| Server IP : 103.4.122.14 / Your IP : 216.73.216.103 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : statewid ( 1251) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/local/apache/domlogs/ |
Upload File : |
[Wed Nov 12 13:03:56.009593 2025] [:error] [pid 60095:tid 60106] [client 164.92.244.132:42998] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/@vite/env"] [unique_id "aRQVPHlw2elroagFF1rYygAAAEc"]
[Wed Nov 12 13:03:56.792014 2025] [:error] [pid 60097:tid 60147] [client 164.92.244.132:43004] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/actuator/env"] [unique_id "aRQVPMdT5oio_TbWpi8XSAAAAMI"]
[Wed Nov 12 13:03:57.639377 2025] [:error] [pid 60097:tid 60161] [client 164.92.244.132:43018] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQVPcdT5oio_TbWpi8XSQAAAMg"]
[Wed Nov 12 13:03:58.558524 2025] [:error] [pid 12744:tid 12769] [client 164.92.244.132:43020] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/server"] [unique_id "aRQVPp1cp_ouUvkFj0XJJwAAARU"]
[Wed Nov 12 13:03:59.348198 2025] [:error] [pid 60097:tid 60164] [client 164.92.244.132:43034] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQVP8dT5oio_TbWpi8XSwAAAMs"]
[Wed Nov 12 13:04:00.076389 2025] [:error] [pid 60180:tid 60186] [client 164.92.244.132:43036] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/about"] [unique_id "aRQVQFhgd7ccS8EZg1rXXgAAAUQ"]
[Wed Nov 12 13:04:00.815331 2025] [:error] [pid 60405:tid 60408] [client 164.92.244.132:36168] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aRQVQHMGv_mlVi6mf5qQEwAAAAA"]
[Wed Nov 12 13:04:01.549475 2025] [:error] [pid 60096:tid 60145] [client 164.92.244.132:36184] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aRQVQTmzkhCvvk8DXOxA9wAAAJA"]
[Wed Nov 12 13:04:02.276706 2025] [:error] [pid 60405:tid 60414] [client 164.92.244.132:36194] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQVQnMGv_mlVi6mf5qQFgAAAAY"]
[Wed Nov 12 13:04:03.057712 2025] [:error] [pid 60097:tid 60147] [client 164.92.244.132:36204] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aRQVQ8dT5oio_TbWpi8XTwAAAMI"]
[Wed Nov 12 13:04:03.836710 2025] [:error] [pid 60096:tid 60143] [client 164.92.244.132:36216] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aRQVQzmzkhCvvk8DXOxA-AAAAI8"]
[Wed Nov 12 13:04:07.687687 2025] [:error] [pid 12744:tid 12749] [client 164.92.244.132:36236] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aRQVR51cp_ouUvkFj0XJLQAAAQE"]
[Wed Nov 12 13:04:08.583532 2025] [:error] [pid 60096:tid 60134] [client 164.92.244.132:36252] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.env"] [unique_id "aRQVSDmzkhCvvk8DXOxBAwAAAIg"]
[Wed Nov 12 13:04:09.331912 2025] [:error] [pid 60405:tid 60415] [client 164.92.244.132:36254] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aRQVSXMGv_mlVi6mf5qQIgAAAAc"]
[Wed Nov 12 13:04:10.082320 2025] [:error] [pid 12744:tid 12772] [client 164.92.244.132:36260] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQVSp1cp_ouUvkFj0XJMgAAARg"]
[Wed Nov 12 13:04:10.807968 2025] [:error] [pid 60096:tid 60155] [client 164.92.244.132:53052] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aRQVSjmzkhCvvk8DXOxBBwAAAJU"]
[Wed Nov 12 13:04:11.536961 2025] [:error] [pid 60405:tid 60422] [client 164.92.244.132:53068] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aRQVS3MGv_mlVi6mf5qQJQAAAA4"]
[Wed Nov 12 13:04:12.271792 2025] [:error] [pid 12744:tid 12750] [client 164.92.244.132:53080] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aRQVTJ1cp_ouUvkFj0XJOQAAAQI"]
[Wed Nov 12 13:04:13.015702 2025] [:error] [pid 60097:tid 60173] [client 164.92.244.132:53082] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aRQVTcdT5oio_TbWpi8XZQAAANQ"]
[Wed Nov 12 13:17:51.045950 2025] [:error] [pid 12744:tid 12770] [client 206.81.24.227:46142] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/@vite/env"] [unique_id "aRQYf51cp_ouUvkFj0XRcQAAARY"]
[Wed Nov 12 13:17:51.762305 2025] [:error] [pid 60095:tid 60108] [client 206.81.24.227:46154] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/actuator/env"] [unique_id "aRQYf3lw2elroagFF1redAAAAEk"]
[Wed Nov 12 13:17:52.478492 2025] [:error] [pid 60095:tid 60118] [client 206.81.24.227:46168] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQYgHlw2elroagFF1redgAAAFM"]
[Wed Nov 12 13:17:53.224007 2025] [:error] [pid 60405:tid 60410] [client 206.81.24.227:46180] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/server"] [unique_id "aRQYgXMGv_mlVi6mf5qWSQAAAAI"]
[Wed Nov 12 13:17:53.958513 2025] [:error] [pid 60180:tid 60191] [client 206.81.24.227:46182] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQYgVhgd7ccS8EZg1rdkwAAAUk"]
[Wed Nov 12 13:17:54.715819 2025] [:error] [pid 12744:tid 12762] [client 206.81.24.227:46188] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/about"] [unique_id "aRQYgp1cp_ouUvkFj0XRdgAAAQ4"]
[Wed Nov 12 13:17:55.546096 2025] [:error] [pid 60180:tid 60183] [client 206.81.24.227:46194] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aRQYg1hgd7ccS8EZg1rdmgAAAUE"]
[Wed Nov 12 13:17:56.365136 2025] [:error] [pid 60405:tid 60427] [client 206.81.24.227:46202] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aRQYhHMGv_mlVi6mf5qWUwAAABM"]
[Wed Nov 12 13:17:57.101934 2025] [:error] [pid 60405:tid 60422] [client 206.81.24.227:46218] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQYhXMGv_mlVi6mf5qWVQAAAA4"]
[Wed Nov 12 13:17:57.921312 2025] [:error] [pid 60095:tid 60110] [client 206.81.24.227:46234] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aRQYhXlw2elroagFF1refgAAAEs"]
[Wed Nov 12 13:17:58.662550 2025] [:error] [pid 12744:tid 12748] [client 206.81.24.227:46236] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aRQYhp1cp_ouUvkFj0XRkAAAAQA"]
[Wed Nov 12 13:18:02.382292 2025] [:error] [pid 60097:tid 60147] [client 206.81.24.227:41206] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aRQYisdT5oio_TbWpi8dWgAAAMI"]
[Wed Nov 12 13:18:03.114375 2025] [:error] [pid 60405:tid 60408] [client 206.81.24.227:41218] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aRQYi3MGv_mlVi6mf5qWZgAAAAA"]
[Wed Nov 12 13:18:03.831716 2025] [:error] [pid 60096:tid 60134] [client 206.81.24.227:41228] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aRQYizmzkhCvvk8DXOxHBAAAAIg"]
[Wed Nov 12 13:18:04.562055 2025] [:error] [pid 12744:tid 12768] [client 206.81.24.227:41236] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQYjJ1cp_ouUvkFj0XRsQAAARQ"]
[Wed Nov 12 13:18:05.299452 2025] [:error] [pid 60095:tid 60113] [client 206.81.24.227:41238] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aRQYjXlw2elroagFF1rejAAAAE4"]
[Wed Nov 12 13:18:06.022505 2025] [:error] [pid 60097:tid 60166] [client 206.81.24.227:41252] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aRQYjsdT5oio_TbWpi8dXwAAAM0"]
[Wed Nov 12 13:18:06.765186 2025] [:error] [pid 60096:tid 60133] [client 206.81.24.227:41266] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aRQYjjmzkhCvvk8DXOxHBwAAAIc"]
[Wed Nov 12 13:18:07.497629 2025] [:error] [pid 12744:tid 12750] [client 206.81.24.227:41268] [client 206.81.24.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRQYj51cp_ouUvkFj0XRtgAAAQI"]
[Thu Nov 13 02:42:23.335327 2025] [:error] [pid 60095:tid 60109] [client 34.44.206.82:34528] [client 34.44.206.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTVD3lw2elroagFF1qG9QAAAEo"]
[Thu Nov 13 03:15:34.838194 2025] [:error] [pid 60405:tid 60414] [client 34.44.206.82:36372] [client 34.44.206.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTc1nMGv_mlVi6mf5pqOAAAAAY"]
[Thu Nov 13 04:26:27.965202 2025] [:error] [pid 51407:tid 51481] [client 35.223.51.39:34236] [client 35.223.51.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTtc6KnD465ID-ycMKD3QAAAJA"]
[Thu Nov 13 04:37:48.954782 2025] [:error] [pid 18960:tid 18966] [client 35.223.51.39:53728] [client 35.223.51.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRTwHIvOP-uT_KFAcQNi0QAAAQQ"]
