc"]
[Wed Nov 26 00:58:26.655517 2025] [:error] [pid 43843:tid 43846] [client 159.223.59.45:54363] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSXgMhhx4v3NUNdMKDMiBAAAAcE"]
[Wed Nov 26 01:00:25.007267 2025] [:error] [pid 28609:tid 28618] [client 180.102.134.69:55982] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSXgqSGGdT-nZJVs3x0rbgAAAYA"]
[Wed Nov 26 01:16:58.849504 2025] [:error] [pid 28609:tid 28637] [client 159.223.59.45:59728] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSXkiiGGdT-nZJVs3x0usQAAAZM"]
[Wed Nov 26 01:35:36.138698 2025] [:error] [pid 28739:tid 28763] [client 159.223.59.45:65075] [client 159.223.59.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.59.45, incrementing brute counter"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSXo6BxGpKmlkG4FexQAHQAAAgE"]
[Wed Nov 26 15:24:29.925735 2025] [autoindex:error] [pid 45769:tid 45791] [client 68.183.90.36:52354] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 17:02:59.711971 2025] [:error] [pid 46443:tid 46450] [client 206.81.24.227:59990] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||emuartaustralia.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSbCQ8LmDsnHrj-QFB-0SwAAAEU"]
[Wed Nov 26 17:03:04.392344 2025] [:error] [pid 46443:tid 46446] [client 206.81.24.227:45786] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSbCSMLmDsnHrj-QFB-0cgAAAEE"]
[Wed Nov 26 17:03:05.837909 2025] [:error] [pid 6471:tid 6491] [client 206.81.24.227:45792] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about"] [unique_id "aSbCSeh3Z9TZLlRuTiNlogAAAJE"]
[Wed Nov 26 17:03:07.287556 2025] [:error] [pid 45683:tid 45698] [client 206.81.24.227:45806] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aSbCSxX1gQgNFW_222qKAAAAAUo"]
[Wed Nov 26 17:03:08.296713 2025] [:error] [pid 46443:tid 46453] [client 206.81.24.227:45822] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aSbCTMLmDsnHrj-QFB-0dgAAAEg"]
[Wed Nov 26 17:03:09.650643 2025] [:error] [pid 46443:tid 46461] [client 206.81.24.227:45824] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSbCTcLmDsnHrj-QFB-0eAAAAFA"]
[Wed Nov 26 17:03:11.046720 2025] [:error] [pid 45769:tid 45794] [client 206.81.24.227:45832] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aSbCT1dG5Eht9c3yy4MCGwAAAdY"]
[Wed Nov 26 17:03:12.090593 2025] [:error] [pid 45685:tid 45750] [client 206.81.24.227:45450] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aSbCUFj3f_NRdgU0DQ645wAAAQg"]
[Wed Nov 26 17:03:13.580947 2025] [:error] [pid 45683:tid 45688] [client 206.81.24.227:45454] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/_all_dbs"] [unique_id "aSbCURX1gQgNFW_222qKBwAAAUA"]
[Wed Nov 26 17:03:15.162793 2025] [:error] [pid 45769:tid 45772] [client 206.81.24.227:45468] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aSbCU1dG5Eht9c3yy4MCHQAAAcA"]
[Wed Nov 26 17:03:16.270138 2025] [:error] [pid 45769:tid 45781] [client 206.81.24.227:45472] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aSbCVFdG5Eht9c3yy4MCHwAAAck"]
[Wed Nov 26 17:03:17.730209 2025] [:error] [pid 45683:tid 45696] [client 206.81.24.227:45486] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSbCVRX1gQgNFW_222qKCQAAAUg"]
[Wed Nov 26 17:03:18.867298 2025] [:error] [pid 45685:tid 45744] [client 206.81.24.227:45500] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSbCVlj3f_NRdgU0DQ647wAAAQI"]
[Wed Nov 26 17:03:20.154125 2025] [:error] [pid 46443:tid 46455] [client 206.81.24.227:45506] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aSbCWMLmDsnHrj-QFB-0jAAAAEo"]
[Wed Nov 26 17:03:21.613620 2025] [:error] [pid 45769:tid 45790] [client 206.81.24.227:41526] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/telescope/requests"] [unique_id "aSbCWVdG5Eht9c3yy4MCKgAAAdI"]
[Wed Nov 26 17:03:22.845007 2025] [:error] [pid 45684:tid 45719] [client 206.81.24.227:41532] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aSbCWvg5LMxwI4-PD1cUSAAAAAQ"]
[Wed Nov 26 17:03:24.256433 2025] [:error] [pid 45769:tid 45784] [client 206.81.24.227:41534] [client 206.81.24.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSbCXFdG5Eht9c3yy4MCKwAAAcw"]
[Wed Nov 26 17:42:40.456915 2025] [:error] [pid 45684:tid 45724] [client 216.126.239.203:42848] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSbLkPg5LMxwI4-PD1cegAAAAAk"]
[Wed Nov 26 20:23:35.792626 2025] [:error] [pid 46443:tid 46455] [client 88.0.95.120:55870] [client 88.0.95.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.0.95.120, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSbxR8LmDsnHrj-QFB_1LwAAAEo"]
[Wed Nov 26 20:27:57.224471 2025] [:error] [pid 46443:tid 46455] [client 88.0.95.120:63626] [client 88.0.95.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emuartaustralia.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSbyTcLmDsnHrj-QFB_2YwAAAEo"]
[Wed Nov 26 20:29:12.979043 2025] [:error] [pid 45685:tid 45755] [client 88.0.95.120:57012] [client 88.0.95.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.0.95.120, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSbymFj3f_NRdgU0DQ7nWwAAAQ0"]
[Wed Nov 26 20:30:29.680808 2025] [:error] [pid 45769:tid 45793] [client 88.0.95.120:64249] [client 88.0.95.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.0.95.120, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSby5VdG5Eht9c3yy4MxmgAAAdU"]
[Wed Nov 26 20:31:29.634120 2025] [:error] [pid 6471:tid 6476] [client 88.0.95.120:64011] [client 88.0.95.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.0.95.120, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSbzIeh3Z9TZLlRuTiOgWAAAAII"]
[Wed Nov 26 20:32:26.337375 2025] [:error] [pid 46443:tid 46449] [client 88.0.95.120:59046] [client 88.0.95.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.0.95.120, incrementing ddos counter"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSbzWsLmDsnHrj-QFB_3aQAAAEQ"]
[Wed Nov 26 23:59:49.361781 2025] [:error] [pid 20733:tid 20759] [client 193.37.32.74:57885] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aScj9QV9EP2HuRvnH8eNvAAAANg"]
[Wed Nov 26 23:59:49.547627 2025] [:error] [pid 45685:tid 45757] [client 193.37.32.96:48611] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aScj9Vj3f_NRdgU0DQ4Q-AAAAQ8"]
[Wed Nov 26 23:59:49.789255 2025] [:error] [pid 45684:tid 45719] [client 193.37.32.98:42385] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "aScj9fg5LMxwI4-PD1e6agAAAAQ"]
[Wed Nov 26 23:59:49.967585 2025] [:error] [pid 45683:tid 45706] [client 193.37.32.98:34967] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "aScj9RX1gQgNFW_222roFwAAAVI"]
[Wed Nov 26 23:59:55.163853 2025] [:error] [pid 45769:tid 45792] [client 193.37.32.79:39079] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/export.php"] [unique_id "aScj-1dG5Eht9c3yy4NaOwAAAdQ"]
[Wed Nov 26 23:59:55.400405 2025] [:error] [pid 46443:tid 46449] [client 193.37.32.76:28157] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/network_xo.php"] [unique_id "aScj-8LmDsnHrj-QFB819wAAAEQ"]
[Wed Nov 26 23:59:55.834427 2025] [:error] [pid 45683:tid 45712] [client 193.37.32.63:30353] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/hplfuns.php"] [unique_id "aScj-xX1gQgNFW_222roHAAAAVg"]
[Wed Nov 26 23:59:56.024280 2025] [:error] [pid 45683:tid 45691] [client 193.37.32.90:26775] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aScj_BX1gQgNFW_222roIAAAAUM"]
[Wed Nov 26 23:59:56.431378 2025] [:error] [pid 45684:tid 45718] [client 193.37.32.90:38881] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/"] [unique_id "aScj_Pg5LMxwI4-PD1e6iQAAAAM"]
[Wed Nov 26 23:59:56.620756 2025] [:error] [pid 45684:tid 45737] [client 193.37.32.104:50741] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-links-opml.php"] [unique_id "aScj_Pg5LMxwI4-PD1e6jQAAABY"]
[Wed Nov 26 23:59:56.847924 2025] [:error] [pid 45769:tid 45784] [client 193.37.32.69:59191] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php"] [unique_id "aScj_FdG5Eht9c3yy4NaPAAAAcw"]
[Wed Nov 26 23:59:57.031039 2025] [:error] [pid 6471:tid 6489] [client 193.37.32.77:38663] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/makeasmtp.php"] [unique_id "aScj_eh3Z9TZLlRuTiPSZQAAAI8"]
[Wed Nov 26 23:59:57.214562 2025] [:error] [pid 45685:tid 45749] [client 193.37.32.68:28399] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aScj_Vj3f_NRdgU0DQ4Q_AAAAQc"]
[Wed Nov 26 23:59:57.406671 2025] [:error] [pid 46443:tid 46451] [client 193.37.32.77:63685] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/222.php"] [unique_id "aScj_cLmDsnHrj-QFB81-QAAAEY"]
[Wed Nov 26 23:59:57.605885 2025] [:error] [pid 45685:tid 45765] [client 193.37.32.72:56067] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aScj_Vj3f_NRdgU0DQ4Q_QAAARc"]
[Wed Nov 26 23:59:59.173271 2025] [:error] [pid 45683:tid 45693] [client 193.37.32.57:26517] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/updates.php"] [unique_id "aScj_xX1gQgNFW_222roLgAAAUU"]
[Wed Nov 26 23:59:59.355990 2025] [:error] [pid 45769:tid 45779] [client 193.37.32.94:54513] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aScj_1dG5Eht9c3yy4NaPQAAAcc"]
[Wed Nov 26 23:59:59.555417 2025] [:error] [pid 45684:tid 45715] [client 193.37.32.86:26617] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/form.php"] [unique_id "aScj__g5LMxwI4-PD1e6lwAAAAA"]
[Wed Nov 26 23:59:59.737458 2025] [:error] [pid 45684:tid 45718] [client 193.37.32.82:48585] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-json/wp/v2/posts"] [unique_id "aScj__g5LMxwI4-PD1e6mAAAAAM"]
[Wed Nov 26 23:59:59.942230 2025] [:error] [pid 45684:tid 45728] [client 193.37.32.92:28123] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aScj__g5LMxwI4-PD1e6mQAAAA0"]
[Thu Nov 27 00:00:00.130613 2025] [:error] [pid 46443:tid 46459] [client 193.37.32.85:54747] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/asasx.php"] [unique_id "aSckAMLmDsnHrj-QFB81-wAAAE4"]
[Thu Nov 27 00:00:00.413971 2025] [:error] [pid 6471:tid 6476] [client 193.37.32.64:31207] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/aback.php"] [unique_id "aSckAOh3Z9TZLlRuTiPSZwAAAII"]
[Thu Nov 27 00:00:00.626998 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.93:32593] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/new.php"] [unique_id "aSckABX1gQgNFW_222roMwAAAUE"]
[Thu Nov 27 00:00:00.987861 2025] [:error] [pid 45684:tid 45720] [client 193.37.32.90:36523] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ad.php"] [unique_id "aSckAPg5LMxwI4-PD1e6nAAAAAU"]
[Thu Nov 27 00:00:01.254731 2025] [:error] [pid 45684:tid 45727] [client 193.37.32.85:55563] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/moderation.php"] [unique_id "aSckAfg5LMxwI4-PD1e6nQAAAAw"]
[Thu Nov 27 00:00:01.523075 2025] [:error] [pid 45683:tid 45703] [client 193.37.32.104:53701] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aSckARX1gQgNFW_222roNAAAAU8"]
[Thu Nov 27 00:00:02.029388 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.56:32423] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/test.php"] [unique_id "aSckAvg5LMxwI4-PD1e6nwAAABc"]
[Thu Nov 27 00:00:02.229924 2025] [:error] [pid 45684:tid 45723] [client 193.37.32.64:38229] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/themes.php"] [unique_id "aSckAvg5LMxwI4-PD1e6oQAAAAg"]
[Thu Nov 27 00:00:02.449980 2025] [:error] [pid 45769:tid 45790] [client 193.37.32.55:60189] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/jindex.php"] [unique_id "aSckAldG5Eht9c3yy4NaPwAAAdI"]
[Thu Nov 27 00:00:02.659739 2025] [:error] [pid 45685:tid 45759] [client 193.37.32.67:33213] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wso.php"] [unique_id "aSckAlj3f_NRdgU0DQ4Q_wAAARE"]
[Thu Nov 27 00:00:02.846021 2025] [:error] [pid 46443:tid 46467] [client 193.37.32.62:54643] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSckAsLmDsnHrj-QFB81_AAAAFY"]
[Thu Nov 27 00:00:03.033910 2025] [:error] [pid 6471:tid 6495] [client 193.37.32.92:55433] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aSckA-h3Z9TZLlRuTiPSaQAAAJU"]
[Thu Nov 27 00:00:03.280355 2025] [:error] [pid 46443:tid 46458] [client 193.37.32.58:28457] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/leaf.php"] [unique_id "aSckA8LmDsnHrj-QFB81_QAAAE0"]
[Thu Nov 27 00:00:03.560598 2025] [:error] [pid 45769:tid 45777] [client 193.37.32.60:29129] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/past.php"] [unique_id "aSckA1dG5Eht9c3yy4NaQAAAAcU"]
[Thu Nov 27 00:00:03.910105 2025] [:error] [pid 45685:tid 45758] [client 193.37.32.103:32583] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/z.php"] [unique_id "aSckA1j3f_NRdgU0DQ4RAAAAARA"]
[Thu Nov 27 00:00:04.221494 2025] [:error] [pid 6471:tid 6490] [client 193.37.32.64:31693] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aSckBOh3Z9TZLlRuTiPSawAAAJA"]
[Thu Nov 27 00:00:04.520704 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.81:41585] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aSckBOh3Z9TZLlRuTiPSbAAAAI0"]
[Thu Nov 27 00:00:09.748057 2025] [:error] [pid 6471:tid 6491] [client 193.37.32.101:36981] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/inc.php"] [unique_id "aSckCeh3Z9TZLlRuTiPScAAAAJE"]
[Thu Nov 27 00:00:09.928808 2025] [:error] [pid 45683:tid 45691] [client 193.37.32.84:28601] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/system_log.php"] [unique_id "aSckCRX1gQgNFW_222roNwAAAUM"]
[Thu Nov 27 00:00:11.553116 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.97:51373] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/gg.php"] [unique_id "aSckCxX1gQgNFW_222roOQAAAUE"]
[Thu Nov 27 00:00:11.736751 2025] [:error] [pid 45684:tid 45720] [client 193.37.32.65:31649] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/sim.php"] [unique_id "aSckC_g5LMxwI4-PD1e6qQAAAAU"]
[Thu Nov 27 00:00:11.926740 2025] [:error] [pid 45683:tid 45690] [client 193.37.32.72:39225] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/admin/function.php"] [unique_id "aSckCxX1gQgNFW_222roOgAAAUI"]
[Thu Nov 27 00:00:12.282834 2025] [:error] [pid 20733:tid 20757] [client 193.37.32.79:26281] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/core.php"] [unique_id "aSckDAV9EP2HuRvnH8eN1AAAANY"]
[Thu Nov 27 00:00:12.476775 2025] [:error] [pid 45683:tid 45692] [client 193.37.32.75:58713] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/mail.php"] [unique_id "aSckDBX1gQgNFW_222roOwAAAUQ"]
[Thu Nov 27 00:00:12.664208 2025] [:error] [pid 45683:tid 45703] [client 193.37.32.58:20475] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSckDBX1gQgNFW_222roPAAAAU8"]
[Thu Nov 27 00:00:12.845997 2025] [:error] [pid 45683:tid 45711] [client 193.37.32.85:44909] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/xml.php"] [unique_id "aSckDBX1gQgNFW_222roPQAAAVc"]
[Thu Nov 27 00:00:13.076429 2025] [:error] [pid 45685:tid 45761] [client 193.37.32.83:37431] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/css.php"] [unique_id "aSckDVj3f_NRdgU0DQ4RBQAAARM"]
[Thu Nov 27 00:00:13.265998 2025] [:error] [pid 45769:tid 45781] [client 193.37.32.91:25751] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/images/class-config.php"] [unique_id "aSckDVdG5Eht9c3yy4NaRAAAAck"]
[Thu Nov 27 00:00:13.537369 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.96:30901] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/g.php"] [unique_id "aSckDfg5LMxwI4-PD1e6rQAAABc"]
[Thu Nov 27 00:00:13.816003 2025] [:error] [pid 46443:tid 46449] [client 193.37.32.97:28547] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-mail.php"] [unique_id "aSckDcLmDsnHrj-QFB82BQAAAEQ"]
[Thu Nov 27 00:00:14.022914 2025] [:error] [pid 45769:tid 45789] [client 193.37.32.76:27853] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/default.php"] [unique_id "aSckDldG5Eht9c3yy4NaRQAAAdE"]
[Thu Nov 27 00:00:24.257263 2025] [:error] [pid 20733:tid 20737] [client 193.37.32.67:49415] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSckGAV9EP2HuRvnH8eN6gAAAMI"]
[Thu Nov 27 00:00:24.441943 2025] [:error] [pid 45769:tid 45794] [client 193.37.32.82:30933] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/content.php"] [unique_id "aSckGFdG5Eht9c3yy4NaSAAAAdY"]
[Thu Nov 27 00:00:24.647288 2025] [:error] [pid 45684:tid 45725] [client 193.37.32.63:34607] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aSckGPg5LMxwI4-PD1e6vQAAAAo"]
[Thu Nov 27 00:00:24.867619 2025] [:error] [pid 6471:tid 6495] [client 193.37.32.65:40993] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSckGOh3Z9TZLlRuTiPSigAAAJU"]
[Thu Nov 27 00:00:25.051351 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.62:29517] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aSckGfg5LMxwI4-PD1e6vgAAABQ"]
[Thu Nov 27 00:00:25.290400 2025] [:error] [pid 45769:tid 45774] [client 193.37.32.99:27263] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wsa.php"] [unique_id "aSckGVdG5Eht9c3yy4NaSQAAAcI"]
[Thu Nov 27 00:00:25.474470 2025] [:error] [pid 20733:tid 20748] [client 193.37.32.101:27293] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/f35.php"] [unique_id "aSckGQV9EP2HuRvnH8eN6wAAAM0"]
[Thu Nov 27 00:00:25.670845 2025] [:error] [pid 45684:tid 45734] [client 193.37.32.97:45553] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-l0gin.php"] [unique_id "aSckGfg5LMxwI4-PD1e6vwAAABM"]
[Thu Nov 27 00:00:30.956361 2025] [:error] [pid 45685:tid 45745] [client 193.37.32.103:27831] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/aa.php"] [unique_id "aSckHlj3f_NRdgU0DQ4RDwAAAQM"]
[Thu Nov 27 00:00:31.208279 2025] [:error] [pid 6471:tid 6494] [client 193.37.32.71:39589] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aSckH-h3Z9TZLlRuTiPSkAAAAJQ"]
[Thu Nov 27 00:00:31.392913 2025] [:error] [pid 45769:tid 45772] [client 193.37.32.78:48093] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/"] [unique_id "aSckH1dG5Eht9c3yy4NaTgAAAcA"]
[Thu Nov 27 00:00:31.572622 2025] [:error] [pid 45684:tid 45731] [client 193.37.32.60:26099] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/classwithtostring.php"] [unique_id "aSckH_g5LMxwI4-PD1e6yQAAABA"]
[Thu Nov 27 00:00:31.755151 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.59:44993] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/autoload_classmap/function.php"] [unique_id "aSckH_g5LMxwI4-PD1e6ygAAABQ"]
[Thu Nov 27 00:00:31.947891 2025] [:error] [pid 45769:tid 45783] [client 193.37.32.54:46491] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aSckH1dG5Eht9c3yy4NaTwAAAcs"]
[Thu Nov 27 00:00:32.127800 2025] [:error] [pid 20733:tid 20738] [client 193.37.32.76:37811] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/cgi-bin/"] [unique_id "aSckIAV9EP2HuRvnH8eN9AAAAMM"]
[Thu Nov 27 00:00:32.315594 2025] [:error] [pid 45684:tid 45717] [client 193.37.32.100:45057] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aSckIPg5LMxwI4-PD1e6zgAAAAI"]
[Thu Nov 27 00:00:32.532812 2025] [:error] [pid 45683:tid 45692] [client 193.37.32.81:25281] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aSckIBX1gQgNFW_222roRwAAAUQ"]
[Thu Nov 27 00:00:32.749970 2025] [:error] [pid 45685:tid 45749] [client 193.37.32.87:59951] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/buy.php"] [unique_id "aSckIFj3f_NRdgU0DQ4RGgAAAQc"]
[Thu Nov 27 00:00:32.943287 2025] [:error] [pid 45684:tid 45723] [client 193.37.32.67:33945] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-file.php"] [unique_id "aSckIPg5LMxwI4-PD1e60QAAAAg"]
[Thu Nov 27 00:00:33.136597 2025] [:error] [pid 45684:tid 45720] [client 193.37.32.105:65401] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/chosen.php"] [unique_id "aSckIfg5LMxwI4-PD1e60gAAAAU"]
[Thu Nov 27 00:00:33.331739 2025] [:error] [pid 45685:tid 45765] [client 193.37.32.90:60867] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/dropdown.php"] [unique_id "aSckIVj3f_NRdgU0DQ4RHAAAARc"]
[Thu Nov 27 00:00:33.555514 2025] [:error] [pid 45685:tid 45758] [client 193.37.32.104:20031] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/alfa.php"] [unique_id "aSckIVj3f_NRdgU0DQ4RHQAAARA"]
[Thu Nov 27 00:00:33.746649 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.80:35389] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp.php"] [unique_id "aSckIfg5LMxwI4-PD1e61AAAABU"]
[Thu Nov 27 00:00:33.927633 2025] [:error] [pid 20733:tid 20746] [client 193.37.32.64:38271] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/nf_tracking.php"] [unique_id "aSckIQV9EP2HuRvnH8eN-QAAAMs"]
[Thu Nov 27 00:00:34.107541 2025] [:error] [pid 45684:tid 45732] [client 193.37.32.94:25625] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/nc4.php"] [unique_id "aSckIvg5LMxwI4-PD1e61QAAABE"]
[Thu Nov 27 00:00:34.360095 2025] [:error] [pid 45769:tid 45793] [client 193.37.32.63:56375] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSckIldG5Eht9c3yy4NaUQAAAdU"]
[Thu Nov 27 00:00:34.540920 2025] [:error] [pid 45685:tid 45744] [client 193.37.32.62:57269] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/comments/"] [unique_id "aSckIlj3f_NRdgU0DQ4RHgAAAQI"]
[Thu Nov 27 00:00:34.731825 2025] [:error] [pid 6471:tid 6474] [client 193.37.32.105:55725] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/"] [unique_id "aSckIuh3Z9TZLlRuTiPSkgAAAIA"]
[Thu Nov 27 00:00:34.961716 2025] [:error] [pid 46443:tid 46459] [client 193.37.32.84:45945] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/natural.php"] [unique_id "aSckIsLmDsnHrj-QFB82GwAAAE4"]
[Thu Nov 27 00:00:35.183027 2025] [:error] [pid 45684:tid 45733] [client 193.37.32.54:62401] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/index.php"] [unique_id "aSckI_g5LMxwI4-PD1e61wAAABI"]
[Thu Nov 27 00:00:35.376841 2025] [:error] [pid 45684:tid 45725] [client 193.37.32.94:62541] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aSckI_g5LMxwI4-PD1e62AAAAAo"]
[Thu Nov 27 00:00:35.565315 2025] [:error] [pid 45683:tid 45696] [client 193.37.32.60:24895] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aSckIxX1gQgNFW_222roSwAAAUg"]
[Thu Nov 27 00:00:35.759340 2025] [:error] [pid 45684:tid 45716] [client 193.37.32.87:60045] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/admin.php"] [unique_id "aSckI_g5LMxwI4-PD1e62QAAAAE"]