[Fri Nov 14 13:23:21.980819 2025] [:error] [pid 16573:tid 16586] [client 159.65.18.197:39594] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||end2end.hostone.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRa8ySPGexfUk9FDoEI5aQAAAEg"]
[Fri Nov 14 13:23:25.369941 2025] [:error] [pid 16575:tid 16635] [client 159.65.18.197:39604] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRa8ze6qT670YxigvbAoOAAAAME"]
[Fri Nov 14 13:23:26.095284 2025] [:error] [pid 16709:tid 16719] [client 159.65.18.197:39608] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about"] [unique_id "aRa8zqNdzfVNC4oipLXTeQAAAUg"]
[Fri Nov 14 13:23:26.825483 2025] [:error] [pid 16671:tid 16696] [client 159.65.18.197:39610] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aRa8zjsoHwEAmeIzZXDpFQAAARM"]
[Fri Nov 14 13:23:27.555249 2025] [:error] [pid 16575:tid 16643] [client 159.65.18.197:39616] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aRa8z-6qT670YxigvbAoPQAAAMk"]
[Fri Nov 14 13:23:28.283678 2025] [:error] [pid 16574:tid 16621] [client 159.65.18.197:39624] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRa80P6XQqe4NqaoE9LbSwAAAI4"]
[Fri Nov 14 13:23:29.014856 2025] [:error] [pid 16574:tid 16610] [client 159.65.18.197:39626] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aRa80f6XQqe4NqaoE9LbTAAAAIM"]
[Fri Nov 14 13:23:29.745343 2025] [:error] [pid 16575:tid 16641] [client 159.65.18.197:40356] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aRa80e6qT670YxigvbAoQQAAAMc"]
[Fri Nov 14 13:23:30.495907 2025] [:error] [pid 16671:tid 16678] [client 159.65.18.197:40372] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/_all_dbs"] [unique_id "aRa80jsoHwEAmeIzZXDpGwAAAQE"]
[Fri Nov 14 13:23:31.223996 2025] [:error] [pid 16574:tid 16613] [client 159.65.18.197:40374] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aRa80_6XQqe4NqaoE9LbUAAAAIY"]
[Fri Nov 14 13:23:31.950084 2025] [:error] [pid 16573:tid 16585] [client 159.65.18.197:40386] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aRa80yPGexfUk9FDoEI5cAAAAEc"]
[Fri Nov 14 13:23:32.677864 2025] [:error] [pid 16671:tid 16691] [client 159.65.18.197:40394] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aRa81DsoHwEAmeIzZXDpHgAAAQ4"]
[Fri Nov 14 13:23:33.498493 2025] [:error] [pid 16574:tid 16608] [client 159.65.18.197:40410] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRa81f6XQqe4NqaoE9LbUQAAAIE"]
[Fri Nov 14 13:23:34.225862 2025] [:error] [pid 16709:tid 16733] [client 159.65.18.197:40422] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aRa81qNdzfVNC4oipLXTjAAAAVY"]
[Fri Nov 14 13:23:34.952432 2025] [:error] [pid 16671:tid 16696] [client 159.65.18.197:40432] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aRa81jsoHwEAmeIzZXDpIwAAARM"]
[Fri Nov 14 13:23:35.683898 2025] [:error] [pid 16709:tid 16720] [client 159.65.18.197:40448] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aRa816NdzfVNC4oipLXTkAAAAUk"]
[Fri Nov 14 13:23:36.418625 2025] [:error] [pid 16671:tid 16698] [client 159.65.18.197:40458] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRa82DsoHwEAmeIzZXDpJQAAARU"]
[Sun Nov 16 12:56:39.068293 2025] [:error] [pid 34271:tid 34280] [client 142.93.0.66:58002] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||end2end.hostone.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRlZh0NmlZhoZZV1BUB_wQAAAkc"]
[Sun Nov 16 12:56:42.174637 2025] [:error] [pid 20556:tid 20565] [client 142.93.0.66:58006] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRlZikkbyEckbWtBcCIv1gAAAQc"]
[Sun Nov 16 12:56:42.797289 2025] [:error] [pid 34271:tid 34276] [client 142.93.0.66:58014] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about"] [unique_id "aRlZikNmlZhoZZV1BUB_wwAAAkM"]
[Sun Nov 16 12:56:43.417864 2025] [:error] [pid 34271:tid 34278] [client 142.93.0.66:58024] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aRlZi0NmlZhoZZV1BUB_xQAAAkU"]
[Sun Nov 16 12:56:44.039416 2025] [:error] [pid 34164:tid 34191] [client 142.93.0.66:58038] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aRlZjO93ccBCLD8-Q4YCkwAAAZc"]
[Sun Nov 16 12:56:44.661764 2025] [:error] [pid 34133:tid 34154] [client 142.93.0.66:58048] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRlZjPSAB3iwXVRY0gFeZgAAAVM"]
[Sun Nov 16 12:56:45.282093 2025] [:error] [pid 34165:tid 34207] [client 142.93.0.66:58062] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aRlZjXhG2YTKEjXchwnuTQAAAcw"]
[Sun Nov 16 12:56:45.903878 2025] [:error] [pid 20556:tid 20573] [client 142.93.0.66:58070] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aRlZjUkbyEckbWtBcCIv2wAAAQ8"]
[Sun Nov 16 12:56:46.538439 2025] [:error] [pid 52469:tid 52486] [client 142.93.0.66:58074] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/_all_dbs"] [unique_id "aRlZjk6HaXpHeEZ98Z1thwAAAAk"]
[Sun Nov 16 12:56:47.158076 2025] [:error] [pid 52563:tid 52575] [client 142.93.0.66:42388] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aRlZj8-l3ey-hVJ5AutrmwAAAMk"]
[Sun Nov 16 12:56:47.778446 2025] [:error] [pid 34271:tid 34278] [client 142.93.0.66:42394] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aRlZj0NmlZhoZZV1BUB_3gAAAkU"]
[Sun Nov 16 12:56:48.400019 2025] [:error] [pid 20556:tid 20566] [client 142.93.0.66:42396] [client 142.93.0.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aRlZkEkbyEckbWtBcCIv4AAAAQg"]
[Sun Nov 16 12:56:49.026436 2025] [:error] [pid 34133:tid 34142] [client 142.93.0.66:42408] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRlZkfSAB3iwXVRY0gFebwAAAUc"]
[Sun Nov 16 12:56:49.648891 2025] [:error] [pid 20556:tid 20577] [client 142.93.0.66:42424] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aRlZkUkbyEckbWtBcCIv4gAAARM"]
[Sun Nov 16 12:56:50.269729 2025] [:error] [pid 34227:tid 34248] [client 142.93.0.66:42434] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aRlZkn108zGLYs9eMuj9vAAAAhM"]
[Sun Nov 16 12:56:50.891814 2025] [:error] [pid 34165:tid 34200] [client 142.93.0.66:42448] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aRlZknhG2YTKEjXchwnuVgAAAcU"]
[Sun Nov 16 12:56:51.512489 2025] [:error] [pid 34227:tid 34237] [client 142.93.0.66:42458] [client 142.93.0.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRlZk3108zGLYs9eMuj9vQAAAgg"]
[Sun Nov 16 15:07:23.345100 2025] [:error] [pid 20556:tid 20572] [client 35.180.57.250:45590] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aRl4K0kbyEckbWtBcCJUFQAAAQ4"]
[Sun Nov 16 15:07:23.447161 2025] [:error] [pid 52469:tid 52486] [client 35.180.57.250:45604] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.local"] [unique_id "aRl4K06HaXpHeEZ98Z2XUQAAAAk"]
[Sun Nov 16 15:07:23.530425 2025] [:error] [pid 20556:tid 20558] [client 35.180.57.250:45610] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.dev"] [unique_id "aRl4K0kbyEckbWtBcCJUFgAAAQA"]
[Sun Nov 16 15:07:23.534737 2025] [:error] [pid 52471:tid 52539] [client 35.180.57.250:45616] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.prod"] [unique_id "aRl4K9mWsFzjR5CEgDUqSgAAAIc"]
[Sun Nov 16 15:07:23.582234 2025] [:error] [pid 20556:tid 20562] [client 35.180.57.250:45632] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.development"] [unique_id "aRl4K0kbyEckbWtBcCJUFwAAAQQ"]
[Sun Nov 16 15:07:23.591107 2025] [:error] [pid 34164:tid 34168] [client 35.180.57.250:45638] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.staging"] [unique_id "aRl4K-93ccBCLD8-Q4YhJgAAAYA"]
[Sun Nov 16 15:07:23.639635 2025] [:error] [pid 34133:tid 34157] [client 35.180.57.250:45642] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.production"] [unique_id "aRl4K_SAB3iwXVRY0gFx7gAAAVY"]
[Sun Nov 16 15:07:23.689463 2025] [:error] [pid 20556:tid 20577] [client 35.180.57.250:45654] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.test"] [unique_id "aRl4K0kbyEckbWtBcCJUGAAAARM"]
[Sun Nov 16 15:07:23.724336 2025] [:error] [pid 20556:tid 20578] [client 35.180.57.250:45680] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.bak"] [unique_id "aRl4K0kbyEckbWtBcCJUGQAAARQ"]