[Thu Nov 27 00:00:35.950036 2025] [:error] [pid 45683:tid 45700] [client 193.37.32.79:22111] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSckIxX1gQgNFW_222roTAAAAUw"]
[Thu Nov 27 00:00:36.188520 2025] [:error] [pid 45684:tid 45717] [client 193.37.32.88:40661] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/uploads/"] [unique_id "aSckJPg5LMxwI4-PD1e62gAAAAI"]
[Thu Nov 27 00:00:36.399046 2025] [:error] [pid 46443:tid 46467] [client 193.37.32.75:54111] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/about.php"] [unique_id "aSckJMLmDsnHrj-QFB82HQAAAFY"]
[Thu Nov 27 00:00:36.613097 2025] [:error] [pid 46443:tid 46458] [client 193.37.32.88:47577] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/worksec.php"] [unique_id "aSckJMLmDsnHrj-QFB82HgAAAE0"]
[Thu Nov 27 00:00:36.881545 2025] [:error] [pid 45684:tid 45720] [client 193.37.32.104:55523] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/makeasmtp.php"] [unique_id "aSckJPg5LMxwI4-PD1e63QAAAAU"]
[Thu Nov 27 00:00:37.141230 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.80:65343] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/k.php"] [unique_id "aSckJfg5LMxwI4-PD1e63wAAABc"]
[Thu Nov 27 00:00:37.413262 2025] [:error] [pid 6471:tid 6475] [client 193.37.32.72:34785] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/function.php"] [unique_id "aSckJeh3Z9TZLlRuTiPSlgAAAIE"]
[Thu Nov 27 00:00:37.608668 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.86:62069] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSckJfg5LMxwI4-PD1e64QAAABU"]
[Thu Nov 27 00:00:37.884924 2025] [:error] [pid 6471:tid 6495] [client 193.37.32.74:60249] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/images/"] [unique_id "aSckJeh3Z9TZLlRuTiPSlwAAAJU"]
[Thu Nov 27 00:00:38.101142 2025] [:error] [pid 46443:tid 46448] [client 193.37.32.105:49895] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/fast.php"] [unique_id "aSckJsLmDsnHrj-QFB82IAAAAEM"]
[Thu Nov 27 00:00:38.306345 2025] [:error] [pid 45684:tid 45730] [client 193.37.32.95:61365] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/cache.php"] [unique_id "aSckJvg5LMxwI4-PD1e64gAAAA8"]
[Thu Nov 27 00:00:38.515512 2025] [:error] [pid 20733:tid 20759] [client 193.37.32.76:43811] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-good.php"] [unique_id "aSckJgV9EP2HuRvnH8eN_QAAANg"]
[Thu Nov 27 00:00:38.704868 2025] [:error] [pid 45684:tid 45729] [client 193.37.32.63:34495] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aSckJvg5LMxwI4-PD1e64wAAAA4"]
[Thu Nov 27 00:00:43.929487 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.74:39947] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ioxi002.PhP7"] [unique_id "aSckK_g5LMxwI4-PD1e66wAAABc"]
[Thu Nov 27 00:00:45.544053 2025] [:error] [pid 6471:tid 6491] [client 193.37.32.81:50829] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/about.php7"] [unique_id "aSckLeh3Z9TZLlRuTiPSnAAAAJE"]
[Thu Nov 27 00:00:45.825910 2025] [:error] [pid 45685:tid 45747] [client 193.37.32.82:31839] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/akcc.php"] [unique_id "aSckLVj3f_NRdgU0DQ4RIwAAAQU"]
[Thu Nov 27 00:00:46.005767 2025] [:error] [pid 20733:tid 20744] [client 193.37.32.103:32995] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/function/function.php"] [unique_id "aSckLgV9EP2HuRvnH8eN_wAAAMk"]
[Thu Nov 27 00:00:46.187516 2025] [:error] [pid 45683:tid 45706] [client 193.37.32.61:32077] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/"] [unique_id "aSckLhX1gQgNFW_222roTwAAAVI"]
[Thu Nov 27 00:00:46.371929 2025] [:error] [pid 46443:tid 46464] [client 193.37.32.79:34563] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/1.php"] [unique_id "aSckLsLmDsnHrj-QFB82JQAAAFM"]
[Thu Nov 27 00:00:46.556111 2025] [:error] [pid 45685:tid 45756] [client 193.37.32.71:59605] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSckLlj3f_NRdgU0DQ4RJAAAAQ4"]
[Thu Nov 27 00:00:46.734036 2025] [:error] [pid 46443:tid 46451] [client 193.37.32.81:64363] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aSckLsLmDsnHrj-QFB82JgAAAEY"]
[Thu Nov 27 00:00:46.924814 2025] [:error] [pid 45685:tid 45751] [client 193.37.32.94:46893] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/xmlrpc.php"] [unique_id "aSckLlj3f_NRdgU0DQ4RJQAAAQk"]
[Thu Nov 27 00:00:47.105307 2025] [:error] [pid 45769:tid 45775] [client 193.37.32.100:31233] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-"] [unique_id "aSckL1dG5Eht9c3yy4NaVwAAAcM"]
[Thu Nov 27 00:00:47.343966 2025] [:error] [pid 45683:tid 45691] [client 193.37.32.84:62581] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-error.php"] [unique_id "aSckLxX1gQgNFW_222roUAAAAUM"]
[Thu Nov 27 00:00:47.628877 2025] [:error] [pid 6471:tid 6492] [client 193.37.32.76:47119] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/file2.php"] [unique_id "aSckL-h3Z9TZLlRuTiPSnwAAAJI"]
[Thu Nov 27 00:00:47.816444 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.74:50995] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/adminfuns.php"] [unique_id "aSckL_g5LMxwI4-PD1e7AQAAABc"]
[Thu Nov 27 00:00:48.002991 2025] [:error] [pid 45684:tid 45732] [client 193.37.32.79:41651] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/"] [unique_id "aSckMPg5LMxwI4-PD1e7AgAAABE"]
[Thu Nov 27 00:00:48.191884 2025] [:error] [pid 45685:tid 45760] [client 193.37.32.56:46603] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/xc.php"] [unique_id "aSckMFj3f_NRdgU0DQ4RJgAAARI"]
[Thu Nov 27 00:00:48.409012 2025] [:error] [pid 6471:tid 6474] [client 193.37.32.92:40621] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aSckMOh3Z9TZLlRuTiPSoAAAAIA"]
[Thu Nov 27 00:00:48.595753 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.74:62849] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/moon.php"] [unique_id "aSckMBX1gQgNFW_222roUQAAAUE"]
[Thu Nov 27 00:00:48.776030 2025] [:error] [pid 46443:tid 46460] [client 193.37.32.81:25847] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aSckMMLmDsnHrj-QFB82KAAAAE8"]
[Thu Nov 27 00:00:48.959417 2025] [:error] [pid 45684:tid 45726] [client 193.37.32.61:27463] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-trackback.php"] [unique_id "aSckMPg5LMxwI4-PD1e7AwAAAAs"]
[Thu Nov 27 00:00:49.138274 2025] [:error] [pid 45684:tid 45718] [client 193.37.32.104:38091] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aSckMfg5LMxwI4-PD1e7BAAAAAM"]
[Thu Nov 27 00:00:49.372654 2025] [:error] [pid 46443:tid 46461] [client 193.37.32.59:31347] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/load.php"] [unique_id "aSckMcLmDsnHrj-QFB82KwAAAFA"]
[Thu Nov 27 00:00:49.566045 2025] [:error] [pid 46443:tid 46465] [client 193.37.32.92:39003] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/edit.php"] [unique_id "aSckMcLmDsnHrj-QFB82LQAAAFQ"]
[Thu Nov 27 00:00:49.773561 2025] [:error] [pid 45683:tid 45690] [client 193.37.32.62:39583] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/as.php"] [unique_id "aSckMRX1gQgNFW_222roUgAAAUI"]
[Thu Nov 27 00:00:49.970444 2025] [:error] [pid 45683:tid 45692] [client 193.37.32.90:60141] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/xmrlpc.php"] [unique_id "aSckMRX1gQgNFW_222roUwAAAUQ"]
[Thu Nov 27 00:00:50.206416 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.66:32793] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/403.php"] [unique_id "aSckMvg5LMxwI4-PD1e7BgAAABU"]
[Thu Nov 27 00:00:50.390411 2025] [:error] [pid 45684:tid 45730] [client 193.37.32.71:60723] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSckMvg5LMxwI4-PD1e7BwAAAA8"]
[Thu Nov 27 00:00:50.574512 2025] [:error] [pid 45684:tid 45733] [client 193.37.32.94:32417] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/m.php"] [unique_id "aSckMvg5LMxwI4-PD1e7CAAAABI"]
[Thu Nov 27 00:00:50.769439 2025] [:error] [pid 46443:tid 46446] [client 193.37.32.103:49511] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/uploads/"] [unique_id "aSckMsLmDsnHrj-QFB82LgAAAEE"]
[Thu Nov 27 00:00:55.997138 2025] [:error] [pid 6471:tid 6478] [client 193.37.32.57:26181] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/inputs.php"] [unique_id "aSckN-h3Z9TZLlRuTiPSpgAAAIQ"]
[Thu Nov 27 00:01:01.188889 2025] [:error] [pid 45769:tid 45787] [client 193.37.32.91:50237] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSckPVdG5Eht9c3yy4NaXAAAAc8"]
[Thu Nov 27 00:01:01.386312 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.62:38573] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aSckPeh3Z9TZLlRuTiPSqwAAAI0"]
[Thu Nov 27 00:01:01.575431 2025] [:error] [pid 20733:tid 20742] [client 193.37.32.79:49263] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/file.php"] [unique_id "aSckPQV9EP2HuRvnH8eOBwAAAMc"]
[Thu Nov 27 00:01:01.794594 2025] [:error] [pid 45683:tid 45707] [client 193.37.32.62:27363] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/upload/"] [unique_id "aSckPRX1gQgNFW_222roVgAAAVM"]
[Thu Nov 27 00:01:01.985972 2025] [:error] [pid 45769:tid 45785] [client 193.37.32.102:64881] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ioxi-o.php"] [unique_id "aSckPVdG5Eht9c3yy4NaXgAAAc0"]
[Thu Nov 27 00:01:02.171863 2025] [:error] [pid 20733:tid 20741] [client 193.37.32.63:20713] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "emuartaustralia.com.au"] [uri "/fm.php"] [unique_id "aSckPgV9EP2HuRvnH8eOCAAAAMY"]
[Thu Nov 27 00:01:02.356462 2025] [:error] [pid 45685:tid 45748] [client 193.37.32.56:62877] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/"] [unique_id "aSckPlj3f_NRdgU0DQ4RLQAAAQY"]
[Thu Nov 27 00:01:02.554286 2025] [:error] [pid 45685:tid 45750] [client 193.37.32.59:58797] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/bless.php"] [unique_id "aSckPlj3f_NRdgU0DQ4RLgAAAQg"]
[Thu Nov 27 00:01:02.745958 2025] [:error] [pid 6471:tid 6484] [client 193.37.32.104:30703] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/"] [unique_id "aSckPuh3Z9TZLlRuTiPSrAAAAIo"]
[Thu Nov 27 00:01:02.928972 2025] [:error] [pid 20733:tid 20751] [client 193.37.32.104:22133] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aSckPgV9EP2HuRvnH8eOCQAAANA"]
[Thu Nov 27 00:01:03.119513 2025] [:error] [pid 45685:tid 45747] [client 193.37.32.71:51185] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/"] [unique_id "aSckP1j3f_NRdgU0DQ4RMAAAAQU"]
[Thu Nov 27 00:01:03.310255 2025] [:error] [pid 45683:tid 45712] [client 193.37.32.72:29333] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/system.php"] [unique_id "aSckPxX1gQgNFW_222roWwAAAVg"]
[Thu Nov 27 00:01:03.505286 2025] [:error] [pid 6471:tid 6483] [client 193.37.32.103:33181] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aSckP-h3Z9TZLlRuTiPSrQAAAIk"]
[Thu Nov 27 00:01:03.688331 2025] [:error] [pid 6471:tid 6479] [client 193.37.32.55:52467] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aSckP-h3Z9TZLlRuTiPSrgAAAIU"]
[Thu Nov 27 00:01:03.953346 2025] [:error] [pid 45769:tid 45778] [client 193.37.32.100:40229] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/"] [unique_id "aSckP1dG5Eht9c3yy4NaXwAAAcY"]
[Thu Nov 27 00:01:04.138857 2025] [:error] [pid 20733:tid 20759] [client 193.37.32.60:36911] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/class.api.php"] [unique_id "aSckQAV9EP2HuRvnH8eOCgAAANg"]
[Thu Nov 27 00:01:04.324031 2025] [:error] [pid 45684:tid 45731] [client 193.37.32.64:26523] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/about.php"] [unique_id "aSckQPg5LMxwI4-PD1e7FQAAABA"]
[Thu Nov 27 00:01:04.515159 2025] [:error] [pid 45685:tid 45765] [client 193.37.32.75:61855] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-signin.php"] [unique_id "aSckQFj3f_NRdgU0DQ4RMwAAARc"]
[Thu Nov 27 00:01:04.853072 2025] [:error] [pid 6471:tid 6498] [client 193.37.32.74:60565] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/assets/images/selam.php"] [unique_id "aSckQOh3Z9TZLlRuTiPSsQAAAJg"]
[Thu Nov 27 00:01:05.264310 2025] [:error] [pid 45769:tid 45796] [client 193.37.32.59:53241] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/404.php"] [unique_id "aSckQVdG5Eht9c3yy4NaYAAAAdg"]
[Thu Nov 27 00:01:05.566080 2025] [:error] [pid 20733:tid 20754] [client 193.37.32.74:21591] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "aSckQQV9EP2HuRvnH8eODAAAANM"]
[Thu Nov 27 00:01:05.768967 2025] [:error] [pid 20733:tid 20738] [client 193.37.32.94:54081] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-config-sample.php"] [unique_id "aSckQQV9EP2HuRvnH8eODQAAAMM"]
[Thu Nov 27 00:01:05.962263 2025] [:error] [pid 20733:tid 20743] [client 193.37.32.80:34371] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/files/"] [unique_id "aSckQQV9EP2HuRvnH8eODwAAAMg"]
[Thu Nov 27 00:01:06.145470 2025] [:error] [pid 20733:tid 20758] [client 193.37.32.68:51077] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/"] [unique_id "aSckQgV9EP2HuRvnH8eOEQAAANc"]
[Thu Nov 27 00:01:06.377364 2025] [:error] [pid 6471:tid 6480] [client 193.37.32.89:51823] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/css/"] [unique_id "aSckQuh3Z9TZLlRuTiPSswAAAIY"]
[Thu Nov 27 00:01:06.567626 2025] [:error] [pid 45769:tid 45774] [client 193.37.32.97:52729] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/simple.php"] [unique_id "aSckQldG5Eht9c3yy4NaYQAAAcI"]
[Thu Nov 27 00:01:06.752120 2025] [:error] [pid 20733:tid 20740] [client 193.37.32.95:38077] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/admin-header.php"] [unique_id "aSckQgV9EP2HuRvnH8eOEwAAAMU"]
[Thu Nov 27 00:01:06.940884 2025] [:error] [pid 45769:tid 45777] [client 193.37.32.59:30433] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/shell.php"] [unique_id "aSckQldG5Eht9c3yy4NaYwAAAcU"]
[Thu Nov 27 00:01:07.189209 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.67:20941] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-conflg/function.php"] [unique_id "aSckQ-h3Z9TZLlRuTiPStAAAAI0"]
[Thu Nov 27 00:01:07.377318 2025] [:error] [pid 45683:tid 45695] [client 193.37.32.69:48017] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-info.php"] [unique_id "aSckQxX1gQgNFW_222roXAAAAUc"]
[Thu Nov 27 00:01:12.593782 2025] [:error] [pid 6471:tid 6492] [client 193.37.32.99:37181] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/shell/"] [unique_id "aSckSOh3Z9TZLlRuTiPStgAAAJI"]
[Thu Nov 27 00:01:12.940988 2025] [:error] [pid 45684:tid 45737] [client 193.37.32.88:51523] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aSckSPg5LMxwI4-PD1e7GwAAABY"]
[Thu Nov 27 00:01:13.125782 2025] [:error] [pid 45684:tid 45730] [client 193.37.32.79:27419] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/images/"] [unique_id "aSckSfg5LMxwI4-PD1e7HAAAAA8"]
[Thu Nov 27 00:01:13.328581 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.78:30211] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/admin/"] [unique_id "aSckSfg5LMxwI4-PD1e7HQAAABU"]
[Thu Nov 27 00:01:13.509899 2025] [:error] [pid 45769:tid 45793] [client 193.37.32.60:53283] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-links.php"] [unique_id "aSckSVdG5Eht9c3yy4NaZwAAAdU"]
[Thu Nov 27 00:01:13.706379 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.87:27447] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/edit.php"] [unique_id "aSckSfg5LMxwI4-PD1e7HwAAABQ"]
[Thu Nov 27 00:01:13.900171 2025] [:error] [pid 45684:tid 45716] [client 193.37.32.66:63007] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-conflg.php"] [unique_id "aSckSfg5LMxwI4-PD1e7IAAAAAE"]
[Thu Nov 27 00:01:14.083635 2025] [:error] [pid 45684:tid 45731] [client 193.37.32.57:59801] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/index/function.php"] [unique_id "aSckSvg5LMxwI4-PD1e7IgAAABA"]
[Thu Nov 27 00:01:14.264355 2025] [:error] [pid 46443:tid 46467] [client 193.37.32.77:40335] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/"] [unique_id "aSckSsLmDsnHrj-QFB82NAAAAFY"]
[Thu Nov 27 00:01:14.569074 2025] [:error] [pid 45684:tid 45724] [client 193.37.32.77:64217] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/bolt.php"] [unique_id "aSckSvg5LMxwI4-PD1e7JAAAAAk"]
[Thu Nov 27 00:01:14.785407 2025] [:error] [pid 20733:tid 20748] [client 193.37.32.94:40435] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/"] [unique_id "aSckSgV9EP2HuRvnH8eOFgAAAM0"]
[Thu Nov 27 00:01:14.967353 2025] [:error] [pid 45685:tid 45763] [client 193.37.32.99:33987] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/we.php"] [unique_id "aSckSlj3f_NRdgU0DQ4RNgAAARU"]
[Thu Nov 27 00:01:15.156251 2025] [:error] [pid 45684:tid 45721] [client 193.37.32.63:41525] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSckS_g5LMxwI4-PD1e7JQAAAAY"]
[Thu Nov 27 00:01:15.337739 2025] [:error] [pid 46443:tid 46460] [client 193.37.32.88:37923] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/item.php"] [unique_id "aSckS8LmDsnHrj-QFB82NQAAAE8"]
[Thu Nov 27 00:01:15.523562 2025] [:error] [pid 46443:tid 46468] [client 193.37.32.79:45651] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/admin.php"] [unique_id "aSckS8LmDsnHrj-QFB82NgAAAFc"]
[Thu Nov 27 00:01:15.719258 2025] [:error] [pid 46443:tid 46448] [client 193.37.32.76:56863] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/fm.php/sts.php"] [unique_id "aSckS8LmDsnHrj-QFB82NwAAAEM"]
[Thu Nov 27 00:01:15.925033 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.74:56085] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aSckSxX1gQgNFW_222roXgAAAUE"]
[Thu Nov 27 00:01:16.105908 2025] [:error] [pid 46443:tid 46465] [client 193.37.32.80:58341] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aSckTMLmDsnHrj-QFB82OAAAAFQ"]
[Thu Nov 27 00:01:16.288141 2025] [:error] [pid 46443:tid 46449] [client 193.37.32.88:38851] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSckTMLmDsnHrj-QFB82OQAAAEQ"]
[Thu Nov 27 00:01:16.469914 2025] [:error] [pid 45685:tid 45753] [client 193.37.32.104:51913] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/files.php"] [unique_id "aSckTFj3f_NRdgU0DQ4RNwAAAQs"]
[Thu Nov 27 00:01:18.172854 2025] [:error] [pid 45769:tid 45788] [client 193.37.32.55:27635] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aSckTldG5Eht9c3yy4NaaAAAAdA"]
[Thu Nov 27 00:01:18.359847 2025] [:error] [pid 45683:tid 45703] [client 193.37.32.96:57361] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/av.php"] [unique_id "aSckThX1gQgNFW_222roYQAAAU8"]
[Thu Nov 27 00:01:18.564421 2025] [:error] [pid 45769:tid 45784] [client 193.37.32.78:54953] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSckTldG5Eht9c3yy4NaagAAAcw"]
[Thu Nov 27 00:01:18.742812 2025] [:error] [pid 46443:tid 46454] [client 193.37.32.101:24513] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/readme.php"] [unique_id "aSckTsLmDsnHrj-QFB82PAAAAEk"]
[Thu Nov 27 00:01:18.924962 2025] [:error] [pid 6471:tid 6497] [client 193.37.32.92:45671] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aSckTuh3Z9TZLlRuTiPStwAAAJc"]
[Thu Nov 27 00:01:19.114583 2025] [:error] [pid 45683:tid 45711] [client 193.37.32.73:56761] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/log.php"] [unique_id "aSckTxX1gQgNFW_222roYwAAAVc"]
[Thu Nov 27 00:01:19.317870 2025] [:error] [pid 46443:tid 46452] [client 193.37.32.103:33291] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aSckT8LmDsnHrj-QFB82PgAAAEc"]
[Thu Nov 27 00:01:19.507826 2025] [:error] [pid 45683:tid 45704] [client 193.37.32.87:59521] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSckTxX1gQgNFW_222roZAAAAVA"]
[Thu Nov 27 00:01:19.741354 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.99:23961] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aSckT_g5LMxwI4-PD1e7LwAAABc"]
[Thu Nov 27 00:01:19.927635 2025] [:error] [pid 45769:tid 45796] [client 193.37.32.76:27699] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aSckT1dG5Eht9c3yy4NaawAAAdg"]
[Thu Nov 27 00:01:20.129831 2025] [:error] [pid 46443:tid 46450] [client 193.37.32.58:44023] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/an.php"] [unique_id "aSckUMLmDsnHrj-QFB82PwAAAEU"]
[Thu Nov 27 00:01:20.385147 2025] [:error] [pid 45683:tid 45698] [client 193.37.32.85:64625] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aSckUBX1gQgNFW_222roZQAAAUo"]
[Thu Nov 27 00:01:20.566013 2025] [:error] [pid 45769:tid 45774] [client 193.37.32.71:37777] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/a.php"] [unique_id "aSckUFdG5Eht9c3yy4NabAAAAcI"]
[Thu Nov 27 00:01:20.773896 2025] [:error] [pid 45685:tid 45750] [client 193.37.32.99:56459] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aSckUFj3f_NRdgU0DQ4ROQAAAQg"]
[Thu Nov 27 00:01:20.958620 2025] [:error] [pid 45684:tid 45729] [client 193.37.32.97:42379] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aSckUPg5LMxwI4-PD1e7NAAAAA4"]
[Thu Nov 27 00:01:21.168358 2025] [:error] [pid 45684:tid 45719] [client 193.37.32.89:41375] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aSckUfg5LMxwI4-PD1e7NgAAAAQ"]
[Thu Nov 27 00:01:21.367942 2025] [:error] [pid 45683:tid 45699] [client 193.37.32.101:35663] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aSckURX1gQgNFW_222roZgAAAUs"]
[Thu Nov 27 00:01:21.554839 2025] [:error] [pid 6471:tid 6476] [client 193.37.32.57:38939] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/license.php"] [unique_id "aSckUeh3Z9TZLlRuTiPSuwAAAII"]
[Thu Nov 27 00:01:21.773814 2025] [:error] [pid 45683:tid 45702] [client 193.37.32.61:48939] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/archives/"] [unique_id "aSckURX1gQgNFW_222roZwAAAU4"]
[Thu Nov 27 00:01:21.982543 2025] [:error] [pid 45684:tid 45723] [client 193.37.32.105:45829] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/"] [unique_id "aSckUfg5LMxwI4-PD1e7NwAAAAg"]
[Thu Nov 27 00:01:22.200477 2025] [:error] [pid 45684:tid 45734] [client 193.37.32.77:20473] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/byp.php"] [unique_id "aSckUvg5LMxwI4-PD1e7OAAAABM"]
[Thu Nov 27 00:01:22.420319 2025] [:error] [pid 20733:tid 20751] [client 193.37.32.55:56813] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content.php"] [unique_id "aSckUgV9EP2HuRvnH8eOFwAAANA"]
[Thu Nov 27 00:01:22.672411 2025] [:error] [pid 45769:tid 45791] [client 193.37.32.69:41427] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSckUldG5Eht9c3yy4NabwAAAdM"]
[Thu Nov 27 00:01:22.851312 2025] [:error] [pid 46443:tid 46462] [client 193.37.32.89:37453] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSckUsLmDsnHrj-QFB82QAAAAFE"]
[Thu Nov 27 00:01:23.032412 2025] [:error] [pid 20733:tid 20759] [client 193.37.32.93:43065] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/mah.php"] [unique_id "aSckUwV9EP2HuRvnH8eOGAAAANg"]
[Thu Nov 27 00:01:23.243851 2025] [:error] [pid 20733:tid 20736] [client 193.37.32.99:60679] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-signup.php"] [unique_id "aSckUwV9EP2HuRvnH8eOGQAAAME"]
[Thu Nov 27 00:01:23.455199 2025] [:error] [pid 20733:tid 20754] [client 193.37.32.97:53335] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aSckUwV9EP2HuRvnH8eOGgAAANM"]
[Thu Nov 27 00:01:23.662703 2025] [:error] [pid 45685:tid 45754] [client 193.37.32.85:44155] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aSckU1j3f_NRdgU0DQ4ROgAAAQw"]
[Thu Nov 27 00:01:23.867968 2025] [:error] [pid 45685:tid 45749] [client 193.37.32.98:56913] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aSckU1j3f_NRdgU0DQ4ROwAAAQc"]
[Thu Nov 27 00:01:24.068589 2025] [:error] [pid 45683:tid 45691] [client 193.37.32.69:53529] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/m.php"] [unique_id "aSckVBX1gQgNFW_222roaQAAAUM"]
[Thu Nov 27 00:01:24.273955 2025] [:error] [pid 46443:tid 46463] [client 193.37.32.66:41951] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aSckVMLmDsnHrj-QFB82QwAAAFI"]
[Thu Nov 27 00:01:24.472149 2025] [:error] [pid 45685:tid 45751] [client 193.37.32.103:47387] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/s.php"] [unique_id "aSckVFj3f_NRdgU0DQ4RPAAAAQk"]
[Thu Nov 27 00:01:24.657541 2025] [:error] [pid 45769:tid 45783] [client 193.37.32.76:40953] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/f.php"] [unique_id "aSckVFdG5Eht9c3yy4NacAAAAcs"]
[Thu Nov 27 00:01:24.877321 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.97:53569] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSckVPg5LMxwI4-PD1e7PgAAABQ"]
[Thu Nov 27 00:01:25.074304 2025] [:error] [pid 45769:tid 45782] [client 193.37.32.105:61255] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/"] [unique_id "aSckVVdG5Eht9c3yy4NacQAAAco"]
[Thu Nov 27 00:01:25.259664 2025] [:error] [pid 20733:tid 20744] [client 193.37.32.63:61873] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/manager.php"] [unique_id "aSckVQV9EP2HuRvnH8eOGwAAAMk"]
[Thu Nov 27 00:01:25.445599 2025] [:error] [pid 46443:tid 46459] [client 193.37.32.90:48111] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/shell3.php"] [unique_id "aSckVcLmDsnHrj-QFB82RAAAAE4"]
[Thu Nov 27 00:01:25.641637 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.57:47521] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aSckVRX1gQgNFW_222roagAAAUE"]
[Thu Nov 27 00:01:25.844764 2025] [:error] [pid 45769:tid 45788] [client 193.37.32.96:43985] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/themes/"] [unique_id "aSckVVdG5Eht9c3yy4NacgAAAdA"]
[Thu Nov 27 00:01:26.039365 2025] [:error] [pid 20733:tid 20743] [client 193.37.32.104:42245] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aSckVgV9EP2HuRvnH8eOHQAAAMg"]
[Thu Nov 27 00:01:26.251863 2025] [:error] [pid 6471:tid 6495] [client 193.37.32.71:48583] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aSckVuh3Z9TZLlRuTiPSvQAAAJU"]
[Thu Nov 27 00:01:26.437002 2025] [:error] [pid 45683:tid 45709] [client 193.37.32.91:41309] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aSckVhX1gQgNFW_222roawAAAVU"]
[Thu Nov 27 00:01:26.659024 2025] [:error] [pid 20733:tid 20758] [client 193.37.32.82:45559] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aSckVgV9EP2HuRvnH8eOHgAAANc"]
[Thu Nov 27 00:01:26.854613 2025] [:error] [pid 45684:tid 45720] [client 193.37.32.64:27637] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aSckVvg5LMxwI4-PD1e7QwAAAAU"]
[Thu Nov 27 00:01:27.043014 2025] [:error] [pid 45683:tid 45711] [client 193.37.32.79:43057] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aSckVxX1gQgNFW_222robgAAAVc"]
[Thu Nov 27 00:01:27.228451 2025] [:error] [pid 6471:tid 6493] [client 193.37.32.99:58011] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/bk/"] [unique_id "aSckV-h3Z9TZLlRuTiPSwAAAAJM"]
[Thu Nov 27 00:01:27.410782 2025] [:error] [pid 20733:tid 20746] [client 193.37.32.80:63067] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSckVwV9EP2HuRvnH8eOHwAAAMs"]
[Thu Nov 27 00:01:27.636649 2025] [:error] [pid 45685:tid 45759] [client 193.37.32.104:42767] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSckV1j3f_NRdgU0DQ4RPgAAARE"]
[Thu Nov 27 00:01:27.837004 2025] [:error] [pid 45684:tid 45732] [client 193.37.32.103:51917] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/packed.php"] [unique_id "aSckV_g5LMxwI4-PD1e7RgAAABE"]
[Thu Nov 27 00:01:28.140060 2025] [:error] [pid 45769:tid 45785] [client 193.37.32.82:30345] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/x.php"] [unique_id "aSckWFdG5Eht9c3yy4NacwAAAc0"]
[Thu Nov 27 00:01:28.328988 2025] [:error] [pid 45769:tid 45778] [client 193.37.32.54:46059] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aSckWFdG5Eht9c3yy4NadAAAAcY"]
[Thu Nov 27 00:01:28.811179 2025] [:error] [pid 6471:tid 6489] [client 193.37.32.78:64267] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aSckWOh3Z9TZLlRuTiPSxgAAAI8"]
[Thu Nov 27 00:01:29.040716 2025] [:error] [pid 45769:tid 45796] [client 193.37.32.95:34149] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aSckWVdG5Eht9c3yy4NadQAAAdg"]
[Thu Nov 27 00:01:29.250467 2025] [:error] [pid 20733:tid 20755] [client 193.37.32.75:23329] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSckWQV9EP2HuRvnH8eOIgAAANQ"]
[Thu Nov 27 00:01:29.439286 2025] [:error] [pid 45683:tid 45699] [client 193.37.32.105:63953] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSckWRX1gQgNFW_222rocwAAAUs"]
[Thu Nov 27 00:01:29.683452 2025] [:error] [pid 20733:tid 20745] [client 193.37.32.83:38853] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/chosen/function.php"] [unique_id "aSckWQV9EP2HuRvnH8eOIwAAAMo"]
[Thu Nov 27 00:01:29.867518 2025] [:error] [pid 46443:tid 46451] [client 193.37.32.59:22351] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "aSckWcLmDsnHrj-QFB82TAAAAEY"]
[Thu Nov 27 00:01:30.048960 2025] [:error] [pid 45685:tid 45756] [client 193.37.32.96:43031] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aSckWlj3f_NRdgU0DQ4RPwAAAQ4"]
[Thu Nov 27 00:01:30.237749 2025] [:error] [pid 45684:tid 45727] [client 193.37.32.59:43621] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aSckWvg5LMxwI4-PD1e7TQAAAAw"]
[Thu Nov 27 00:01:30.418939 2025] [:error] [pid 45684:tid 45717] [client 193.37.32.66:56549] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aSckWvg5LMxwI4-PD1e7TgAAAAI"]
[Thu Nov 27 00:01:35.605018 2025] [:error] [pid 45685:tid 45748] [client 193.37.32.76:42083] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/radio.php"] [unique_id "aSckX1j3f_NRdgU0DQ4RRQAAAQY"]
[Thu Nov 27 00:01:35.780740 2025] [:error] [pid 6471:tid 6498] [client 193.37.32.88:21665] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/"] [unique_id "aSckX-h3Z9TZLlRuTiPSyQAAAJg"]
[Thu Nov 27 00:01:35.959234 2025] [:error] [pid 45683:tid 45695] [client 193.37.32.67:44255] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/options.php"] [unique_id "aSckXxX1gQgNFW_222rodQAAAUc"]
[Thu Nov 27 00:01:36.137966 2025] [:error] [pid 20733:tid 20750] [client 193.37.32.82:23483] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-files.php"] [unique_id "aSckYAV9EP2HuRvnH8eOKAAAAM8"]
[Thu Nov 27 00:01:38.129785 2025] [:error] [pid 45684:tid 45727] [client 193.37.32.59:34645] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSckYvg5LMxwI4-PD1e7UgAAAAw"]
[Thu Nov 27 00:01:38.312602 2025] [:error] [pid 20733:tid 20742] [client 193.37.32.55:21021] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aSckYgV9EP2HuRvnH8eOKgAAAMc"]
[Thu Nov 27 00:01:38.507295 2025] [:error] [pid 6471:tid 6496] [client 193.37.32.63:54299] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aSckYuh3Z9TZLlRuTiPSzAAAAJY"]
[Thu Nov 27 00:01:38.718261 2025] [:error] [pid 45684:tid 45717] [client 193.37.32.86:29633] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/mini.php"] [unique_id "aSckYvg5LMxwI4-PD1e7UwAAAAI"]
[Thu Nov 27 00:01:38.908122 2025] [:error] [pid 45685:tid 45760] [client 193.37.32.58:50279] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSckYlj3f_NRdgU0DQ4RSQAAARI"]
[Thu Nov 27 00:01:39.147641 2025] [:error] [pid 45769:tid 45793] [client 193.37.32.93:27937] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aSckY1dG5Eht9c3yy4NapAAAAdU"]
[Thu Nov 27 00:01:39.376398 2025] [:error] [pid 45769:tid 45781] [client 193.37.32.71:58129] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSckY1dG5Eht9c3yy4NapgAAAck"]
[Thu Nov 27 00:01:39.574048 2025] [:error] [pid 20733:tid 20755] [client 193.37.32.100:28267] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSckYwV9EP2HuRvnH8eOLwAAANQ"]
[Thu Nov 27 00:01:39.760189 2025] [:error] [pid 45683:tid 45710] [client 193.37.32.95:46259] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSckYxX1gQgNFW_222rofAAAAVY"]
[Thu Nov 27 00:01:39.955026 2025] [:error] [pid 46443:tid 46457] [client 193.37.32.92:33393] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-login.php"] [unique_id "aSckY8LmDsnHrj-QFB82XAAAAEw"]
[Thu Nov 27 00:01:40.151802 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.83:64521] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/components/"] [unique_id "aSckZOh3Z9TZLlRuTiPSzQAAAI0"]
[Thu Nov 27 00:01:41.741017 2025] [:error] [pid 20733:tid 20752] [client 193.37.32.61:44843] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/function.php"] [unique_id "aSckZQV9EP2HuRvnH8eOMwAAANE"]
[Thu Nov 27 00:01:41.929312 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.86:29803] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ty.php"] [unique_id "aSckZfg5LMxwI4-PD1e7VwAAABQ"]
[Thu Nov 27 00:01:42.155176 2025] [:error] [pid 45684:tid 45725] [client 193.37.32.62:47403] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-header.php"] [unique_id "aSckZvg5LMxwI4-PD1e7WQAAAAo"]
[Thu Nov 27 00:01:42.334289 2025] [:error] [pid 45684:tid 45718] [client 193.37.32.71:45779] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/index2.php"] [unique_id "aSckZvg5LMxwI4-PD1e7WgAAAAM"]
[Thu Nov 27 00:01:42.513265 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.59:50635] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSckZvg5LMxwI4-PD1e7WwAAABU"]
[Thu Nov 27 00:01:42.696259 2025] [:error] [pid 45683:tid 45698] [client 193.37.32.73:39001] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aSckZhX1gQgNFW_222rofQAAAUo"]
[Thu Nov 27 00:01:42.941964 2025] [:error] [pid 46443:tid 46461] [client 193.37.32.90:36143] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/db.php"] [unique_id "aSckZsLmDsnHrj-QFB82XQAAAFA"]
[Thu Nov 27 00:01:43.127315 2025] [:error] [pid 6471:tid 6488] [client 193.37.32.65:26447] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aSckZ-h3Z9TZLlRuTiPSzgAAAI4"]
[Thu Nov 27 00:01:43.316682 2025] [:error] [pid 45685:tid 45744] [client 193.37.32.69:28219] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aSckZ1j3f_NRdgU0DQ4RTQAAAQI"]
[Thu Nov 27 00:01:43.503352 2025] [:error] [pid 45684:tid 45739] [client 193.37.32.59:26099] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aSckZ_g5LMxwI4-PD1e7XgAAABg"]
[Thu Nov 27 00:01:43.689331 2025] [:error] [pid 6471:tid 6492] [client 193.37.32.85:41803] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aSckZ-h3Z9TZLlRuTiPS0AAAAJI"]
[Thu Nov 27 00:01:44.018372 2025] [:error] [pid 20733:tid 20735] [client 193.37.32.62:50351] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aSckaAV9EP2HuRvnH8eONQAAAMA"]
[Thu Nov 27 00:01:44.232991 2025] [:error] [pid 20733:tid 20739] [client 193.37.32.59:39535] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aSckaAV9EP2HuRvnH8eONwAAAMQ"]
[Thu Nov 27 00:01:44.424050 2025] [:error] [pid 46443:tid 46446] [client 193.37.32.58:42299] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSckaMLmDsnHrj-QFB82YAAAAEE"]
[Thu Nov 27 00:01:44.621401 2025] [:error] [pid 45684:tid 45727] [client 193.37.32.102:60377] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aSckaPg5LMxwI4-PD1e7XwAAAAw"]
[Thu Nov 27 00:01:44.838769 2025] [:error] [pid 46443:tid 46454] [client 193.37.32.77:48597] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/chosen.php"] [unique_id "aSckaMLmDsnHrj-QFB82YQAAAEk"]
[Thu Nov 27 00:01:45.019223 2025] [:error] [pid 46443:tid 46447] [client 193.37.32.79:47579] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/"] [unique_id "aSckacLmDsnHrj-QFB82YgAAAEI"]
[Thu Nov 27 00:01:45.203063 2025] [:error] [pid 45684:tid 45716] [client 193.37.32.67:45181] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aSckafg5LMxwI4-PD1e7YgAAAAE"]
[Thu Nov 27 00:01:45.385451 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.63:32115] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSckafg5LMxwI4-PD1e7YwAAABQ"]
[Thu Nov 27 00:01:45.597378 2025] [:error] [pid 45684:tid 45732] [client 193.37.32.65:49875] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/html-api/"] [unique_id "aSckafg5LMxwI4-PD1e7ZQAAABE"]
[Thu Nov 27 00:01:45.798700 2025] [:error] [pid 46443:tid 46450] [client 193.37.32.104:49505] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/product.php"] [unique_id "aSckacLmDsnHrj-QFB82ZAAAAEU"]
[Thu Nov 27 00:01:45.983717 2025] [:error] [pid 45685:tid 45743] [client 193.37.32.69:39955] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aSckaVj3f_NRdgU0DQ4RWQAAAQE"]
[Thu Nov 27 00:01:46.195887 2025] [:error] [pid 45685:tid 45752] [client 193.37.32.95:38447] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aSckalj3f_NRdgU0DQ4RWgAAAQo"]
[Thu Nov 27 00:01:46.376742 2025] [:error] [pid 45769:tid 45781] [client 193.37.32.58:35709] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/options.php"] [unique_id "aSckaldG5Eht9c3yy4NaqQAAAck"]
[Thu Nov 27 00:01:46.561934 2025] [:error] [pid 45684:tid 45734] [client 193.37.32.102:60393] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/about/function.php"] [unique_id "aSckavg5LMxwI4-PD1e7ZwAAABM"]
[Thu Nov 27 00:01:46.748561 2025] [:error] [pid 6471:tid 6484] [client 193.37.32.66:50177] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/bypass.php"] [unique_id "aSckauh3Z9TZLlRuTiPS0gAAAIo"]
[Thu Nov 27 00:01:46.949906 2025] [:error] [pid 45684:tid 45730] [client 193.37.32.92:37207] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aSckavg5LMxwI4-PD1e7aAAAAA8"]
[Thu Nov 27 00:01:47.135160 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.85:65081] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aScka_g5LMxwI4-PD1e7aQAAABU"]
[Thu Nov 27 00:01:47.319860 2025] [:error] [pid 45684:tid 45739] [client 193.37.32.83:59327] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/error.php"] [unique_id "aScka_g5LMxwI4-PD1e7agAAABg"]
[Thu Nov 27 00:01:47.499838 2025] [:error] [pid 46443:tid 46458] [client 193.37.32.67:44071] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aScka8LmDsnHrj-QFB82ZQAAAE0"]
[Thu Nov 27 00:01:47.678431 2025] [:error] [pid 46443:tid 46466] [client 193.37.32.72:65303] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aScka8LmDsnHrj-QFB82ZgAAAFU"]
[Thu Nov 27 00:01:47.867704 2025] [:error] [pid 20733:tid 20757] [client 193.37.32.67:30053] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aSckawV9EP2HuRvnH8eOPQAAANY"]
[Thu Nov 27 00:01:48.046664 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.77:24981] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aSckbPg5LMxwI4-PD1e7awAAABc"]
[Thu Nov 27 00:01:48.242859 2025] [:error] [pid 45769:tid 45774] [client 193.37.32.96:39125] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/"] [unique_id "aSckbFdG5Eht9c3yy4NaqwAAAcI"]
[Thu Nov 27 00:01:48.425010 2025] [:error] [pid 45684:tid 45731] [client 193.37.32.91:54117] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aSckbPg5LMxwI4-PD1e7bAAAABA"]
[Thu Nov 27 00:01:53.619633 2025] [:error] [pid 46443:tid 46461] [client 193.37.32.88:58895] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aSckccLmDsnHrj-QFB82aAAAAFA"]
[Thu Nov 27 00:01:53.802808 2025] [:error] [pid 46443:tid 46459] [client 193.37.32.96:53821] [client 193.37.32.96] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aSckccLmDsnHrj-QFB82agAAAE4"]
[Thu Nov 27 00:01:53.996408 2025] [:error] [pid 46443:tid 46449] [client 193.37.32.72:26543] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/lock360.php"] [unique_id "aSckccLmDsnHrj-QFB82awAAAEQ"]
[Thu Nov 27 00:01:54.220330 2025] [:error] [pid 46443:tid 46454] [client 193.37.32.73:52709] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aSckcsLmDsnHrj-QFB82bQAAAEk"]
[Thu Nov 27 00:01:54.405789 2025] [:error] [pid 45683:tid 45705] [client 193.37.32.63:22749] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/post.php"] [unique_id "aSckchX1gQgNFW_222rohAAAAVE"]
[Thu Nov 27 00:01:54.590568 2025] [:error] [pid 45683:tid 45690] [client 193.37.32.85:46173] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/"] [unique_id "aSckchX1gQgNFW_222rohQAAAUI"]
[Thu Nov 27 00:01:54.773166 2025] [:error] [pid 45683:tid 45707] [client 193.37.32.76:26959] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/option-old.php"] [unique_id "aSckchX1gQgNFW_222rohgAAAVM"]
[Thu Nov 27 00:01:54.958087 2025] [:error] [pid 45769:tid 45789] [client 193.37.32.87:42947] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/2.php"] [unique_id "aSckcldG5Eht9c3yy4NargAAAdE"]
[Thu Nov 27 00:01:55.142716 2025] [:error] [pid 45769:tid 45777] [client 193.37.32.56:39055] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/xx.php"] [unique_id "aSckc1dG5Eht9c3yy4NarwAAAcU"]
[Thu Nov 27 00:01:55.371018 2025] [:error] [pid 45683:tid 45699] [client 193.37.32.100:59921] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aSckcxX1gQgNFW_222roiAAAAUs"]
[Thu Nov 27 00:01:55.562843 2025] [:error] [pid 45769:tid 45776] [client 193.37.32.80:41179] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aSckc1dG5Eht9c3yy4NasAAAAcQ"]
[Thu Nov 27 00:01:55.744125 2025] [:error] [pid 45769:tid 45778] [client 193.37.32.92:42241] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/woh.php"] [unique_id "aSckc1dG5Eht9c3yy4NasQAAAcY"]
[Thu Nov 27 00:01:55.933132 2025] [:error] [pid 45683:tid 45712] [client 193.37.32.80:27795] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/navigation/"] [unique_id "aSckcxX1gQgNFW_222roigAAAVg"]
[Thu Nov 27 00:01:56.136695 2025] [:error] [pid 45769:tid 45782] [client 193.37.32.88:29815] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/click.php"] [unique_id "aSckdFdG5Eht9c3yy4NasgAAAco"]
[Thu Nov 27 00:01:56.320041 2025] [:error] [pid 45769:tid 45793] [client 193.37.32.73:45873] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/shelp.php"] [unique_id "aSckdFdG5Eht9c3yy4NaswAAAdU"]
[Thu Nov 27 00:01:56.520658 2025] [:error] [pid 45683:tid 45694] [client 193.37.32.89:21199] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSckdBX1gQgNFW_222roiwAAAUY"]
[Thu Nov 27 00:01:56.738913 2025] [:error] [pid 45769:tid 45787] [client 193.37.32.82:63525] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSckdFdG5Eht9c3yy4NatQAAAc8"]
[Thu Nov 27 00:01:56.927732 2025] [:error] [pid 45683:tid 45695] [client 193.37.32.62:24181] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSckdBX1gQgNFW_222rojAAAAUc"]
[Thu Nov 27 00:01:57.124171 2025] [:error] [pid 45769:tid 45772] [client 193.37.32.65:64833] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aSckdVdG5Eht9c3yy4NatgAAAcA"]
[Thu Nov 27 00:01:57.307737 2025] [:error] [pid 45685:tid 45762] [client 193.37.32.55:27893] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/config.php"] [unique_id "aSckdVj3f_NRdgU0DQ4RXAAAARQ"]
[Thu Nov 27 00:01:57.498670 2025] [:error] [pid 46443:tid 46448] [client 193.37.32.94:58699] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aSckdcLmDsnHrj-QFB82bwAAAEM"]
[Thu Nov 27 00:01:57.683276 2025] [:error] [pid 46443:tid 46450] [client 193.37.32.56:34101] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aSckdcLmDsnHrj-QFB82cAAAAEU"]
[Thu Nov 27 00:01:57.861177 2025] [:error] [pid 46443:tid 46462] [client 193.37.32.63:45831] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/chosen.php"] [unique_id "aSckdcLmDsnHrj-QFB82cQAAAFE"]
[Thu Nov 27 00:01:58.130301 2025] [:error] [pid 46443:tid 46457] [client 193.37.32.75:23361] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-cron-backup.php"] [unique_id "aSckdsLmDsnHrj-QFB82cgAAAEw"]
[Thu Nov 27 00:01:58.315010 2025] [:error] [pid 46443:tid 46465] [client 193.37.32.77:33249] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aSckdsLmDsnHrj-QFB82cwAAAFQ"]
[Thu Nov 27 00:01:58.508450 2025] [:error] [pid 46443:tid 46461] [client 193.37.32.58:57915] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSckdsLmDsnHrj-QFB82dQAAAFA"]
[Thu Nov 27 00:01:58.695492 2025] [:error] [pid 45685:tid 45746] [client 193.37.32.84:45237] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSckdlj3f_NRdgU0DQ4RXgAAAQQ"]
[Thu Nov 27 00:01:58.945885 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.67:40383] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "aSckdvg5LMxwI4-PD1e7bwAAABQ"]
[Thu Nov 27 00:01:59.306585 2025] [:error] [pid 45769:tid 45774] [client 193.37.32.65:61339] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aSckd1dG5Eht9c3yy4NatwAAAcI"]
[Thu Nov 27 00:01:59.487504 2025] [:error] [pid 45684:tid 45719] [client 193.37.32.87:36149] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aSckd_g5LMxwI4-PD1e7cAAAAAQ"]
[Thu Nov 27 00:01:59.666125 2025] [:error] [pid 45684:tid 45726] [client 193.37.32.84:53165] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/wp-content.php"] [unique_id "aSckd_g5LMxwI4-PD1e7cQAAAAs"]