[Sun Nov 16 15:07:23.741746 2025] [:error] [pid 34133:tid 34154] [client 35.180.57.250:45668] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env~"] [unique_id "aRl4K_SAB3iwXVRY0gFx7wAAAVM"]
[Sun Nov 16 15:07:23.763837 2025] [:error] [pid 52471:tid 52546] [client 35.180.57.250:45658] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.backup"] [unique_id "aRl4K9mWsFzjR5CEgDUqSwAAAI4"]
[Sun Nov 16 15:07:23.801341 2025] [:error] [pid 52563:tid 52582] [client 35.180.57.250:45696] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.sample"] [unique_id "aRl4K8-l3ey-hVJ5AuuFuwAAANA"]
[Sun Nov 16 15:07:23.804162 2025] [:error] [pid 52471:tid 52538] [client 35.180.57.250:45714] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.save"] [unique_id "aRl4K9mWsFzjR5CEgDUqTAAAAIY"]
[Sun Nov 16 15:07:23.804317 2025] [:error] [pid 52563:tid 52588] [client 35.180.57.250:45682] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.old"] [unique_id "aRl4K8-l3ey-hVJ5AuuFvAAAANY"]
[Sun Nov 16 15:07:23.813218 2025] [:error] [pid 20556:tid 20576] [client 35.180.57.250:45704] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.orig"] [unique_id "aRl4K0kbyEckbWtBcCJUGgAAARI"]
[Sun Nov 16 15:07:23.882286 2025] [:error] [pid 34164:tid 34186] [client 35.180.57.250:45726] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.swp"] [unique_id "aRl4K-93ccBCLD8-Q4YhJwAAAZI"]
[Sun Nov 16 15:07:24.661223 2025] [:error] [pid 20556:tid 20560] [client 35.180.57.250:45730] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.dist"] [unique_id "aRl4LEkbyEckbWtBcCJUHAAAAQI"]
[Sun Nov 16 15:07:24.686325 2025] [:error] [pid 34133:tid 34145] [client 35.180.57.250:45734] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/admin/.env"] [unique_id "aRl4LPSAB3iwXVRY0gFx8gAAAUo"]
[Sun Nov 16 15:07:24.694992 2025] [:error] [pid 20556:tid 20574] [client 35.180.57.250:45750] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.tmp"] [unique_id "aRl4LEkbyEckbWtBcCJUHQAAARA"]
[Sun Nov 16 15:07:30.903114 2025] [:error] [pid 34164:tid 34179] [client 35.180.57.250:39256] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/api/.env"] [unique_id "aRl4Mu93ccBCLD8-Q4YhLAAAAYs"]
[Sun Nov 16 15:07:30.935051 2025] [:error] [pid 34164:tid 34191] [client 35.180.57.250:39272] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/admin/.env.bak"] [unique_id "aRl4Mu93ccBCLD8-Q4YhLQAAAZc"]
[Sun Nov 16 15:07:30.938256 2025] [:error] [pid 34133:tid 34152] [client 35.180.57.250:39290] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/api/.env.old"] [unique_id "aRl4MvSAB3iwXVRY0gFx-QAAAVE"]
[Sun Nov 16 15:07:30.980276 2025] [:error] [pid 20556:tid 20573] [client 35.180.57.250:39288] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/admin/.env.old"] [unique_id "aRl4MkkbyEckbWtBcCJUJwAAAQ8"]
[Sun Nov 16 15:07:30.981601 2025] [:error] [pid 34271:tid 34288] [client 35.180.57.250:39248] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/admin/.env.save"] [unique_id "aRl4MkNmlZhoZZV1BUCWBAAAAk8"]
[Sun Nov 16 15:07:31.074993 2025] [:error] [pid 52563:tid 52586] [client 35.180.57.250:39304] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env"] [unique_id "aRl4M8-l3ey-hVJ5AuuFxgAAANQ"]
[Sun Nov 16 15:07:31.122348 2025] [:error] [pid 20556:tid 20568] [client 35.180.57.250:39308] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/api/.env.save"] [unique_id "aRl4M0kbyEckbWtBcCJUKAAAAQo"]
[Sun Nov 16 15:07:31.129897 2025] [:error] [pid 34164:tid 34187] [client 35.180.57.250:39318] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/api/.env.bak"] [unique_id "aRl4M-93ccBCLD8-Q4YhLgAAAZM"]
[Sun Nov 16 15:07:31.132145 2025] [:error] [pid 34164:tid 34192] [client 35.180.57.250:39336] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env.save"] [unique_id "aRl4M-93ccBCLD8-Q4YhLwAAAZg"]
[Sun Nov 16 15:07:31.188461 2025] [:error] [pid 34165:tid 34217] [client 35.180.57.250:39340] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env.old"] [unique_id "aRl4M3hG2YTKEjXchwkFewAAAdY"]
[Sun Nov 16 15:07:31.190215 2025] [:error] [pid 52471:tid 52538] [client 35.180.57.250:39352] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/config/.env.bak"] [unique_id "aRl4M9mWsFzjR5CEgDUqVgAAAIY"]
[Sun Nov 16 15:07:31.199168 2025] [:error] [pid 34165:tid 34206] [client 35.180.57.250:39334] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env.bak"] [unique_id "aRl4M3hG2YTKEjXchwkFfAAAAcs"]
[Sun Nov 16 15:07:31.247286 2025] [:error] [pid 34271:tid 34278] [client 35.180.57.250:39376] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/config/.env.save"] [unique_id "aRl4M0NmlZhoZZV1BUCWBQAAAkU"]
[Sun Nov 16 15:07:31.269754 2025] [:error] [pid 34301:tid 34314] [client 35.180.57.250:39392] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/config/.env.old"] [unique_id "aRl4M7GPoZwUGuFNREulbAAAAoo"]
[Sun Nov 16 15:07:31.271626 2025] [:error] [pid 52563:tid 52582] [client 35.180.57.250:39404] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/src/.env.save"] [unique_id "aRl4M8-l3ey-hVJ5AuuFxwAAANA"]
[Sun Nov 16 15:07:31.273288 2025] [:error] [pid 20556:tid 20560] [client 35.180.57.250:39410] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/src/.env.old"] [unique_id "aRl4M0kbyEckbWtBcCJUKQAAAQI"]
[Sun Nov 16 15:07:31.277299 2025] [:error] [pid 34164:tid 34170] [client 35.180.57.250:39360] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/src/.env"] [unique_id "aRl4M-93ccBCLD8-Q4YhMAAAAYI"]
[Sun Nov 16 15:07:31.307116 2025] [:error] [pid 34164:tid 34168] [client 35.180.57.250:39436] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/public/.env.bak"] [unique_id "aRl4M-93ccBCLD8-Q4YhMQAAAYA"]
[Sun Nov 16 15:07:31.316421 2025] [:error] [pid 34133:tid 34137] [client 35.180.57.250:39412] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/src/.env.bak"] [unique_id "aRl4M_SAB3iwXVRY0gFx-wAAAUI"]
[Sun Nov 16 15:07:31.353680 2025] [:error] [pid 34164:tid 34182] [client 35.180.57.250:39428] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/public/.env"] [unique_id "aRl4M-93ccBCLD8-Q4YhMgAAAY4"]
[Sun Nov 16 15:07:31.364360 2025] [:error] [pid 34133:tid 34139] [client 35.180.57.250:39440] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/config/.env"] [unique_id "aRl4M_SAB3iwXVRY0gFx_AAAAUQ"]
[Sun Nov 16 15:07:31.383818 2025] [:error] [pid 34164:tid 34177] [client 35.180.57.250:39492] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/public/.env.save"] [unique_id "aRl4M-93ccBCLD8-Q4YhMwAAAYk"]
[Sun Nov 16 15:07:31.500848 2025] [:error] [pid 52563:tid 52569] [client 35.180.57.250:39456] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/public/.env.old"] [unique_id "aRl4M8-l3ey-hVJ5AuuFyAAAAMM"]
[Sun Nov 16 15:07:31.569109 2025] [:error] [pid 52563:tid 52588] [client 35.180.57.250:39472] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/assets/.env"] [unique_id "aRl4M8-l3ey-hVJ5AuuFyQAAANY"]
[Sun Nov 16 15:07:31.602784 2025] [:error] [pid 52469:tid 52501] [client 35.180.57.250:39488] [client 35.180.57.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/assets/.env.save"] [unique_id "aRl4M06HaXpHeEZ98Z2XdwAAABg"]
[Sun Nov 16 15:26:27.948623 2025] [:error] [pid 20556:tid 20562] [client 157.245.63.215:50506] [client 157.245.63.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aRl8o0kbyEckbWtBcCJYrgAAAQQ"]
[Sun Nov 16 15:26:28.148414 2025] [:error] [pid 34164:tid 34171] [client 157.245.63.215:52941] [client 157.245.63.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aRl8pO93ccBCLD8-Q4YlwgAAAYM"]
[Sun Nov 16 15:26:29.340779 2025] [:error] [pid 52471:tid 52554] [client 157.245.63.215:55108] [client 157.245.63.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aRl8pdmWsFzjR5CEgDUuvQAAAJY"]
[Sun Nov 16 15:26:31.533527 2025] [:error] [pid 20556:tid 20572] [client 157.245.63.215:59649] [client 157.245.63.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aRl8p0kbyEckbWtBcCJYuAAAAQ4"]