[Thu Nov 27 00:01:59.862499 2025] [:error] [pid 45685:tid 45754] [client 193.37.32.99:50253] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/cc.php"] [unique_id "aSckd1j3f_NRdgU0DQ4RXwAAAQw"]
[Thu Nov 27 00:02:00.051743 2025] [:error] [pid 45685:tid 45755] [client 193.37.32.91:30363] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/cong.php"] [unique_id "aSckeFj3f_NRdgU0DQ4RYAAAAQ0"]
[Thu Nov 27 00:02:00.284768 2025] [:error] [pid 45685:tid 45743] [client 193.37.32.88:26035] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/menu.php"] [unique_id "aSckeFj3f_NRdgU0DQ4RYQAAAQE"]
[Thu Nov 27 00:02:00.465163 2025] [:error] [pid 45685:tid 45751] [client 193.37.32.102:37879] [client 193.37.32.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aSckeFj3f_NRdgU0DQ4RYgAAAQk"]
[Thu Nov 27 00:02:00.654896 2025] [:error] [pid 45769:tid 45791] [client 193.37.32.76:63335] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aSckeFdG5Eht9c3yy4NauQAAAdM"]
[Thu Nov 27 00:02:00.940597 2025] [:error] [pid 45685:tid 45765] [client 193.37.32.91:63989] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aSckeFj3f_NRdgU0DQ4RYwAAARc"]
[Thu Nov 27 00:02:01.127693 2025] [:error] [pid 45683:tid 45697] [client 193.37.32.75:20317] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aSckeRX1gQgNFW_222rojQAAAUk"]
[Thu Nov 27 00:02:01.312156 2025] [:error] [pid 45683:tid 45708] [client 193.37.32.56:46509] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aSckeRX1gQgNFW_222rojgAAAVQ"]
[Thu Nov 27 00:02:01.499226 2025] [:error] [pid 46443:tid 46460] [client 193.37.32.92:38271] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/b.php"] [unique_id "aSckecLmDsnHrj-QFB82dwAAAE8"]
[Thu Nov 27 00:02:01.698015 2025] [:error] [pid 45684:tid 45730] [client 193.37.32.60:35049] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/contact.php"] [unique_id "aSckefg5LMxwI4-PD1e7cwAAAA8"]
[Thu Nov 27 00:02:01.938002 2025] [:error] [pid 45684:tid 45725] [client 193.37.32.75:39251] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/column/"] [unique_id "aSckefg5LMxwI4-PD1e7dAAAAAo"]
[Thu Nov 27 00:02:02.130821 2025] [:error] [pid 45684:tid 45739] [client 193.37.32.61:35107] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aSckevg5LMxwI4-PD1e7dQAAABg"]
[Thu Nov 27 00:02:02.313608 2025] [:error] [pid 45684:tid 45738] [client 193.37.32.85:55709] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aSckevg5LMxwI4-PD1e7dgAAABc"]
[Thu Nov 27 00:02:02.500991 2025] [:error] [pid 20733:tid 20735] [client 193.37.32.101:42849] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aSckegV9EP2HuRvnH8eOQQAAAMA"]
[Thu Nov 27 00:02:02.725158 2025] [:error] [pid 46443:tid 46446] [client 193.37.32.101:20075] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aSckesLmDsnHrj-QFB82eQAAAEE"]
[Thu Nov 27 00:02:02.955497 2025] [:error] [pid 46443:tid 46447] [client 193.37.32.74:24557] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/search/"] [unique_id "aSckesLmDsnHrj-QFB82egAAAEI"]
[Thu Nov 27 00:02:03.156413 2025] [:error] [pid 46443:tid 46452] [client 193.37.32.99:23773] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/post-template/"] [unique_id "aScke8LmDsnHrj-QFB82fAAAAEc"]
[Thu Nov 27 00:02:03.343287 2025] [:error] [pid 6471:tid 6488] [client 193.37.32.104:22287] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aScke-h3Z9TZLlRuTiPS2wAAAI4"]
[Thu Nov 27 00:02:03.536842 2025] [:error] [pid 6471:tid 6480] [client 193.37.32.86:63675] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aScke-h3Z9TZLlRuTiPS3AAAAIY"]
[Thu Nov 27 00:02:03.720476 2025] [:error] [pid 20733:tid 20739] [client 193.37.32.89:22903] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aSckewV9EP2HuRvnH8eOQwAAAMQ"]
[Thu Nov 27 00:02:03.901893 2025] [:error] [pid 20733:tid 20743] [client 193.37.32.56:46745] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aSckewV9EP2HuRvnH8eORAAAAMg"]
[Thu Nov 27 00:02:04.091244 2025] [:error] [pid 46443:tid 46467] [client 193.37.32.81:49499] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aSckfMLmDsnHrj-QFB82fgAAAFY"]
[Thu Nov 27 00:02:04.294965 2025] [:error] [pid 46443:tid 46466] [client 193.37.32.63:55731] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ss.php"] [unique_id "aSckfMLmDsnHrj-QFB82fwAAAFU"]
[Thu Nov 27 00:02:04.477095 2025] [:error] [pid 45683:tid 45705] [client 193.37.32.97:50459] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aSckfBX1gQgNFW_222rokAAAAVE"]
[Thu Nov 27 00:02:04.666471 2025] [:error] [pid 20733:tid 20742] [client 193.37.32.81:22211] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aSckfAV9EP2HuRvnH8eORgAAAMc"]
[Thu Nov 27 00:02:04.878182 2025] [:error] [pid 45683:tid 45690] [client 193.37.32.88:38191] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aSckfBX1gQgNFW_222rokQAAAUI"]
[Thu Nov 27 00:02:05.078588 2025] [:error] [pid 45684:tid 45731] [client 193.37.32.80:34837] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/class.php"] [unique_id "aSckffg5LMxwI4-PD1e7eQAAABA"]
[Thu Nov 27 00:02:05.263316 2025] [:error] [pid 45769:tid 45789] [client 193.37.32.61:55801] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aSckfVdG5Eht9c3yy4NaugAAAdE"]
[Thu Nov 27 00:02:05.445241 2025] [:error] [pid 45685:tid 45759] [client 193.37.32.68:33633] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSckfVj3f_NRdgU0DQ4RZQAAARE"]
[Thu Nov 27 00:02:05.627075 2025] [:error] [pid 46443:tid 46465] [client 193.37.32.93:22653] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/update/function.php"] [unique_id "aSckfcLmDsnHrj-QFB82gQAAAFQ"]
[Thu Nov 27 00:02:05.823831 2025] [:error] [pid 46443:tid 46468] [client 193.37.32.83:62437] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aSckfcLmDsnHrj-QFB82ggAAAFc"]
[Thu Nov 27 00:02:11.020734 2025] [:error] [pid 46443:tid 46451] [client 193.37.32.58:23259] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-configs.php"] [unique_id "aSckg8LmDsnHrj-QFB82hwAAAEY"]
[Thu Nov 27 00:02:11.200141 2025] [:error] [pid 46443:tid 46464] [client 193.37.32.68:46639] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSckg8LmDsnHrj-QFB82iAAAAFM"]
[Thu Nov 27 00:02:11.381183 2025] [:error] [pid 20733:tid 20745] [client 193.37.32.75:34133] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/comments-pagination/"] [unique_id "aSckgwV9EP2HuRvnH8eOSgAAAMo"]
[Thu Nov 27 00:02:11.563592 2025] [:error] [pid 46443:tid 46448] [client 193.37.32.93:42605] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/public_html/404.php"] [unique_id "aSckg8LmDsnHrj-QFB82iQAAAEM"]
[Thu Nov 27 00:02:11.746819 2025] [:error] [pid 45685:tid 45764] [client 193.37.32.67:43079] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/database.php"] [unique_id "aSckg1j3f_NRdgU0DQ4RZgAAARY"]
[Thu Nov 27 00:02:11.926358 2025] [:error] [pid 46443:tid 46449] [client 193.37.32.71:57145] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wp-trackback.php"] [unique_id "aSckg8LmDsnHrj-QFB82iwAAAEQ"]
[Thu Nov 27 00:02:12.108877 2025] [:error] [pid 45683:tid 45701] [client 193.37.32.98:56751] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/elish.php"] [unique_id "aSckhBX1gQgNFW_222rolAAAAU0"]
[Thu Nov 27 00:02:12.294270 2025] [:error] [pid 6471:tid 6489] [client 193.37.32.65:59965] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/enum.php"] [unique_id "aSckhOh3Z9TZLlRuTiPS3QAAAI8"]
[Thu Nov 27 00:02:12.475507 2025] [:error] [pid 46443:tid 46466] [client 193.37.32.97:60609] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSckhMLmDsnHrj-QFB82jAAAAFU"]
[Thu Nov 27 00:02:12.653710 2025] [:error] [pid 46443:tid 46455] [client 193.37.32.85:55669] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aSckhMLmDsnHrj-QFB82jQAAAEo"]
[Thu Nov 27 00:02:12.964665 2025] [:error] [pid 45683:tid 45698] [client 193.37.32.64:61525] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/query/"] [unique_id "aSckhBX1gQgNFW_222rolQAAAUo"]
[Thu Nov 27 00:02:13.158314 2025] [:error] [pid 6471:tid 6484] [client 193.37.32.62:59929] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aSckheh3Z9TZLlRuTiPS3gAAAIo"]
[Thu Nov 27 00:02:13.344489 2025] [:error] [pid 45769:tid 45780] [client 193.37.32.100:64271] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/popularfx/template-parts/"] [unique_id "aSckhVdG5Eht9c3yy4NavQAAAcg"]
[Thu Nov 27 00:02:13.542207 2025] [:error] [pid 6471:tid 6490] [client 193.37.32.93:20495] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/about-cong.php"] [unique_id "aSckheh3Z9TZLlRuTiPS3wAAAJA"]
[Thu Nov 27 00:02:13.730342 2025] [:error] [pid 45769:tid 45792] [client 193.37.32.61:53003] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/development/"] [unique_id "aSckhVdG5Eht9c3yy4NavgAAAdQ"]
[Thu Nov 27 00:02:13.918438 2025] [:error] [pid 45769:tid 45779] [client 193.37.32.87:50885] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aSckhVdG5Eht9c3yy4NavwAAAcc"]
[Thu Nov 27 00:02:14.104658 2025] [:error] [pid 45769:tid 45784] [client 193.37.32.69:44949] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/ID3/wp.php"] [unique_id "aSckhldG5Eht9c3yy4NawAAAAcw"]
[Thu Nov 27 00:02:14.285050 2025] [:error] [pid 6471:tid 6477] [client 193.37.32.105:64217] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/wp-rocket-config/"] [unique_id "aSckhuh3Z9TZLlRuTiPS4AAAAIM"]
[Thu Nov 27 00:02:14.522065 2025] [:error] [pid 20733:tid 20754] [client 193.37.32.85:26107] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/list-reusable-blocks/"] [unique_id "aSckhgV9EP2HuRvnH8eOTAAAANM"]
[Thu Nov 27 00:02:14.716850 2025] [:error] [pid 45683:tid 45710] [client 193.37.32.99:39481] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aSckhhX1gQgNFW_222romAAAAVY"]
[Thu Nov 27 00:02:14.898220 2025] [:error] [pid 20733:tid 20744] [client 193.37.32.103:38023] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSckhgV9EP2HuRvnH8eOTQAAAMk"]
[Thu Nov 27 00:02:15.107514 2025] [:error] [pid 20733:tid 20739] [client 193.37.32.103:43823] [client 193.37.32.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aSckhwV9EP2HuRvnH8eOTwAAAMQ"]
[Thu Nov 27 00:02:15.295748 2025] [:error] [pid 45683:tid 45695] [client 193.37.32.81:30305] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSckhxX1gQgNFW_222romQAAAUc"]
[Thu Nov 27 00:02:15.501968 2025] [:error] [pid 45683:tid 45691] [client 193.37.32.56:49463] [client 193.37.32.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSckhxX1gQgNFW_222romgAAAUM"]
[Thu Nov 27 00:02:15.721419 2025] [:error] [pid 6471:tid 6475] [client 193.37.32.65:35991] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSckh-h3Z9TZLlRuTiPS4wAAAIE"]
[Thu Nov 27 00:02:15.926544 2025] [:error] [pid 45684:tid 45716] [client 193.37.32.105:59229] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aSckh_g5LMxwI4-PD1e7egAAAAE"]
[Thu Nov 27 00:02:16.108115 2025] [:error] [pid 20733:tid 20758] [client 193.37.32.104:44261] [client 193.37.32.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/images/autoload_classmap.php"] [unique_id "aSckiAV9EP2HuRvnH8eOUQAAANc"]
[Thu Nov 27 00:02:16.291970 2025] [:error] [pid 6471:tid 6496] [client 193.37.32.90:49519] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/sama.php"] [unique_id "aSckiOh3Z9TZLlRuTiPS5AAAAJY"]
[Thu Nov 27 00:02:17.874440 2025] [:error] [pid 46443:tid 46463] [client 193.37.32.61:23895] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aSckicLmDsnHrj-QFB82jwAAAFI"]
[Thu Nov 27 00:02:18.057145 2025] [:error] [pid 20733:tid 20746] [client 193.37.32.68:21031] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/utils/"] [unique_id "aSckigV9EP2HuRvnH8eOUgAAAMs"]
[Thu Nov 27 00:02:18.253160 2025] [:error] [pid 45685:tid 45745] [client 193.37.32.80:34359] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/gosmtp/"] [unique_id "aSckilj3f_NRdgU0DQ4RZwAAAQM"]
[Thu Nov 27 00:02:18.444957 2025] [:error] [pid 20733:tid 20740] [client 193.37.32.64:54051] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/thickbox/"] [unique_id "aSckigV9EP2HuRvnH8eOUwAAAMU"]
[Thu Nov 27 00:02:18.663538 2025] [:error] [pid 45683:tid 45705] [client 193.37.32.105:38193] [client 193.37.32.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aSckihX1gQgNFW_222ronAAAAVE"]
[Thu Nov 27 00:02:18.868265 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.97:46137] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aSckihX1gQgNFW_222ronQAAAUE"]
[Thu Nov 27 00:02:19.053784 2025] [:error] [pid 45683:tid 45711] [client 193.37.32.81:46859] [client 193.37.32.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aSckixX1gQgNFW_222rongAAAVc"]
[Thu Nov 27 00:02:19.235091 2025] [:error] [pid 45683:tid 45709] [client 193.37.32.77:42527] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSckixX1gQgNFW_222rooAAAAVU"]
[Thu Nov 27 00:02:19.434741 2025] [:error] [pid 20733:tid 20747] [client 193.37.32.71:26835] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSckiwV9EP2HuRvnH8eOVgAAAMw"]
[Thu Nov 27 00:02:19.650003 2025] [:error] [pid 20733:tid 20751] [client 193.37.32.73:43361] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aSckiwV9EP2HuRvnH8eOVwAAANA"]
[Thu Nov 27 00:02:19.848220 2025] [:error] [pid 45683:tid 45702] [client 193.37.32.80:35129] [client 193.37.32.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aSckixX1gQgNFW_222rooQAAAU4"]
[Thu Nov 27 00:02:20.045476 2025] [:error] [pid 6471:tid 6488] [client 193.37.32.91:55595] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aSckjOh3Z9TZLlRuTiPS6AAAAI4"]
[Thu Nov 27 00:02:20.237388 2025] [:error] [pid 46443:tid 46452] [client 193.37.32.73:36781] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/src/Transport/about.php"] [unique_id "aSckjMLmDsnHrj-QFB82kgAAAEc"]
[Thu Nov 27 00:02:20.425962 2025] [:error] [pid 46443:tid 46448] [client 193.37.32.84:59975] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aSckjMLmDsnHrj-QFB82kwAAAEM"]
[Thu Nov 27 00:02:20.617878 2025] [:error] [pid 20733:tid 20754] [client 193.37.32.94:38543] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aSckjAV9EP2HuRvnH8eOWAAAANM"]
[Thu Nov 27 00:02:20.815839 2025] [:error] [pid 45683:tid 45694] [client 193.37.32.69:48693] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aSckjBX1gQgNFW_222ropAAAAUY"]
[Thu Nov 27 00:02:21.005117 2025] [:error] [pid 45683:tid 45692] [client 193.37.32.93:38055] [client 193.37.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aSckjRX1gQgNFW_222ropQAAAUQ"]
[Thu Nov 27 00:02:21.195982 2025] [:error] [pid 45685:tid 45762] [client 193.37.32.97:52089] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aSckjVj3f_NRdgU0DQ4RaAAAARQ"]
[Thu Nov 27 00:02:21.383432 2025] [:error] [pid 20733:tid 20744] [client 193.37.32.76:31825] [client 193.37.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/script-modules/about.php"] [unique_id "aSckjQV9EP2HuRvnH8eOWQAAAMk"]
[Thu Nov 27 00:02:21.570210 2025] [:error] [pid 6471:tid 6497] [client 193.37.32.72:27021] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSckjeh3Z9TZLlRuTiPS6wAAAJc"]
[Thu Nov 27 00:02:21.750817 2025] [:error] [pid 45683:tid 45703] [client 193.37.32.67:40725] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aSckjRX1gQgNFW_222roqwAAAU8"]
[Thu Nov 27 00:02:21.943307 2025] [:error] [pid 45683:tid 45707] [client 193.37.32.73:53549] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aSckjRX1gQgNFW_222rorwAAAVM"]
[Thu Nov 27 00:02:22.139476 2025] [:error] [pid 46443:tid 46449] [client 193.37.32.69:28569] [client 193.37.32.69] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/newuser.php"] [unique_id "aSckjsLmDsnHrj-QFB82lQAAAEQ"]
[Thu Nov 27 00:02:22.323646 2025] [:error] [pid 45684:tid 45718] [client 193.37.32.87:46659] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/Exception/"] [unique_id "aSckjvg5LMxwI4-PD1e7fwAAAAM"]
[Thu Nov 27 00:02:22.509010 2025] [:error] [pid 46443:tid 46466] [client 193.37.32.63:55607] [client 193.37.32.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSckjsLmDsnHrj-QFB82lwAAAFU"]
[Thu Nov 27 00:02:22.699482 2025] [:error] [pid 45683:tid 45704] [client 193.37.32.55:36947] [client 193.37.32.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/ty.php"] [unique_id "aSckjhX1gQgNFW_222rotgAAAVA"]
[Thu Nov 27 00:02:22.896515 2025] [:error] [pid 45684:tid 45728] [client 193.37.32.60:28297] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aSckjvg5LMxwI4-PD1e7gwAAAA0"]
[Thu Nov 27 00:02:23.080774 2025] [:error] [pid 45769:tid 45781] [client 193.37.32.99:52883] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/post-date/"] [unique_id "aSckj1dG5Eht9c3yy4NawQAAAck"]
[Thu Nov 27 00:02:23.266896 2025] [:error] [pid 20733:tid 20738] [client 193.37.32.61:49857] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aSckjwV9EP2HuRvnH8eOXAAAAMM"]
[Thu Nov 27 00:02:23.462413 2025] [:error] [pid 45683:tid 45691] [client 193.37.32.79:54713] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aSckjxX1gQgNFW_222rovQAAAUM"]
[Thu Nov 27 00:02:23.657404 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.98:35381] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/images/chosen.php"] [unique_id "aSckjxX1gQgNFW_222rovwAAAUE"]
[Thu Nov 27 00:02:23.869810 2025] [:error] [pid 6471:tid 6493] [client 193.37.32.68:40317] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSckj-h3Z9TZLlRuTiPS-AAAAJM"]
[Thu Nov 27 00:02:24.060321 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.99:21519] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSckkOh3Z9TZLlRuTiPS-QAAAI0"]
[Thu Nov 27 00:02:24.246888 2025] [:error] [pid 45769:tid 45794] [client 193.37.32.92:52391] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentyfive/styles/blocks/"] [unique_id "aSckkFdG5Eht9c3yy4NawwAAAdY"]
[Thu Nov 27 00:02:24.428264 2025] [:error] [pid 45685:tid 45751] [client 193.37.32.100:60489] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentythree/assets/fonts/ibm-plex-mono/"] [unique_id "aSckkFj3f_NRdgU0DQ4RcgAAAQk"]
[Thu Nov 27 00:02:24.617397 2025] [:error] [pid 46443:tid 46455] [client 193.37.32.62:23473] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/src/Auth/admin.php"] [unique_id "aSckkMLmDsnHrj-QFB82mAAAAEo"]
[Thu Nov 27 00:02:24.806619 2025] [:error] [pid 6471:tid 6495] [client 193.37.32.91:54591] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/filester/assets/css/cc.php"] [unique_id "aSckkOh3Z9TZLlRuTiPS-gAAAJU"]
[Thu Nov 27 00:02:24.989886 2025] [:error] [pid 45769:tid 45790] [client 193.37.32.88:65163] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/modern/assets/images/"] [unique_id "aSckkFdG5Eht9c3yy4NaxQAAAdI"]
[Thu Nov 27 00:02:25.243393 2025] [:error] [pid 45684:tid 45724] [client 193.37.32.65:27443] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/modern/includes/setup/config-setup.php"] [unique_id "aSckkfg5LMxwI4-PD1e7hgAAAAk"]
[Thu Nov 27 00:02:25.439908 2025] [:error] [pid 46443:tid 46458] [client 193.37.32.57:20285] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/Requests/src/Utility/admin.php"] [unique_id "aSckkcLmDsnHrj-QFB82mgAAAE0"]
[Thu Nov 27 00:02:25.638936 2025] [:error] [pid 45683:tid 45690] [client 193.37.32.89:51133] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/wp-pridmag/22x.php"] [unique_id "aSckkRX1gQgNFW_222rowQAAAUI"]
[Thu Nov 27 00:02:25.833029 2025] [:error] [pid 46443:tid 46459] [client 193.37.32.65:21061] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/wolf.php"] [unique_id "aSckkcLmDsnHrj-QFB82mwAAAE4"]
[Thu Nov 27 00:02:26.014878 2025] [:error] [pid 45683:tid 45709] [client 193.37.32.54:37563] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/files/admin.php"] [unique_id "aSckkhX1gQgNFW_222rowgAAAVU"]
[Thu Nov 27 00:02:26.207983 2025] [:error] [pid 45685:tid 45765] [client 193.37.32.100:51325] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aSckklj3f_NRdgU0DQ4RcwAAARc"]
[Thu Nov 27 00:02:26.413969 2025] [:error] [pid 6471:tid 6491] [client 193.37.32.67:51881] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/plupload/"] [unique_id "aSckkuh3Z9TZLlRuTiPS-wAAAJE"]
[Thu Nov 27 00:02:26.607999 2025] [:error] [pid 45769:tid 45773] [client 193.37.32.79:39559] [client 193.37.32.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/1.php"] [unique_id "aSckkldG5Eht9c3yy4NaxgAAAcE"]
[Thu Nov 27 00:02:26.795879 2025] [:error] [pid 45769:tid 45789] [client 193.37.32.75:25565] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aSckkldG5Eht9c3yy4NaxwAAAdE"]
[Thu Nov 27 00:02:26.979792 2025] [:error] [pid 45769:tid 45777] [client 193.37.32.57:51967] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/languages/plugins/"] [unique_id "aSckkldG5Eht9c3yy4NayAAAAcU"]
[Thu Nov 27 00:02:27.181641 2025] [:error] [pid 6471:tid 6480] [client 193.37.32.84:31985] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/Mencintai.php"] [unique_id "aSckk-h3Z9TZLlRuTiPS_QAAAIY"]
[Thu Nov 27 00:02:27.371268 2025] [:error] [pid 46443:tid 46469] [client 193.37.32.89:36943] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/m.php"] [unique_id "aSckk8LmDsnHrj-QFB82nwAAAFg"]
[Thu Nov 27 00:02:27.568481 2025] [:error] [pid 46443:tid 46447] [client 193.37.32.100:60535] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/bbn.php"] [unique_id "aSckk8LmDsnHrj-QFB82oAAAAEI"]
[Thu Nov 27 00:02:27.758083 2025] [:error] [pid 45685:tid 45756] [client 193.37.32.67:56311] [client 193.37.32.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwenty/1.php"] [unique_id "aSckk1j3f_NRdgU0DQ4RdAAAAQ4"]
[Thu Nov 27 00:02:27.959382 2025] [:error] [pid 45685:tid 45744] [client 193.37.32.77:25535] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/easy-bootstrap-shortcode-pro/1.php"] [unique_id "aSckk1j3f_NRdgU0DQ4RdgAAAQI"]
[Thu Nov 27 00:02:28.138353 2025] [:error] [pid 6471:tid 6474] [client 193.37.32.99:54475] [client 193.37.32.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/really-simple-captcha/tmp/1.php"] [unique_id "aScklOh3Z9TZLlRuTiPS_gAAAIA"]
[Thu Nov 27 00:02:29.867568 2025] [:error] [pid 45684:tid 45722] [client 193.37.32.86:49413] [client 193.37.32.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aScklfg5LMxwI4-PD1e7iAAAAAc"]
[Thu Nov 27 00:02:30.071134 2025] [:error] [pid 45684:tid 45735] [client 193.37.32.75:55815] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aScklvg5LMxwI4-PD1e7iQAAABQ"]
[Thu Nov 27 00:02:30.253043 2025] [:error] [pid 46443:tid 46457] [client 193.37.32.98:49623] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/public/admin.php"] [unique_id "aScklsLmDsnHrj-QFB82oQAAAEw"]
[Thu Nov 27 00:02:30.432864 2025] [:error] [pid 46443:tid 46465] [client 193.37.32.61:49633] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/web/shell.php"] [unique_id "aScklsLmDsnHrj-QFB82ogAAAFQ"]
[Thu Nov 27 00:02:30.615991 2025] [:error] [pid 20733:tid 20742] [client 193.37.32.101:27761] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugin.php"] [unique_id "aScklgV9EP2HuRvnH8eOXgAAAMc"]
[Thu Nov 27 00:02:30.821458 2025] [:error] [pid 45685:tid 45753] [client 193.37.32.84:51103] [client 193.37.32.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wpai-woocommerce-add-on/models/import/about.php"] [unique_id "aSckllj3f_NRdgU0DQ4ReQAAAQs"]
[Thu Nov 27 00:02:31.017775 2025] [:error] [pid 46443:tid 46462] [client 193.37.32.100:40117] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/public_html/admin.php"] [unique_id "aSckl8LmDsnHrj-QFB82owAAAFE"]
[Thu Nov 27 00:02:31.229460 2025] [:error] [pid 45683:tid 45693] [client 193.37.32.58:53931] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aScklxX1gQgNFW_222roxQAAAUU"]
[Thu Nov 27 00:02:31.419428 2025] [:error] [pid 45685:tid 45747] [client 193.37.32.60:53111] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/Divi/et-pagebuilder/about.php"] [unique_id "aSckl1j3f_NRdgU0DQ4RegAAAQU"]
[Thu Nov 27 00:02:31.603332 2025] [:error] [pid 45684:tid 45718] [client 193.37.32.66:35581] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aSckl_g5LMxwI4-PD1e7jwAAAAM"]
[Thu Nov 27 00:02:31.782520 2025] [:error] [pid 45769:tid 45782] [client 193.37.32.71:47231] [client 193.37.32.71] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/img/portfolio/seton/about.php"] [unique_id "aSckl1dG5Eht9c3yy4NaywAAAco"]
[Thu Nov 27 00:02:31.978069 2025] [:error] [pid 45769:tid 45793] [client 193.37.32.77:58097] [client 193.37.32.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/img/portfolio/about.php"] [unique_id "aSckl1dG5Eht9c3yy4NazAAAAdU"]
[Thu Nov 27 00:02:32.166837 2025] [:error] [pid 45683:tid 45695] [client 193.37.32.74:58151] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/img/single/about.php"] [unique_id "aSckmBX1gQgNFW_222roxgAAAUc"]
[Thu Nov 27 00:02:32.353638 2025] [:error] [pid 45684:tid 45739] [client 193.37.32.60:33123] [client 193.37.32.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/img/full/admin.php"] [unique_id "aSckmPg5LMxwI4-PD1e7kgAAABg"]
[Thu Nov 27 00:02:32.590663 2025] [:error] [pid 45769:tid 45781] [client 193.37.32.75:57825] [client 193.37.32.75] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aSckmFdG5Eht9c3yy4NazQAAAck"]
[Thu Nov 27 00:02:32.788809 2025] [:error] [pid 20733:tid 20746] [client 193.37.32.64:60313] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-install.php"] [unique_id "aSckmAV9EP2HuRvnH8eOXwAAAMs"]
[Thu Nov 27 00:02:32.969158 2025] [:error] [pid 45684:tid 45727] [client 193.37.32.73:65241] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/405.php"] [unique_id "aSckmPg5LMxwI4-PD1e7lAAAAAw"]
[Thu Nov 27 00:02:33.152517 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.98:29713] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/sql.php"] [unique_id "aSckmeh3Z9TZLlRuTiPTJgAAAI0"]
[Thu Nov 27 00:02:33.334145 2025] [:error] [pid 45684:tid 45721] [client 193.37.32.73:64131] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/widgets/service.php"] [unique_id "aSckmfg5LMxwI4-PD1e7lQAAAAY"]
[Thu Nov 27 00:02:33.516800 2025] [:error] [pid 45684:tid 45715] [client 193.37.32.85:21493] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/widgets/nux.php"] [unique_id "aSckmfg5LMxwI4-PD1e7lgAAAAA"]
[Thu Nov 27 00:02:33.706130 2025] [:error] [pid 46443:tid 46445] [client 193.37.32.62:63273] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aSckmcLmDsnHrj-QFB82pQAAAEA"]
[Thu Nov 27 00:02:33.888906 2025] [:error] [pid 45684:tid 45733] [client 193.37.32.95:59983] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aSckmfg5LMxwI4-PD1e7mAAAABI"]
[Thu Nov 27 00:02:34.073495 2025] [:error] [pid 45684:tid 45720] [client 193.37.32.101:46807] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/sss.php"] [unique_id "aSckmvg5LMxwI4-PD1e7mQAAAAU"]
[Thu Nov 27 00:02:34.260320 2025] [:error] [pid 45769:tid 45774] [client 193.37.32.95:20969] [client 193.37.32.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aSckmldG5Eht9c3yy4NazgAAAcI"]
[Thu Nov 27 00:02:34.445415 2025] [:error] [pid 6471:tid 6477] [client 193.37.32.85:22405] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/js/buy.php"] [unique_id "aSckmuh3Z9TZLlRuTiPTKAAAAIM"]
[Thu Nov 27 00:02:34.656900 2025] [:error] [pid 45683:tid 45708] [client 193.37.32.85:64459] [client 193.37.32.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/edit.php"] [unique_id "aSckmhX1gQgNFW_222royQAAAVQ"]
[Thu Nov 27 00:02:34.877913 2025] [:error] [pid 46443:tid 46460] [client 193.37.32.97:32013] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aSckmsLmDsnHrj-QFB82pwAAAE8"]
[Thu Nov 27 00:02:35.057870 2025] [:error] [pid 20733:tid 20740] [client 193.37.32.54:65343] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/database.php"] [unique_id "aSckmwV9EP2HuRvnH8eOYAAAAMU"]
[Thu Nov 27 00:02:35.252650 2025] [:error] [pid 45685:tid 45743] [client 193.37.32.59:44141] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/obfuscate.php"] [unique_id "aSckm1j3f_NRdgU0DQ4RewAAAQE"]
[Thu Nov 27 00:02:35.431408 2025] [:error] [pid 45683:tid 45711] [client 193.37.32.88:29953] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/mabar88/inc/assets/images/lock.php"] [unique_id "aSckmxX1gQgNFW_222roygAAAVc"]
[Thu Nov 27 00:02:35.661019 2025] [:error] [pid 6471:tid 6474] [client 193.37.32.90:27483] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aSckm-h3Z9TZLlRuTiPTKgAAAIA"]
[Thu Nov 27 00:02:35.847329 2025] [:error] [pid 6471:tid 6496] [client 193.37.32.90:47901] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aSckm-h3Z9TZLlRuTiPTLAAAAJY"]
[Thu Nov 27 00:02:36.039088 2025] [:error] [pid 20733:tid 20747] [client 193.37.32.73:20385] [client 193.37.32.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aScknAV9EP2HuRvnH8eOYQAAAMw"]
[Thu Nov 27 00:02:36.221192 2025] [:error] [pid 20733:tid 20751] [client 193.37.32.87:54027] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aScknAV9EP2HuRvnH8eOYgAAANA"]
[Thu Nov 27 00:02:36.411478 2025] [:error] [pid 46443:tid 46469] [client 193.37.32.72:49229] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aScknMLmDsnHrj-QFB82qAAAAFg"]
[Thu Nov 27 00:02:36.610658 2025] [:error] [pid 45769:tid 45786] [client 193.37.32.92:55407] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aScknFdG5Eht9c3yy4NazwAAAc4"]
[Thu Nov 27 00:02:36.813499 2025] [:error] [pid 45769:tid 45791] [client 193.37.32.100:56505] [client 193.37.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/src/Decode/ahax.php"] [unique_id "aScknFdG5Eht9c3yy4Na0AAAAdM"]
[Thu Nov 27 00:02:37.003236 2025] [:error] [pid 20733:tid 20744] [client 193.37.32.97:36373] [client 193.37.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/assets/connects.php"] [unique_id "aScknQV9EP2HuRvnH8eOZAAAAMk"]
[Thu Nov 27 00:02:37.239090 2025] [:error] [pid 45685:tid 45752] [client 193.37.32.78:37139] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aScknVj3f_NRdgU0DQ4RfQAAAQo"]
[Thu Nov 27 00:02:37.428485 2025] [:error] [pid 46443:tid 46447] [client 193.37.32.61:45825] [client 193.37.32.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/network/css.php"] [unique_id "aSckncLmDsnHrj-QFB82qQAAAEI"]
[Thu Nov 27 00:02:37.627844 2025] [:error] [pid 45685:tid 45760] [client 193.37.32.89:30153] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-bindings/hexa.php"] [unique_id "aScknVj3f_NRdgU0DQ4RfgAAARI"]
[Thu Nov 27 00:02:37.847438 2025] [:error] [pid 45683:tid 45707] [client 193.37.32.82:29179] [client 193.37.32.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aScknRX1gQgNFW_222rozAAAAVM"]
[Thu Nov 27 00:02:38.055623 2025] [:error] [pid 45683:tid 45709] [client 193.37.32.87:40815] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aScknhX1gQgNFW_222rozQAAAVU"]
[Thu Nov 27 00:02:38.255335 2025] [:error] [pid 45683:tid 45706] [client 193.37.32.94:22897] [client 193.37.32.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aScknhX1gQgNFW_222rozgAAAVI"]
[Thu Nov 27 00:02:43.450204 2025] [:error] [pid 45683:tid 45688] [client 193.37.32.74:38525] [client 193.37.32.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aSckoxX1gQgNFW_222ro0QAAAUA"]
[Thu Nov 27 00:02:48.638486 2025] [:error] [pid 45685:tid 45754] [client 193.37.32.91:37483] [client 193.37.32.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aSckqFj3f_NRdgU0DQ4RhwAAAQw"]
[Thu Nov 27 00:02:48.822281 2025] [:error] [pid 45685:tid 45755] [client 193.37.32.87:53333] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aSckqFj3f_NRdgU0DQ4RiAAAAQ0"]
[Thu Nov 27 00:02:49.001692 2025] [:error] [pid 45769:tid 45792] [client 193.37.32.54:47537] [client 193.37.32.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aSckqVdG5Eht9c3yy4Na1QAAAdQ"]
[Thu Nov 27 00:02:49.185289 2025] [:error] [pid 45769:tid 45779] [client 193.37.32.62:35129] [client 193.37.32.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/checkout-for-woocommerce/templates/glass/about.php"] [unique_id "aSckqVdG5Eht9c3yy4Na1gAAAcc"]
[Thu Nov 27 00:02:49.446812 2025] [:error] [pid 45685:tid 45749] [client 193.37.32.58:55953] [client 193.37.32.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aSckqVj3f_NRdgU0DQ4RiQAAAQc"]
[Thu Nov 27 00:02:49.631608 2025] [:error] [pid 45685:tid 45742] [client 193.37.32.59:54559] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aSckqVj3f_NRdgU0DQ4RigAAAQA"]
[Thu Nov 27 00:02:49.814483 2025] [:error] [pid 45685:tid 45752] [client 193.37.32.87:28353] [client 193.37.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aSckqVj3f_NRdgU0DQ4RiwAAAQo"]
[Thu Nov 27 00:02:50.139199 2025] [:error] [pid 6471:tid 6489] [client 193.37.32.78:49371] [client 193.37.32.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aSckquh3Z9TZLlRuTiPTNgAAAI8"]
[Thu Nov 27 00:02:50.332287 2025] [:error] [pid 20733:tid 20740] [client 193.37.32.92:23115] [client 193.37.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aSckqgV9EP2HuRvnH8eObwAAAMU"]
[Thu Nov 27 00:02:50.533252 2025] [:error] [pid 6471:tid 6487] [client 193.37.32.59:35885] [client 193.37.32.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aSckquh3Z9TZLlRuTiPTNwAAAI0"]
[Thu Nov 27 00:02:50.741853 2025] [:error] [pid 45684:tid 45736] [client 193.37.32.98:49291] [client 193.37.32.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aSckqvg5LMxwI4-PD1e7oQAAABU"]
[Thu Nov 27 00:02:50.949965 2025] [:error] [pid 45769:tid 45784] [client 193.37.32.57:57719] [client 193.37.32.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aSckqldG5Eht9c3yy4Na1wAAAcw"]
[Thu Nov 27 00:02:51.144248 2025] [:error] [pid 45683:tid 45689] [client 193.37.32.90:21359] [client 193.37.32.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aSckqxX1gQgNFW_222ro1AAAAUE"]
[Thu Nov 27 00:02:51.327178 2025] [:error] [pid 45683:tid 45703] [client 193.37.32.66:54411] [client 193.37.32.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aSckqxX1gQgNFW_222ro1QAAAU8"]
[Thu Nov 27 00:02:51.544465 2025] [:error] [pid 20733:tid 20759] [client 193.37.32.65:51961] [client 193.37.32.65] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/miansha.php"] [unique_id "aSckqwV9EP2HuRvnH8eOcAAAANg"]
[Thu Nov 27 00:02:51.791851 2025] [:error] [pid 46443:tid 46458] [client 193.37.32.72:50679] [client 193.37.32.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/user.php"] [unique_id "aSckq8LmDsnHrj-QFB82sAAAAE0"]
[Thu Nov 27 00:02:51.992158 2025] [:error] [pid 45684:tid 45722] [client 193.37.32.89:44449] [client 193.37.32.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/xax.php"] [unique_id "aSckq_g5LMxwI4-PD1e7ogAAAAc"]
[Thu Nov 27 00:02:52.183080 2025] [:error] [pid 20733:tid 20752] [client 193.37.32.68:47419] [client 193.37.32.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aSckrAV9EP2HuRvnH8eOcQAAANE"]
[Thu Nov 27 00:02:52.367692 2025] [:error] [pid 46443:tid 46468] [client 193.37.32.101:37371] [client 193.37.32.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-content/plugins/mainhosting/past.php"] [unique_id "aSckrMLmDsnHrj-QFB82sQAAAFc"]
[Thu Nov 27 00:02:52.546259 2025] [:error] [pid 6471:tid 6483] [client 193.37.32.83:36111] [client 193.37.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/css/load.php"] [unique_id "aSckrOh3Z9TZLlRuTiPTOAAAAIk"]
[Thu Nov 27 00:02:52.866411 2025] [:error] [pid 45769:tid 45781] [client 193.37.32.64:24659] [client 193.37.32.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aSckrFdG5Eht9c3yy4Na2AAAAck"]
[Thu Nov 27 00:02:53.048214 2025] [:error] [pid 45685:tid 45759] [client 193.37.32.88:51391] [client 193.37.32.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "emuartaustralia.com.au"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/"] [unique_id "aSckrVj3f_NRdgU0DQ4RjQAAARE"]
[Thu Nov 27 00:49:32.513090 2025] [:error] [pid 24826:tid 25138] [client 103.77.107.57:52810] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/sftp-config.json"] [unique_id "aScvnFEvPXLVl-nh-yLbqAAAARY"]
[Thu Nov 27 02:53:30.986384 2025] [:error] [pid 24814:tid 25089] [client 36.41.75.167:48085] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||emuartaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSdMqgPn1NMGCdo6Rsi4FwAAAU4"]
[Thu Nov 27 04:12:43.605249 2025] [autoindex:error] [pid 6290:tid 6309] [client 4.235.105.13:3229] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 04:12:44.093750 2025] [proxy_fcgi:error] [pid 6290:tid 6294] [client 4.235.105.13:3229] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 27 07:36:53.896321 2025] [:error] [pid 23412:tid 23466] [client 206.189.2.13:57838] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||emuartaustralia.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "emuartaustralia.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSePFfeMmsvPE1IwQb-gWwAAAZg"]
[Thu Nov 27 07:36:57.578638 2025] [:error] [pid 23411:tid 23426] [client 206.189.2.13:48034] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSePGVYunVkONF97NEkHoQAAAEs"]
[Thu Nov 27 07:36:58.435077 2025] [:error] [pid 23498:tid 23502] [client 206.189.2.13:48040] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/about"] [unique_id "aSePGlMT8s4PMDyK_T2etQAAAAI"]
[Thu Nov 27 07:36:59.163760 2025] [:error] [pid 23498:tid 23524] [client 206.189.2.13:48050] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/debug/default/view"] [unique_id "aSePG1MT8s4PMDyK_T2euAAAABg"]
[Thu Nov 27 07:36:59.902558 2025] [:error] [pid 23413:tid 23477] [client 206.189.2.13:48052] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/v2/_catalog"] [unique_id "aSePG6e9j7lVV0RAVuQOXgAAAIg"]
[Thu Nov 27 07:37:00.631663 2025] [:error] [pid 23498:tid 23511] [client 206.189.2.13:48056] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSePHFMT8s4PMDyK_T2evwAAAAs"]
[Thu Nov 27 07:37:01.362460 2025] [:error] [pid 23411:tid 23429] [client 206.189.2.13:48058] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/server-status"] [unique_id "aSePHVYunVkONF97NEkHqQAAAE4"]
[Thu Nov 27 07:37:02.102133 2025] [:error] [pid 23413:tid 23486] [client 206.189.2.13:48072] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/login.action"] [unique_id "aSePHqe9j7lVV0RAVuQOYwAAAJE"]
[Thu Nov 27 07:37:02.836726 2025] [:error] [pid 23412:tid 23453] [client 206.189.2.13:48078] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/_all_dbs"] [unique_id "aSePHveMmsvPE1IwQb-gpQAAAYs"]
[Thu Nov 27 07:37:03.578920 2025] [:error] [pid 23412:tid 23460] [client 206.189.2.13:48088] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/.DS_Store"] [unique_id "aSePH_eMmsvPE1IwQb-grAAAAZI"]
[Thu Nov 27 07:37:04.298092 2025] [:error] [pid 23498:tid 23504] [client 206.189.2.13:48096] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.env"] [unique_id "aSePIFMT8s4PMDyK_T2exgAAAAQ"]
[Thu Nov 27 07:37:05.025538 2025] [:error] [pid 23498:tid 23508] [client 206.189.2.13:48112] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSePIVMT8s4PMDyK_T2eygAAAAg"]
[Thu Nov 27 07:37:05.753897 2025] [:error] [pid 23413:tid 23483] [client 206.189.2.13:42946] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSePIae9j7lVV0RAVuQOZwAAAI4"]
[Thu Nov 27 07:37:06.475542 2025] [:error] [pid 23498:tid 23506] [client 206.189.2.13:42962] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/config.json"] [unique_id "aSePIlMT8s4PMDyK_T2ezAAAAAY"]
[Thu Nov 27 07:37:07.196317 2025] [:error] [pid 23498:tid 23517] [client 206.189.2.13:42970] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/telescope/requests"] [unique_id "aSePI1MT8s4PMDyK_T2ezgAAABE"]
[Thu Nov 27 07:37:07.923491 2025] [:error] [pid 23413:tid 23475] [client 206.189.2.13:42978] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/info.php"] [unique_id "aSePI6e9j7lVV0RAVuQOaAAAAIY"]
[Thu Nov 27 07:37:08.650686 2025] [:error] [pid 23412:tid 23442] [client 206.189.2.13:42982] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "emuartaustralia.com.au"] [uri "/"] [unique_id "aSePJPeMmsvPE1IwQb-gwAAAAYA"]
[Thu Nov 27 07:38:12.239530 2025] [:error] [pid 23411:tid 23435] [client 147.135.220.53:41602] [client 147.135.220.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSePZFYunVkONF97NEkH8QAAAFQ"]
[Thu Nov 27 07:38:12.467680 2025] [:error] [pid 23498:tid 23512] [client 147.135.220.53:41610] [client 147.135.220.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emuartaustralia.com.au"] [uri "/.git/config"] [unique_id "aSePZFMT8s4PMDyK_T2fSgAAAAw"]
[Thu Apr 16 01:43:30.436101 2026] [ssl:warn] [pid 4016:tid 4016] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 01:43:30.436130 2026] [ssl:warn] [pid 4016:tid 4016] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:41.013798 2026] [ssl:warn] [pid 52554:tid 52554] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:41.013825 2026] [ssl:warn] [pid 52554:tid 52554] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:42.983698 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:42.983724 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:08.044899 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:08.044926 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:23.155968 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:23.155994 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:30.123685 2026] [ssl:warn] [pid 53231:tid 53231] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:30.123712 2026] [ssl:warn] [pid 53231:tid 53231] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:32.186996 2026] [ssl:warn] [pid 53237:tid 53237] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:32.187020 2026] [ssl:warn] [pid 53237:tid 53237] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:22.817422 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:22.817463 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:24.814683 2026] [ssl:warn] [pid 26973:tid 26973] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:24.814707 2026] [ssl:warn] [pid 26973:tid 26973] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:47:58.943636 2026] [ssl:warn] [pid 57468:tid 57468] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:47:58.943663 2026] [ssl:warn] [pid 57468:tid 57468] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:48:01.011505 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:48:01.011532 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 00:03:17.128476 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:17.128502 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:41.252475 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:41.252502 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:43.298981 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:43.299006 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.504851 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.504876 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:02.379871 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:02.379896 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:13.207332 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:13.207358 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:15.212854 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:15.212879 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:46.096450 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:46.096507 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:48.105098 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:48.105122 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:46.812618 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:46.812644 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:48.875178 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:48.875204 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 00:02:18.533735 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:18.533761 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.708373 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.708400 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.714319 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.714345 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:56.115275 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:56.115302 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:05.056606 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:05.056631 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:13.855759 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:13.855827 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:15.865712 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:15.865737 