[Wed Nov 19 02:18:53.673678 2025] [:error] [pid 43880:tid 43886] [client 134.209.230.234:49770] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRy4je1q1HNbKyNr9SZ5mgAAAEE"]
[Wed Nov 19 02:18:54.229906 2025] [:error] [pid 44063:tid 44132] [client 134.209.230.234:60730] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRy4jkVOSC7H33BBqQ0HjgAAAI8"]
[Wed Nov 19 02:18:54.769905 2025] [:error] [pid 43880:tid 43902] [client 134.209.230.234:61350] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRy4ju1q1HNbKyNr9SZ5pwAAAFE"]
[Wed Nov 19 02:18:55.271015 2025] [:error] [pid 44063:tid 44126] [client 134.209.230.234:61700] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRy4j0VOSC7H33BBqQ0HngAAAIk"]
[Wed Nov 19 02:18:55.773353 2025] [:error] [pid 3052:tid 3135] [client 134.209.230.234:53979] [client 134.209.230.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aRy4j1NM6bOMTTuJnz2aDQAAAMY"]
[Thu Nov 20 06:11:34.686644 2025] [autoindex:error] [pid 55343:tid 55421] [client 134.149.59.46:34642] AH01276: Cannot serve directory /home/end2endh/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Nov 20 06:11:38.988028 2025] [proxy_fcgi:error] [pid 55343:tid 55406] [client 134.149.59.46:34642] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 06:11:41.600175 2025] [:error] [pid 55343:tid 55408] [client 134.149.59.46:34642] [client 134.149.59.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/0.php"] [unique_id "aR5AnVWlO3EnyVMV7w7_RgAAAIk"]
[Thu Nov 20 06:11:49.022026 2025] [:error] [pid 55343:tid 55405] [client 134.149.59.46:34584] [client 134.149.59.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aR5ApVWlO3EnyVMV7w7_TAAAAIY"]
[Thu Nov 20 06:11:52.746458 2025] [:error] [pid 34444:tid 34458] [client 134.149.59.46:34568] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/m.php"] [unique_id "aR5AqFNEol4jlmmA_GOUQgAAAUw"]
[Thu Nov 20 06:11:53.420540 2025] [:error] [pid 55342:tid 55380] [client 134.149.59.46:34572] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/m.php"] [unique_id "aR5Aqbg6x32Tvk7fIG894gAAAEg"]
[Thu Nov 20 06:11:53.992500 2025] [:error] [pid 55342:tid 55383] [client 134.149.59.46:34638] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/m.php"] [unique_id "aR5Aqbg6x32Tvk7fIG895AAAAEs"]
[Thu Nov 20 06:11:54.570625 2025] [:error] [pid 55430:tid 55433] [client 134.149.59.46:34626] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/m.php"] [unique_id "aR5AqvPZXaIMEU4pE7tGHQAAAMA"]
[Thu Nov 20 06:11:55.140078 2025] [:error] [pid 34405:tid 34430] [client 134.149.59.46:34589] [client 134.149.59.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aR5AqzFpvu8oRK7ATft6zwAAARc"]
[Thu Nov 20 06:11:55.680185 2025] [:error] [pid 55430:tid 55451] [client 134.149.59.46:34586] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jagoan.php"] [unique_id "aR5Aq_PZXaIMEU4pE7tGHgAAANI"]
[Thu Nov 20 06:11:56.275522 2025] [:error] [pid 34405:tid 34428] [client 134.149.59.46:34663] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jagoan.php"] [unique_id "aR5ArDFpvu8oRK7ATft60gAAARU"]
[Thu Nov 20 06:11:56.882218 2025] [:error] [pid 34444:tid 34463] [client 134.149.59.46:34653] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jagoan.php"] [unique_id "aR5ArFNEol4jlmmA_GOURQAAAVE"]
[Thu Nov 20 06:11:57.687589 2025] [:error] [pid 55430:tid 55445] [client 134.149.59.46:34561] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jagoan.php"] [unique_id "aR5ArfPZXaIMEU4pE7tGIAAAAMw"]
[Thu Nov 20 06:11:58.289005 2025] [:error] [pid 55342:tid 55390] [client 134.149.59.46:34668] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/g3.php"] [unique_id "aR5Arrg6x32Tvk7fIG896AAAAFI"]
[Thu Nov 20 06:11:58.857532 2025] [:error] [pid 34405:tid 34410] [client 134.149.59.46:34675] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/g3.php"] [unique_id "aR5ArjFpvu8oRK7ATft61gAAAQM"]
[Thu Nov 20 06:11:59.610430 2025] [:error] [pid 55343:tid 55404] [client 134.149.59.46:34577] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/g3.php"] [unique_id "aR5Ar1WlO3EnyVMV7w7_XQAAAIU"]
[Thu Nov 20 06:12:00.309780 2025] [:error] [pid 34405:tid 34418] [client 134.149.59.46:34595] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/g3.php"] [unique_id "aR5AsDFpvu8oRK7ATft62AAAAQs"]
[Thu Nov 20 06:12:00.909243 2025] [:error] [pid 55343:tid 55406] [client 134.149.59.46:17366] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR5AsFWlO3EnyVMV7w7_XgAAAIc"]
[Thu Nov 20 06:12:01.518374 2025] [:error] [pid 34444:tid 34459] [client 134.149.59.46:34585] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR5AsVNEol4jlmmA_GOUSAAAAU0"]
[Thu Nov 20 06:12:02.304057 2025] [:error] [pid 34405:tid 34426] [client 134.149.59.46:34678] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR5AsjFpvu8oRK7ATft63QAAARM"]
[Thu Nov 20 06:12:03.071044 2025] [:error] [pid 55342:tid 55381] [client 134.149.59.46:34665] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aR5As7g6x32Tvk7fIG897AAAAEk"]
[Thu Nov 20 06:12:03.656742 2025] [:error] [pid 55343:tid 55415] [client 134.149.59.46:34633] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR5As1WlO3EnyVMV7w7_XwAAAJA"]
[Thu Nov 20 06:12:04.230820 2025] [:error] [pid 55343:tid 55403] [client 134.149.59.46:34601] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR5AtFWlO3EnyVMV7w7_YAAAAIQ"]
[Thu Nov 20 06:12:04.840485 2025] [:error] [pid 34405:tid 34411] [client 134.149.59.46:34563] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR5AtDFpvu8oRK7ATft64QAAAQQ"]
[Thu Nov 20 06:12:05.423719 2025] [:error] [pid 55342:tid 55380] [client 134.149.59.46:34579] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aR5Atbg6x32Tvk7fIG897gAAAEg"]
[Thu Nov 20 06:12:06.105682 2025] [:error] [pid 55430:tid 55449] [client 134.149.59.46:34578] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/htaccess.php"] [unique_id "aR5AtvPZXaIMEU4pE7tGJAAAANA"]
[Thu Nov 20 06:12:06.716689 2025] [:error] [pid 55340:tid 55349] [client 134.149.59.46:34564] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/htaccess.php"] [unique_id "aR5AtvOxD-NeMydTybDILwAAAAQ"]
[Thu Nov 20 06:12:07.275870 2025] [:error] [pid 34444:tid 34449] [client 134.149.59.46:34654] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/htaccess.php"] [unique_id "aR5At1NEol4jlmmA_GOUSwAAAUM"]
[Thu Nov 20 06:12:07.885509 2025] [:error] [pid 34405:tid 34410] [client 134.149.59.46:34656] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/htaccess.php"] [unique_id "aR5AtzFpvu8oRK7ATft65QAAAQM"]
[Thu Nov 20 06:12:08.647280 2025] [:error] [pid 55343:tid 55421] [client 134.149.59.46:34602] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/readme.php"] [unique_id "aR5AuFWlO3EnyVMV7w7_ZgAAAJY"]
[Thu Nov 20 06:12:09.280170 2025] [:error] [pid 55343:tid 55411] [client 134.149.59.46:34571] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/readme.php"] [unique_id "aR5AuVWlO3EnyVMV7w7_aQAAAIw"]
[Thu Nov 20 06:12:09.911462 2025] [:error] [pid 55430:tid 55451] [client 134.149.59.46:34591] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/readme.php"] [unique_id "aR5AufPZXaIMEU4pE7tGKQAAANI"]
[Thu Nov 20 06:12:10.499343 2025] [:error] [pid 55343:tid 55418] [client 134.149.59.46:34636] [client 134.149.59.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/readme.php"] [unique_id "aR5AulWlO3EnyVMV7w7_bQAAAJM"]
[Thu Nov 20 17:27:12.129674 2025] [:error] [pid 55342:tid 55384] [client 159.89.174.87:42200] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.end2end.hostone.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aR7e8Lg6x32Tvk7fIG_L6gAAAEw"]
[Thu Nov 20 17:27:14.888719 2025] [:error] [pid 55342:tid 55375] [client 159.89.174.87:42216] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aR7e8rg6x32Tvk7fIG_L8QAAAEM"]
[Thu Nov 20 17:27:15.286163 2025] [:error] [pid 40508:tid 40522] [client 159.89.174.87:42220] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about"] [unique_id "aR7e86xXNVCMW_ksxPuL_wAAAow"]