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.797376 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.797401 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.804488 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.804515 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:56.035117 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:56.035144 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:58.066082 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:58.066107 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 00:02:31.703965 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:31.703991 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:50.174733 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:50.174759 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:52.253823 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:52.253848 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.711293 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.711339 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.627232 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.627304 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.478303 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.478330 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.545279 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.545305 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:07.960094 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:07.960121 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:10.003932 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:10.003959 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:45.065470 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:45.065510 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:47.113410 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:47.113436 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:52.335321 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:52.335348 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.517952 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.517977 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:11.273015 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:11.273040 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.666534 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.666560 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.561931 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.561958 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.546214 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.546248 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:14.139073 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:14.139131 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:16.166999 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:16.167023 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.678392 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.678420 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.737160 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.737186 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 10:09:52.594995 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:52.595022 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:53.607303 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:53.607330 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.789405 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.789430 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:10.982614 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:10.982640 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:20.865731 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:20.865755 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:26.813288 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:26.813326 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:28.894888 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:28.894914 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:47.119039 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:47.119067 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:49.176505 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:49.176532 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.538639 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.538666 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.690372 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.690397 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:45.763983 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:45.764026 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:48.012458 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:48.012485 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:03.266526 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:03.266559 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:12.804461 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:12.804487 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.709782 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.709821 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:21.820042 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:21.820068 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:31.156551 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:31.156578 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:33.244100 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:33.244141 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:03.340434 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:03.340463 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:05.423088 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:05.423123 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 13:25:49.130389 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:49.130418 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:44.559903 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:44.559931 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.731997 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.732021 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:04.088863 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:04.088889 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:13.383986 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:13.384010 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:27.403573 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:27.403613 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:29.453139 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:29.453166 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:41.878964 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:41.878994 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:43.897600 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:43.897625 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.733576 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.733601 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.707629 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.707655 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:45.369417 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:45.369444 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.616007 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.616032 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.692468 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.692515 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.455774 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.455801 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:15.448324 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:15.448351 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.523066 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.523093 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:36.852156 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:36.852182 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:38.951492 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:38.951527 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:34.179192 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:34.179220 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:36.279018 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:36.279042 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:09.966087 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:09.966116 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:39.239709 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:39.239735 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:57.030773 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:57.030807 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:03.873369 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:03.873387 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:15.219299 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:15.219343 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:41.073097 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:41.073140 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.492669 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.492703 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 00:01:49.210347 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:49.210373 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:48.435955 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:48.435982 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.544873 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.544898 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.759448 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.759475 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:15.066738 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:15.066764 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:28.925364 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:28.925391 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:30.924291 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:30.924316 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:02.128023 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:02.128050 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:04.218629 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:04.218670 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:47.115883 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:47.115908 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:49.210476 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:49.210504 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:14.377846 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:14.377874 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:17.794657 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:17.794685 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.748434 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.748461 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:34.884983 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:34.885009 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:45.469724 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:45.469751 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.572425 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.572453 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:01.396305 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:01.396331 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:11.239898 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:11.239935 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:18.071661 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:18.071686 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:20.095709 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:20.095737 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:38.058591 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:38.058625 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:40.326925 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:40.326953 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:16.961370 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:16.961396 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:18.949857 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:18.949884 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:43.445222 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:43.445294 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.585841 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.585866 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:00.878124 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:00.878149 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.549262 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.549291 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:16.313892 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:16.313919 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:18.319172 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:18.319197 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:43.882796 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:43.882836 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:45.914694 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:45.914719 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:14.982963 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:14.982989 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:17.021203 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:17.021228 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:15.102151 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:15.102192 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:29.919149 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:29.919174 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:24.967845 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:24.967872 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 09:00:41.309103 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:41.309251 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:09.338643 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:09.338670 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:34.197292 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:34.197320 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.560658 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.560694 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:10.234094 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:10.234121 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:46.323073 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:46.323110 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.552821 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.552858 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.425208 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.425261 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.619561 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.619586 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:49.732633 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:49.732660 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.780949 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.780976 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.725527 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.725554 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:14.898176 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:14.898204 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:21.161824 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:21.161850 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.509851 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.509875 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:54.419991 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:54.420015 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:56.360180 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:56.360207 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:30.954279 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:30.954383 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:32.863654 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:32.863679 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.690683 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.690710 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.663965 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.663965 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:30.292592 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:30.292617 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:25.919008 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:25.919035 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:46.319357 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:46.319387 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:48.393430 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:48.393458 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:57.234576 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:57.234603 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.530127 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.530154 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:14.316435 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:14.316463 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:16.282667 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:16.282721 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:39.967208 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:39.967259 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:41.907920 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:41.907945 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:16.967754 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:16.967781 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:18.943163 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:18.943190 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:12.131736 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:12.131763 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.527628 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.527656 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.774947 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.774974 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:51.124975 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:51.125004 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:11.889681 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:11.889709 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.727508 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.727532 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:37.069285 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:37.069289 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:06.752170 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:06.752198 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:08.828633 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:08.828670 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:23.024088 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:23.024114 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:32.197502 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:32.197529 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:39.108905 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:39.108934 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:41.059400 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:41.059426 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:07.227771 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:07.227798 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:09.180135 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:09.180162 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:52.317938 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:52.317965 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:54.310655 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:54.310682 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:13.673036 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:13.673065 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:52.889806 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:52.889841 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.517863 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.517890 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:02.038709 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:02.038737 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:50.817361 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:50.817387 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:35.375352 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:35.375380 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:00.311014 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:00.311036 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:36.011873 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:36.011900 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.492619 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.492645 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.773411 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.773436 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.581640 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.581667 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:03.047142 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:03.047178 