[Thu Nov 20 17:27:15.752055 2025] [:error] [pid 40445:tid 40491] [client 159.89.174.87:42222] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aR7e81H-MuFcoWRjXpZAVAAAAlA"]
[Thu Nov 20 17:27:16.163468 2025] [:error] [pid 40508:tid 40519] [client 159.89.174.87:42234] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aR7e9KxXNVCMW_ksxPuMAgAAAok"]
[Thu Nov 20 17:27:16.588446 2025] [:error] [pid 55342:tid 55388] [client 159.89.174.87:42236] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aR7e9Lg6x32Tvk7fIG_L9QAAAFA"]
[Thu Nov 20 17:27:17.001721 2025] [:error] [pid 34405:tid 34420] [client 159.89.174.87:42244] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aR7e9TFpvu8oRK7ATfsJhgAAAQ0"]
[Thu Nov 20 17:27:17.427663 2025] [:error] [pid 55340:tid 55346] [client 159.89.174.87:42258] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aR7e9fOxD-NeMydTybCOXgAAAAE"]
[Thu Nov 20 17:27:17.865955 2025] [:error] [pid 40445:tid 40479] [client 159.89.174.87:42264] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/_all_dbs"] [unique_id "aR7e9VH-MuFcoWRjXpZAVwAAAkQ"]
[Thu Nov 20 17:27:18.278958 2025] [:error] [pid 55430:tid 55434] [client 159.89.174.87:51596] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aR7e9vPZXaIMEU4pE7vwxgAAAME"]
[Thu Nov 20 17:27:18.676772 2025] [:error] [pid 55430:tid 55448] [client 159.89.174.87:51608] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.env"] [unique_id "aR7e9vPZXaIMEU4pE7vwxwAAAM8"]
[Thu Nov 20 17:27:19.115330 2025] [:error] [pid 55340:tid 55361] [client 159.89.174.87:51624] [client 159.89.174.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aR7e9_OxD-NeMydTybCOYAAAABA"]
[Thu Nov 20 17:27:19.513965 2025] [:error] [pid 40508:tid 40528] [client 159.89.174.87:51632] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aR7e96xXNVCMW_ksxPuMBwAAApI"]
[Thu Nov 20 17:27:19.941068 2025] [:error] [pid 40508:tid 40522] [client 159.89.174.87:51642] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aR7e96xXNVCMW_ksxPuMCwAAAow"]
[Thu Nov 20 17:27:20.353670 2025] [:error] [pid 55343:tid 55410] [client 159.89.174.87:51644] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aR7e-FWlO3EnyVMV7w6j_wAAAIs"]
[Thu Nov 20 17:27:20.753277 2025] [:error] [pid 40445:tid 40492] [client 159.89.174.87:51648] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aR7e-FH-MuFcoWRjXpZAWwAAAlE"]
[Thu Nov 20 17:27:21.192882 2025] [:error] [pid 40445:tid 40481] [client 159.89.174.87:51654] [client 159.89.174.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aR7e-VH-MuFcoWRjXpZAXAAAAkY"]
[Thu Nov 20 17:30:08.471997 2025] [:error] [pid 55430:tid 55447] [client 139.59.136.184:47934] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||end2end.hostone.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aR7foPPZXaIMEU4pE7vxRAAAAM4"]
[Thu Nov 20 17:30:21.685700 2025] [:error] [pid 55340:tid 55362] [client 139.59.136.184:56524] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aR7frfOxD-NeMydTybCOrAAAABE"]
[Thu Nov 20 17:30:23.075451 2025] [:error] [pid 40445:tid 40491] [client 139.59.136.184:56528] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aR7fr1H-MuFcoWRjXpZBIgAAAlA"]
[Thu Nov 20 17:30:24.210255 2025] [:error] [pid 34405:tid 34417] [client 139.59.136.184:56532] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aR7fsDFpvu8oRK7ATfsJ1wAAAQo"]
[Thu Nov 20 17:30:25.671730 2025] [:error] [pid 40445:tid 40480] [client 139.59.136.184:56534] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aR7fsVH-MuFcoWRjXpZBKQAAAkU"]
[Thu Nov 20 17:30:27.101122 2025] [:error] [pid 55430:tid 55440] [client 139.59.136.184:56540] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/_all_dbs"] [unique_id "aR7fs_PZXaIMEU4pE7vxWwAAAMc"]
[Thu Nov 20 17:30:28.197033 2025] [:error] [pid 40636:tid 40660] [client 139.59.136.184:56546] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aR7ftAK8BWUoW3xq0HD_aAAAA5Q"]
[Thu Nov 20 17:30:29.624763 2025] [:error] [pid 55430:tid 55437] [client 139.59.136.184:46880] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aR7ftfPZXaIMEU4pE7vxXQAAAMQ"]
[Thu Nov 20 17:30:30.980833 2025] [:error] [pid 40415:tid 40432] [client 139.59.136.184:46882] [client 139.59.136.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aR7ftqhjIyLSv09svwOVVAAAAc4"]
[Thu Nov 20 17:30:32.304067 2025] [:error] [pid 55430:tid 55447] [client 139.59.136.184:46884] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aR7fuPPZXaIMEU4pE7vxXwAAAM4"]
[Thu Nov 20 17:30:33.739280 2025] [:error] [pid 55343:tid 55406] [client 139.59.136.184:46894] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aR7fuVWlO3EnyVMV7w6kqgAAAIc"]
[Thu Nov 20 17:30:35.367699 2025] [:error] [pid 40415:tid 40418] [client 139.59.136.184:46906] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aR7fu6hjIyLSv09svwOVWAAAAcA"]
[Thu Nov 20 17:30:36.761606 2025] [:error] [pid 55340:tid 55349] [client 139.59.136.184:46920] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aR7fvPOxD-NeMydTybCOwwAAAAQ"]
[Thu Nov 20 17:30:38.271285 2025] [:error] [pid 40508:tid 40526] [client 139.59.136.184:46930] [client 139.59.136.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aR7fvqxXNVCMW_ksxPuNDQAAApA"]
[Fri Nov 21 14:34:32.768268 2025] [:error] [pid 25431:tid 25502] [client 213.21.239.4:43580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aSAH-MklhXxmoIExII381gAAAI8"]
[Fri Nov 21 15:05:39.980332 2025] [:error] [pid 25430:tid 25463] [client 213.21.239.4:57616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aSAPQ6pnWJcWt_4foXke_QAAAEM"]
[Fri Nov 21 15:33:36.257598 2025] [:error] [pid 25521:tid 25542] [client 213.21.239.4:46968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAV0PhXnBMilDddn3XO3gAAANM"]
[Fri Nov 21 16:04:42.318175 2025] [:error] [pid 25554:tid 25559] [client 213.21.239.4:58210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAdGh-NtB-9AzFZrk5Y1QAAAQE"]
[Sat Nov 22 16:19:32.629269 2025] [:error] [pid 53478:tid 53513] [client 167.71.175.236:38930] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.end2end.hostone.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSFyFAhUYdXBbQswAdTR_wAAAEQ"]
[Sat Nov 22 16:19:35.701503 2025] [:error] [pid 25856:tid 25876] [client 167.71.175.236:38944] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSFyFxsTP0wy94zKUvGQQAAAARI"]
[Sat Nov 22 16:19:36.324238 2025] [:error] [pid 53477:tid 53489] [client 167.71.175.236:38946] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about"] [unique_id "aSFyGH7Lu30Ku9O40aKSZgAAAAg"]
[Sat Nov 22 16:19:36.945188 2025] [:error] [pid 53478:tid 53520] [client 167.71.175.236:38948] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aSFyGAhUYdXBbQswAdTSCQAAAEs"]
[Sat Nov 22 16:19:37.620373 2025] [:error] [pid 9547:tid 9565] [client 167.71.175.236:38950] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aSFyGdClOR5qk7DoMeF_pwAAAUw"]
[Sat Nov 22 16:19:38.244300 2025] [:error] [pid 25856:tid 25879] [client 167.71.175.236:38958] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSFyGhsTP0wy94zKUvGQRQAAARU"]
[Sat Nov 22 16:19:38.865804 2025] [:error] [pid 53479:tid 53557] [client 167.71.175.236:60158] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aSFyGm6cicFF3Aas-oRdGgAAAJU"]
[Sat Nov 22 16:19:39.488361 2025] [:error] [pid 9547:tid 9568] [client 167.71.175.236:60168] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aSFyG9ClOR5qk7DoMeF_qgAAAU8"]
[Sat Nov 22 16:19:40.112798 2025] [:error] [pid 53477:tid 53488] [client 167.71.175.236:60170] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/_all_dbs"] [unique_id "aSFyHH7Lu30Ku9O40aKSbAAAAAc"]
[Sat Nov 22 16:19:40.737817 2025] [:error] [pid 53566:tid 53591] [client 167.71.175.236:60186] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aSFyHMbSHDBkRbwMbd4GVQAAANc"]
[Sat Nov 22 16:19:41.360993 2025] [:error] [pid 9547:tid 9562] [client 167.71.175.236:60196] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.env"] [unique_id "aSFyHdClOR5qk7DoMeF_qwAAAUk"]
[Sat Nov 22 16:19:41.983938 2025] [:error] [pid 53478:tid 53529] [client 167.71.175.236:60210] [client 167.71.175.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aSFyHQhUYdXBbQswAdTSEwAAAFQ"]
[Sat Nov 22 16:19:42.604081 2025] [:error] [pid 25856:tid 25861] [client 167.71.175.236:60222] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSFyHhsTP0wy94zKUvGQTAAAAQM"]
[Sat Nov 22 16:19:43.224185 2025] [:error] [pid 53566:tid 53575] [client 167.71.175.236:60232] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aSFyH8bSHDBkRbwMbd4GWQAAAMc"]
[Sat Nov 22 16:19:43.845142 2025] [:error] [pid 25856:tid 25876] [client 167.71.175.236:60234] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aSFyHxsTP0wy94zKUvGQTwAAARI"]
[Sat Nov 22 16:19:44.466103 2025] [:error] [pid 53566:tid 53592] [client 167.71.175.236:60244] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aSFyIMbSHDBkRbwMbd4GWgAAANg"]
[Sat Nov 22 16:19:45.087133 2025] [:error] [pid 53566:tid 53570] [client 167.71.175.236:60252] [client 167.71.175.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aSFyIcbSHDBkRbwMbd4GWwAAAMI"]
[Sun Nov 23 21:25:21.672517 2025] [:error] [pid 17534:tid 17549] [client 172.71.172.9:9383] [client 172.71.172.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aSMLQXPX9nXBrhgM8syYSgAAAc0"]
[Mon Nov 24 15:40:06.169084 2025] [:error] [pid 16516:tid 16542] [client 206.189.19.19:53196] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||end2end.hostone.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "end2end.hostone.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSQL1vqZbniwaNwL8XnWNwAAARc"]
[Mon Nov 24 15:40:09.586421 2025] [:error] [pid 48600:tid 48642] [client 206.189.19.19:41384] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSQL2ftOzSUAQvWVjBdrpwAAAcw"]
[Mon Nov 24 15:40:10.369322 2025] [:error] [pid 16441:tid 16446] [client 206.189.19.19:41386] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about"] [unique_id "aSQL2oq_bc5MOa9HflkTrgAAAII"]
[Mon Nov 24 15:40:11.189241 2025] [:error] [pid 9630:tid 9642] [client 206.189.19.19:41392] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/debug/default/view"] [unique_id "aSQL2yrSgUgPGkizt2rXWAAAAEo"]
[Mon Nov 24 15:40:11.963297 2025] [:error] [pid 9630:tid 9652] [client 206.189.19.19:41408] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2/_catalog"] [unique_id "aSQL2yrSgUgPGkizt2rXWwAAAFQ"]
[Mon Nov 24 15:40:12.738844 2025] [:error] [pid 16593:tid 16613] [client 206.189.19.19:41414] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSQL3BVGznHBJI2LKpQuYQAAApI"]
[Mon Nov 24 15:40:13.515185 2025] [:error] [pid 16593:tid 16607] [client 206.189.19.19:41420] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/server-status"] [unique_id "aSQL3RVGznHBJI2LKpQuYgAAAow"]
[Mon Nov 24 15:40:14.291690 2025] [:error] [pid 16549:tid 16561] [client 206.189.19.19:41434] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/login.action"] [unique_id "aSQL3qeWW19A99PUw_crUwAAAUk"]
[Mon Nov 24 15:40:15.072617 2025] [:error] [pid 49900:tid 49906] [client 206.189.19.19:41450] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/_all_dbs"] [unique_id "aSQL3zCyPLrvg06aorn4BgAAAAQ"]
[Mon Nov 24 15:40:15.847129 2025] [:error] [pid 16549:tid 16565] [client 206.189.19.19:41464] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "aSQL36eWW19A99PUw_crVAAAAU0"]
[Mon Nov 24 15:40:16.623360 2025] [:error] [pid 16516:tid 16537] [client 206.189.19.19:41470] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aSQL4PqZbniwaNwL8XnWOwAAARI"]
[Mon Nov 24 15:40:17.398538 2025] [:error] [pid 16549:tid 16574] [client 206.189.19.19:41474] [client 206.189.19.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aSQL4aeWW19A99PUw_crVwAAAVU"]
[Mon Nov 24 15:40:18.203594 2025] [:error] [pid 16516:tid 16543] [client 206.189.19.19:41486] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSQL4vqZbniwaNwL8XnWPAAAARg"]
[Mon Nov 24 15:40:19.033599 2025] [:error] [pid 16441:tid 16449] [client 206.189.19.19:38552] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/config.json"] [unique_id "aSQL44q_bc5MOa9HflkTtwAAAIU"]
[Mon Nov 24 15:40:19.809455 2025] [:error] [pid 16593:tid 16598] [client 206.189.19.19:38560] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/telescope/requests"] [unique_id "aSQL4xVGznHBJI2LKpQuaQAAAoM"]
[Mon Nov 24 15:40:20.668830 2025] [:error] [pid 48600:tid 48647] [client 206.189.19.19:38568] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aSQL5PtOzSUAQvWVjBdrrgAAAdE"]
[Mon Nov 24 15:40:21.514832 2025] [:error] [pid 9630:tid 9648] [client 206.189.19.19:38578] [client 206.189.19.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aSQL5SrSgUgPGkizt2rXdAAAAFA"]
[Wed Dec 03 01:43:09.838925 2025] [autoindex:error] [pid 47069:tid 47147] [client 159.65.11.4:65398] AH01276: Cannot serve directory /home/end2endh/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 06:56:52.535842 2025] [autoindex:error] [pid 34110:tid 34175] [client 159.223.88.43:57848] AH01276: Cannot serve directory /home/end2endh/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 13:47:32.009147 2025] [:error] [pid 36068:tid 36086] [client 85.209.135.111:37442] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aTUU9FGuxqM4ZYob8lPG1wAAABA"]
[Thu Dec 11 10:32:41.469171 2025] [autoindex:error] [pid 57992:tid 58051] [client 157.245.203.186:60499] AH01276: Cannot serve directory /home/end2endh/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 00:05:22.743314 2025] [:error] [pid 16861:tid 16889] [client 158.69.227.165:42338] [client 158.69.227.165] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "52.167.144.199_3d3ac58d8463837308f32ae367c2da2fbbbe11de"): Internal error (specific information not available) [hostname "end2end.hostone.com.au"] [uri "/.well-known/acme-challenge/b7a5db8538152a81beb009dc6f0b7504key"] [unique_id "aULUwVmas3wxi8EVIZrsPAAAAoI"]
[Thu Dec 18 23:56:45.302654 2025] [:error] [pid 12239:tid 12253] [client 43.157.109.70:52426] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aUQkPdNnXxfGIuWO6alFDQAAAok"]
[Thu Dec 18 23:56:45.833377 2025] [:error] [pid 24958:tid 24975] [client 43.157.109.70:54173] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aUQkPckDOrUkd0wNm2HlfQAAAY4"]
[Thu Dec 18 23:56:46.361045 2025] [:error] [pid 24542:tid 24562] [client 43.157.109.70:54985] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aUQkPktQz4H2oS3NrDZH-QAAAVI"]
[Thu Dec 18 23:56:46.885048 2025] [:error] [pid 24542:tid 24564] [client 43.157.109.70:55579] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aUQkPktQz4H2oS3NrDZICgAAAVQ"]
[Thu Dec 18 23:56:47.411879 2025] [:error] [pid 24433:tid 24443] [client 43.157.109.70:56460] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aUQkP54pN9ycmipm8Tj0awAAAQc"]
[Fri Dec 19 04:42:41.909047 2025] [:error] [pid 62008:tid 62028] [client 43.157.109.70:61815] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aURnQZJCOG7NAlbm_ORNHQAAANE"]
[Fri Dec 19 04:42:42.658879 2025] [:error] [pid 61922:tid 61972] [client 43.157.109.70:62357] [client 43.157.109.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aURnQhsDXYvsvN0FFlAk5QAAAFQ"]
[Wed Dec 24 17:48:42.405888 2025] [:error] [pid 16466:tid 16475] [client 192.42.116.219:15435] [client 192.42.116.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aUu2-ru0JcuKJMjJn6wgUgAAAAU"]
[Sat Dec 27 02:28:50.293796 2025] [:error] [pid 47566:tid 47587] [client 20.89.192.52:1070] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU7T4qyYgLfR4YwO7byWOQAAARI"]
[Sat Dec 27 02:28:50.647257 2025] [:error] [pid 34188:tid 34222] [client 20.89.192.52:1490] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU7T4g54j0mXgip5BAG67wAAAEI"]
[Sat Dec 27 02:28:51.010605 2025] [:error] [pid 34189:tid 34253] [client 20.89.192.52:1037] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU7T4wnn007DnMwSsfc5XgAAAIY"]
[Sat Dec 27 02:28:51.337034 2025] [:error] [pid 34189:tid 34250] [client 20.89.192.52:1495] [client 20.89.192.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aU7T4wnn007DnMwSsfc5XwAAAIM"]