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.667308 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.667349 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.699116 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.699142 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:06.911703 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:06.911729 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:16.060578 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:16.060605 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:28.990121 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:28.990146 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:31.005865 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:31.005892 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:17.057342 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:17.057370 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:19.409792 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:19.409818 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.554452 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.554452 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.526878 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.526905 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:29:07.840890 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:07.840948 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:16.940141 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:16.940166 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.667790 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.667823 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.671836 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.671862 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:09.034315 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:09.034342 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:18.056054 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:18.056079 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:25.960703 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:25.960731 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:27.851686 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:27.851714 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.473569 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.473595 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:46.388334 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:46.388361 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:04.817761 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:04.817787 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.738557 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.738583 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:54.807041 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:54.807069 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:56.953111 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:56.953111 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:04.823568 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:04.823594 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:14.276712 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:14.276738 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:28.297447 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:28.297473 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:30.269586 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:30.269612 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.451076 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.451103 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.464320 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.464340 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.721924 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.721951 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.728388 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.728397 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:22.972673 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:22.972703 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:53.766877 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:53.766901 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:55.834491 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:55.834519 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.745017 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.745052 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:27.954719 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:27.954746 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.731463 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.731491 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.632773 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.632800 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:32.053016 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:32.053041 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:33.950855 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:33.950879 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.795614 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.795642 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.722627 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.722654 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:24:47.378576 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:47.378609 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.644476 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.644501 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:40.236675 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:40.236701 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:02.281738 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:02.281763 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:18:00.357099 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:18:00.357190 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:15.316788 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:15.316813 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.686002 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.686027 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:23.986679 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:23.986705 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:40.397146 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:40.397171 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:51.213420 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:51.213432 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:04.415060 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:04.415085 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:13.153979 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:13.154004 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.622419 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.622446 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:40.356089 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:40.356115 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:49.359521 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:49.359545 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:52.392303 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:52.392345 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.459595 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.459623 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.689437 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.689465 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.811121 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.811146 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:32.885091 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:32.885117 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:34.918669 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:34.918696 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.610758 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.610784 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.538723 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.538761 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:31.965331 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:31.965358 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:33.831590 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:33.831615 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:44.897928 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:44.897970 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:43.531705 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:43.531738 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.476811 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.476844 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.640780 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.640804 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:12.280508 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:12.280533 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:17.195932 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:17.195958 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:19.077766 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:19.077791 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:00.040804 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:00.040830 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:01.960416 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:01.960440 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:47.245213 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:47.245267 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:49.184400 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:49.184426 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.794151 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.794167 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:18.967763 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:18.967791 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.515914 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.515941 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:07.262528 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:07.262557 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:52.182708 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:52.182734 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:54.209921 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:54.209946 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.480577 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.480602 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.462196 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.462220 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:26.168114 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:26.168139 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:28.062223 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:28.062279 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:52.967999 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:52.968026 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:54.896395 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:54.896435 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.778371 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.778401 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.678402 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.678428 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:35.215923 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:35.215962 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.633060 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.633098 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.663532 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.663560 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.556839 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.556864 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 14:14:11.228314 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:11.228341 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:37.921135 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:37.921161 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:39.877277 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:39.877293 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:53.953875 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:53.953903 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.753171 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.753171 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.445407 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.445433 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:12.372454 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:12.372481 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:59.155851 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:59.155877 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:01.046845 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:01.046870 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:58.098668 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:58.098695 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:37:00.414626 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:37:00.414664 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:39.991771 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:39.991798 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:42.116994 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:42.117020 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.548919 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.548944 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.778663 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.778689 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.503674 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.503700 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:25.402901 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:25.402926 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.612939 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.612978 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.557346 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.557371 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:48.947871 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:48.947905 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:50.878289 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:50.878315 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.788004 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.788030 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.700028 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.700054 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:43.912743 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:43.912769 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:45.829669 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:45.829693 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:34.963329 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:34.963359 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.767424 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.767430 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:49.309906 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:49.309931 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:51.213585 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:51.213609 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:04.218401 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:04.218426 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:15.102527 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:15.102559 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.590092 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.590117 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.475980 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.476007 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.757040 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.757065 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.696111 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.696137 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:35.273975 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:35.274014 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:37.225347 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:37.225373 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:54.921289 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:54.921326 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:51.011494 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:51.011521 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:01.304405 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:01.304430 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.498287 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.498307 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:20.071977 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:20.072003 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.568898 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.568930 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.616594 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.616623 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.760771 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.760796 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:50.950548 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:50.950577 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:53.035397 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:53.035424 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.555499 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.555525 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:17.233797 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:17.233821 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:30.996898 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:30.996922 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:32.864473 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:32.864499 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.490133 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.490163 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:07.367533 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:07.367560 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:50.258176 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:50.258215 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:52.171835 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:52.171861 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:08:05.650396 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:05.650446 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:36.277179 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:36.277205 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:42.706060 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:42.706087 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.672080 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.672106 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:59.075949 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:59.075974 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:07.992560 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:07.992587 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.708803 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.708827 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.497321 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.497359 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.744977 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.745003 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.566565 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.566591 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.600003 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.600028 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.445586 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.445625 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:42.685946 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:42.685973 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.775785 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.775811 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.806950 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.806975 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:06.030665 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:06.030690 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.759768 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.759793 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.651705 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.651788 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.554882 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.554890 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.436198 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.436223 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:57.167328 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:57.167366 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:59.056388 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:59.056413 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:05.153088 