[Sun Dec 28 09:11:23.301057 2025] [:error] [pid 42293:tid 42337] [client 54.205.17.85:51836] [client 54.205.17.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aVCDu8vc9B-5cwN385JR2wAAAE4"]
[Fri Jan 02 01:18:33.298749 2026] [:error] [pid 51579:tid 51585] [client 104.28.235.58:62744] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aVasaUQ-wUxlj5k_dbml3AAAAAQ"]
[Fri Jan 02 01:18:36.734225 2026] [:error] [pid 19583:tid 19593] [client 104.28.235.58:62752] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/style.php"] [unique_id "aVasbCtltYb8hAZpm4tU0gAAAQc"]
[Fri Jan 02 01:18:37.156466 2026] [:error] [pid 51579:tid 51601] [client 104.28.235.58:62754] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aVasbUQ-wUxlj5k_dbml4wAAABQ"]
[Fri Jan 02 01:18:44.613210 2026] [:error] [pid 19583:tid 19602] [client 104.28.235.58:62525] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/style.php"] [unique_id "aVasdCtltYb8hAZpm4tU1wAAARA"]
[Fri Jan 02 01:18:46.038217 2026] [:error] [pid 19496:tid 19542] [client 104.28.235.58:62533] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/style.php"] [unique_id "aVasdmM9BBPu2JyEzYsMLQAAAI4"]
[Fri Jan 02 01:18:46.450664 2026] [:error] [pid 19583:tid 19600] [client 104.28.235.58:62536] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aVasditltYb8hAZpm4tU2wAAAQ4"]
[Fri Jan 02 01:18:47.868905 2026] [:error] [pid 19496:tid 19536] [client 104.28.235.58:62885] [client 104.28.235.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/file.php"] [unique_id "aVasd2M9BBPu2JyEzYsMMAAAAIg"]
[Fri Jan 02 21:34:17.838376 2026] [:error] [pid 63098:tid 63127] [client 4.213.18.60:15519] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/51.php"] [unique_id "aVfJWcez9k78gUs48kpnkgAAABQ"]
[Fri Jan 02 21:34:18.115588 2026] [:error] [pid 29316:tid 29324] [client 4.213.18.60:15568] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/51.php"] [unique_id "aVfJWtfT9ty-7jZmgf-1wwAAAQY"]
[Fri Jan 02 21:34:18.395651 2026] [:error] [pid 63098:tid 63124] [client 4.213.18.60:15590] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/51.php"] [unique_id "aVfJWsez9k78gUs48kpnkwAAABE"]
[Fri Jan 02 21:34:18.672189 2026] [:error] [pid 63100:tid 63176] [client 4.213.18.60:15584] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/51.php"] [unique_id "aVfJWjuUXUKd3KTnKl9VLwAAAI8"]
[Fri Jan 02 21:34:18.944252 2026] [:error] [pid 43358:tid 43374] [client 4.213.18.60:15514] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "aVfJWgncbHK9auzvrA9dLQAAAc4"]
[Fri Jan 02 21:34:19.217419 2026] [:error] [pid 50186:tid 50196] [client 4.213.18.60:15552] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "aVfJW1XqK_iX4f-S70J_5gAAAYg"]
[Fri Jan 02 21:34:19.504864 2026] [:error] [pid 29316:tid 29319] [client 4.213.18.60:15594] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "aVfJW9fT9ty-7jZmgf-1xQAAAQE"]
[Fri Jan 02 21:34:19.787979 2026] [:error] [pid 50186:tid 50188] [client 4.213.18.60:15555] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "aVfJW1XqK_iX4f-S70J_5wAAAYA"]
[Fri Jan 02 21:34:20.093294 2026] [:error] [pid 63099:tid 63153] [client 4.213.18.60:15611] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "aVfJXMmCZokRPYUhzvjCbwAAAFM"]
[Fri Jan 02 21:34:20.370025 2026] [:error] [pid 63208:tid 63212] [client 4.213.18.60:15504] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "aVfJXHKLI9INGPLzfndMCAAAAME"]
[Fri Jan 02 21:34:20.644170 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:15566] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "aVfJXMez9k78gUs48kpnlAAAABg"]
[Fri Jan 02 21:34:20.941084 2026] [:error] [pid 63098:tid 63128] [client 4.213.18.60:15511] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "aVfJXMez9k78gUs48kpnlgAAABU"]
[Fri Jan 02 21:34:21.232373 2026] [:error] [pid 63098:tid 63112] [client 4.213.18.60:15494] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f2f.php"] [unique_id "aVfJXcez9k78gUs48kpnmgAAAAU"]
[Fri Jan 02 21:34:21.513491 2026] [:error] [pid 63099:tid 63143] [client 4.213.18.60:15508] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f2f.php"] [unique_id "aVfJXcmCZokRPYUhzvjCcAAAAEk"]
[Fri Jan 02 21:34:21.823163 2026] [:error] [pid 63098:tid 63123] [client 4.213.18.60:15579] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f2f.php"] [unique_id "aVfJXcez9k78gUs48kpnnQAAABA"]
[Fri Jan 02 21:34:22.095670 2026] [:error] [pid 63098:tid 63118] [client 4.213.18.60:15591] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f2f.php"] [unique_id "aVfJXsez9k78gUs48kpnoAAAAAs"]
[Fri Jan 02 21:34:22.371970 2026] [:error] [pid 63100:tid 63179] [client 4.213.18.60:15563] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ths.php"] [unique_id "aVfJXjuUXUKd3KTnKl9VMAAAAJI"]
[Fri Jan 02 21:34:22.646473 2026] [:error] [pid 63098:tid 63124] [client 4.213.18.60:15571] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ths.php"] [unique_id "aVfJXsez9k78gUs48kpnowAAABE"]
[Fri Jan 02 21:34:22.922052 2026] [:error] [pid 43358:tid 43377] [client 4.213.18.60:15492] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ths.php"] [unique_id "aVfJXgncbHK9auzvrA9dNQAAAdE"]
[Fri Jan 02 21:34:23.237539 2026] [:error] [pid 63099:tid 63138] [client 4.213.18.60:15559] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ths.php"] [unique_id "aVfJX8mCZokRPYUhzvjCcQAAAEQ"]
[Fri Jan 02 21:34:23.537663 2026] [:error] [pid 63100:tid 63169] [client 4.213.18.60:15509] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xw.php"] [unique_id "aVfJXzuUXUKd3KTnKl9VMgAAAIg"]
[Fri Jan 02 21:34:23.813999 2026] [:error] [pid 63100:tid 63183] [client 4.213.18.60:15587] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xw.php"] [unique_id "aVfJXzuUXUKd3KTnKl9VMwAAAJY"]
[Fri Jan 02 21:34:24.092883 2026] [:error] [pid 63099:tid 63150] [client 4.213.18.60:15534] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xw.php"] [unique_id "aVfJYMmCZokRPYUhzvjCcwAAAFA"]
[Fri Jan 02 21:34:24.394992 2026] [:error] [pid 43358:tid 43370] [client 4.213.18.60:15582] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xw.php"] [unique_id "aVfJYAncbHK9auzvrA9dOAAAAco"]
[Fri Jan 02 21:34:24.686479 2026] [:error] [pid 63099:tid 63157] [client 4.213.18.60:15613] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma.php"] [unique_id "aVfJYMmCZokRPYUhzvjCdAAAAFc"]
[Fri Jan 02 21:34:24.958385 2026] [:error] [pid 63099:tid 63145] [client 4.213.18.60:15570] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma.php"] [unique_id "aVfJYMmCZokRPYUhzvjCdQAAAEs"]
[Fri Jan 02 21:34:25.290460 2026] [:error] [pid 63099:tid 63158] [client 4.213.18.60:15615] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma.php"] [unique_id "aVfJYcmCZokRPYUhzvjCdgAAAFg"]
[Fri Jan 02 21:34:25.581880 2026] [:error] [pid 29316:tid 29328] [client 4.213.18.60:15516] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma.php"] [unique_id "aVfJYdfT9ty-7jZmgf-1xwAAAQo"]
[Fri Jan 02 21:34:25.883375 2026] [:error] [pid 63208:tid 63213] [client 4.213.18.60:7124] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lanz.php"] [unique_id "aVfJYXKLI9INGPLzfndMCgAAAMI"]
[Fri Jan 02 21:34:26.182115 2026] [:error] [pid 63099:tid 63146] [client 4.213.18.60:15529] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lanz.php"] [unique_id "aVfJYsmCZokRPYUhzvjCegAAAEw"]
[Fri Jan 02 21:34:26.489313 2026] [:error] [pid 63098:tid 63122] [client 4.213.18.60:15490] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lanz.php"] [unique_id "aVfJYsez9k78gUs48kpnqQAAAA8"]
[Fri Jan 02 21:34:26.762712 2026] [:error] [pid 63100:tid 63185] [client 4.213.18.60:15502] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lanz.php"] [unique_id "aVfJYjuUXUKd3KTnKl9VNgAAAJg"]
[Fri Jan 02 21:34:27.040407 2026] [:error] [pid 50046:tid 50048] [client 4.213.18.60:7157] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xeeex.php"] [unique_id "aVfJYyzv7fgIiwkQYNC0UQAAAUA"]