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:05.153115 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:18.221917 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:18.221942 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:37.985873 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:37.985918 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.436738 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.436765 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:50.750340 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:50.750367 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.742595 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.742622 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.735434 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.735460 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:18.249941 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:18.249968 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:32.011100 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:32.011124 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:33.877525 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:33.877550 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:43.337938 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:43.337964 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:45.163188 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:45.163213 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.577959 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.577984 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.410783 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.410808 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:52.109150 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:52.109180 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:54.091027 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:54.091055 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.439975 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.440000 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.483348 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.483369 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:29.252603 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:29.252628 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:31.120953 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:31.120979 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:44.068560 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:44.068583 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:42.373420 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:42.373447 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:44.209619 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:44.209646 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:27.307138 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:27.307171 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:29.153938 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:29.153976 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:01.364359 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:01.364398 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:05.121345 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:05.121377 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:46.401665 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:46.401693 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:48.400141 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:48.400168 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:04.219561 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:04.219582 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:12.826976 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:12.827014 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.553705 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.553730 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:20.401493 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:20.401519 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.716351 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.716377 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.549981 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.550007 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.558038 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.558064 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:05.372521 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:05.372546 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:41.661132 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:41.661159 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.644673 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.644698 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:58.240677 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:58.240702 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:09.064031 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:09.064048 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.812968 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.812995 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.609579 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.609606 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:29.039458 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:29.039485 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.790830 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.790876 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.558156 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.558193 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:51.402880 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:51.402945 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:42.792394 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:42.792422 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.735100 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.735127 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.799571 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.799597 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.497333 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.497371 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:14.139977 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:14.140003 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:15.916407 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:15.916434 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:10.415070 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:10.415095 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:12.240436 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:12.240462 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:56.117407 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:56.117434 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:57.907845 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:57.907870 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:39.319428 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:39.319495 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.575973 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.576001 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:27.183780 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:27.183807 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.519985 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.520027 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:32.862406 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:32.862432 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.544079 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.544106 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.569510 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.569537 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.666666 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.666701 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.489270 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.489300 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:19.839552 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:19.839579 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:42.147485 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:42.147512 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:44.093505 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:44.093528 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.717498 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.717538 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:09.954270 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:09.954333 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.724636 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.724663 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.570985 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.571012 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.466032 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.466058 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:30.309808 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:30.309839 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:28.397703 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:28.397730 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:30.187949 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:30.187976 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:56.922026 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:56.922054 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:58.861692 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:58.861718 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:50.220663 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:50.220689 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:04.344287 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:04.344313 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:18.118458 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:18.118485 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:19.945391 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:19.945417 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.781078 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.781105 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.585522 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.585549 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:57.387912 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:57.387937 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:45.037346 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:45.037380 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:46.867474 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:46.867501 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.523396 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.523422 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:08.445228 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:08.445285 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:11.084473 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:11.084502 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.400697 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.400714 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:03.345509 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:03.345543 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:10.106041 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:10.106041 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:11.882823 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:11.882848 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:54.209002 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:54.209027 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:56.294042 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:56.294069 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:29.083016 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:29.083042 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.833829 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.833856 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:54.010966 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:54.011014 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.490838 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.490863 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:12.898091 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:12.898140 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:26.292672 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:26.292695 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:32.234187 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:32.234213 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:34.013884 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:34.013931 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.431535 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.431562 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.631189 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.631216 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.408841 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.408867 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.636880 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.636908 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.396837 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.396862 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:52.189219 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:52.189286 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.465100 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.465124 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.510774 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.510802 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:15.022309 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:15.022335 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.389437 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.389472 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:23.137587 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:23.137613 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:43.137009 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:43.137035 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:38.943229 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:38.943284 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:32.242122 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:32.242148 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:33.956875 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:33.956900 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:49.984844 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:49.984870 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.737295 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.737322 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:56.243933 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:56.243963 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.664442 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.664468 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:16.342079 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:16.342106 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.794726 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.794751 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.620223 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.620287 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:54.351671 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:54.351712 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:08.281363 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:08.281402 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:29.881577 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:29.881605 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.620870 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.620894 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:14.369884 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:14.369919 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:28.866206 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:28.866231 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.637704 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.637738 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:43.028942 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:43.028974 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.802129 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.802154 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.517673 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.517698 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:51.069043 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:51.069068 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.506764 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.506788 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:41.289790 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:41.289818 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:43.129045 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:43.129069 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.414389 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.414414 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.826951 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.826976 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:51.450605 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.450635 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:53.206014 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:53.206039 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.385712 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.385744 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.599763 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.599789 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.613036 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.613061 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.455590 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.455615 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:46.253661 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:46.253686 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.704747 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.704789 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.396948 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.396973 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.677610 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.677636 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.434819 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.434846 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.385685 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.385710 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:05.102395 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:05.102420 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:15.199011 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:15.199037 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:21.284906 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:21.284933 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.751627 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.751652 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:58.135864 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:58.135891 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:48.722611 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:48.722645 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:51.273317 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:51.273354 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.686504 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.686535 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.604589 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.604617 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.761091 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.761118 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.508646 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.508673 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:50.365855 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:50.365883 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:48.992329 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:48.992354 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.722424 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.722449 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.827975 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.828047 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.576987 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.577013 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:26:01.154848 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:26:01.154876 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:07.124365 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:07.124391 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.551351 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: emuartaustralia.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.551386 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: emuartaustralia.com.au:443:0 server certificate does NOT include an ID which matches the server name