[Fri Jan 02 21:34:27.345228 2026] [:error] [pid 63098:tid 63126] [client 4.213.18.60:15489] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xeeex.php"] [unique_id "aVfJY8ez9k78gUs48kpnqwAAABM"]
[Fri Jan 02 21:34:27.618335 2026] [:error] [pid 63098:tid 63130] [client 4.213.18.60:15586] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xeeex.php"] [unique_id "aVfJY8ez9k78gUs48kpnrQAAABc"]
[Fri Jan 02 21:34:27.910752 2026] [:error] [pid 63098:tid 63107] [client 4.213.18.60:7121] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xeeex.php"] [unique_id "aVfJY8ez9k78gUs48kpnsAAAAAA"]
[Fri Jan 02 21:34:28.211842 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:15551] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tons.php"] [unique_id "aVfJZMez9k78gUs48kpntAAAABg"]
[Fri Jan 02 21:34:28.490153 2026] [:error] [pid 50046:tid 50067] [client 4.213.18.60:15593] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tons.php"] [unique_id "aVfJZCzv7fgIiwkQYNC0UwAAAVM"]
[Fri Jan 02 21:34:28.765465 2026] [:error] [pid 63100:tid 63167] [client 4.213.18.60:15581] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tons.php"] [unique_id "aVfJZDuUXUKd3KTnKl9VNwAAAIY"]
[Fri Jan 02 21:34:29.056642 2026] [:error] [pid 29316:tid 29323] [client 4.213.18.60:7129] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tons.php"] [unique_id "aVfJZdfT9ty-7jZmgf-1ywAAAQU"]
[Fri Jan 02 21:34:29.336773 2026] [:error] [pid 29316:tid 29326] [client 4.213.18.60:15592] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gm.php"] [unique_id "aVfJZdfT9ty-7jZmgf-1zQAAAQg"]
[Fri Jan 02 21:34:29.609433 2026] [:error] [pid 43358:tid 43380] [client 4.213.18.60:15612] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gm.php"] [unique_id "aVfJZQncbHK9auzvrA9dPgAAAdQ"]
[Fri Jan 02 21:34:29.882659 2026] [:error] [pid 63098:tid 63130] [client 4.213.18.60:15580] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gm.php"] [unique_id "aVfJZcez9k78gUs48kpnwgAAABc"]
[Fri Jan 02 21:34:30.170855 2026] [:error] [pid 43358:tid 43364] [client 4.213.18.60:15575] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gm.php"] [unique_id "aVfJZgncbHK9auzvrA9dQQAAAcQ"]
[Fri Jan 02 21:34:30.470511 2026] [:error] [pid 50046:tid 50054] [client 4.213.18.60:15558] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aVfJZizv7fgIiwkQYNC0VgAAAUY"]
[Fri Jan 02 21:34:30.746220 2026] [:error] [pid 63208:tid 63211] [client 4.213.18.60:15509] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aVfJZnKLI9INGPLzfndMCwAAAMA"]
[Fri Jan 02 21:34:31.044223 2026] [:error] [pid 63208:tid 63222] [client 4.213.18.60:15499] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aVfJZ3KLI9INGPLzfndMDAAAAMs"]
[Fri Jan 02 21:34:31.321778 2026] [:error] [pid 29316:tid 29334] [client 4.213.18.60:15527] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aVfJZ9fT9ty-7jZmgf-1zgAAARA"]
[Fri Jan 02 21:34:31.607904 2026] [:error] [pid 43358:tid 43361] [client 4.213.18.60:15556] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asf.php"] [unique_id "aVfJZwncbHK9auzvrA9dQgAAAcE"]
[Fri Jan 02 21:34:31.880536 2026] [:error] [pid 63098:tid 63114] [client 4.213.18.60:15560] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asf.php"] [unique_id "aVfJZ8ez9k78gUs48kpnywAAAAc"]
[Fri Jan 02 21:34:32.154000 2026] [:error] [pid 43358:tid 43363] [client 4.213.18.60:15598] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asf.php"] [unique_id "aVfJaAncbHK9auzvrA9dRgAAAcM"]
[Fri Jan 02 21:34:32.426886 2026] [:error] [pid 63098:tid 63128] [client 4.213.18.60:7145] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asf.php"] [unique_id "aVfJaMez9k78gUs48kpnzwAAABU"]
[Fri Jan 02 21:34:32.700120 2026] [:error] [pid 63208:tid 63232] [client 4.213.18.60:15501] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f8.php"] [unique_id "aVfJaHKLI9INGPLzfndMDwAAANU"]
[Fri Jan 02 21:34:32.994863 2026] [:error] [pid 50046:tid 50068] [client 4.213.18.60:15596] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f8.php"] [unique_id "aVfJaCzv7fgIiwkQYNC0WAAAAVQ"]
[Fri Jan 02 21:34:33.289854 2026] [:error] [pid 50046:tid 50064] [client 4.213.18.60:15585] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f8.php"] [unique_id "aVfJaSzv7fgIiwkQYNC0WgAAAVA"]
[Fri Jan 02 21:34:33.591752 2026] [:error] [pid 63098:tid 63125] [client 4.213.18.60:15608] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f8.php"] [unique_id "aVfJacez9k78gUs48kpn0gAAABI"]
[Fri Jan 02 21:34:33.881060 2026] [:error] [pid 29316:tid 29333] [client 4.213.18.60:15569] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bras.php"] [unique_id "aVfJadfT9ty-7jZmgf-10QAAAQ8"]
[Fri Jan 02 21:34:34.187232 2026] [:error] [pid 29316:tid 29340] [client 4.213.18.60:15605] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bras.php"] [unique_id "aVfJatfT9ty-7jZmgf-10wAAARY"]
[Fri Jan 02 21:34:34.503606 2026] [:error] [pid 50046:tid 50066] [client 4.213.18.60:15507] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bras.php"] [unique_id "aVfJaizv7fgIiwkQYNC0WwAAAVI"]
[Fri Jan 02 21:34:34.789323 2026] [:error] [pid 50046:tid 50051] [client 4.213.18.60:15586] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bras.php"] [unique_id "aVfJaizv7fgIiwkQYNC0XgAAAUM"]
[Fri Jan 02 21:34:35.067657 2026] [:error] [pid 63099:tid 63155] [client 4.213.18.60:15512] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an8.php"] [unique_id "aVfJa8mCZokRPYUhzvjChAAAAFU"]
[Fri Jan 02 21:34:35.367051 2026] [:error] [pid 29316:tid 29335] [client 4.213.18.60:15510] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an8.php"] [unique_id "aVfJa9fT9ty-7jZmgf-11wAAARE"]
[Fri Jan 02 21:34:35.675132 2026] [:error] [pid 29316:tid 29328] [client 4.213.18.60:15506] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an8.php"] [unique_id "aVfJa9fT9ty-7jZmgf-12QAAAQo"]
[Fri Jan 02 21:34:35.987472 2026] [:error] [pid 63098:tid 63126] [client 4.213.18.60:15550] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an8.php"] [unique_id "aVfJa8ez9k78gUs48kpn1AAAABM"]
[Fri Jan 02 21:34:36.260814 2026] [:error] [pid 29316:tid 29341] [client 4.213.18.60:15495] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/esp.php"] [unique_id "aVfJbNfT9ty-7jZmgf-12gAAARc"]
[Fri Jan 02 21:34:36.534433 2026] [:error] [pid 43358:tid 43383] [client 4.213.18.60:15538] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/esp.php"] [unique_id "aVfJbAncbHK9auzvrA9dSwAAAdc"]
[Fri Jan 02 21:34:36.808099 2026] [:error] [pid 63208:tid 63225] [client 4.213.18.60:15577] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/esp.php"] [unique_id "aVfJbHKLI9INGPLzfndMGAAAAM4"]
[Fri Jan 02 21:34:37.081089 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:7111] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/esp.php"] [unique_id "aVfJbVXqK_iX4f-S70J_8gAAAZA"]
[Fri Jan 02 21:34:37.364857 2026] [:error] [pid 63208:tid 63219] [client 4.213.18.60:15603] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/21x.php"] [unique_id "aVfJbXKLI9INGPLzfndMGgAAAMg"]
[Fri Jan 02 21:34:37.670288 2026] [:error] [pid 63099:tid 63134] [client 4.213.18.60:15614] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/21x.php"] [unique_id "aVfJbcmCZokRPYUhzvjChgAAAEA"]
[Fri Jan 02 21:34:37.947060 2026] [:error] [pid 63098:tid 63127] [client 4.213.18.60:15595] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/21x.php"] [unique_id "aVfJbcez9k78gUs48kpn3AAAABQ"]
[Fri Jan 02 21:34:38.244351 2026] [:error] [pid 29316:tid 29322] [client 4.213.18.60:15562] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/21x.php"] [unique_id "aVfJbtfT9ty-7jZmgf-13AAAAQQ"]
[Fri Jan 02 21:34:38.518345 2026] [:error] [pid 50046:tid 50064] [client 4.213.18.60:15515] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xe.php"] [unique_id "aVfJbizv7fgIiwkQYNC0aAAAAVA"]
[Fri Jan 02 21:34:38.835719 2026] [:error] [pid 43358:tid 43369] [client 4.213.18.60:7166] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xe.php"] [unique_id "aVfJbgncbHK9auzvrA9dTAAAAck"]
[Fri Jan 02 21:34:39.108376 2026] [:error] [pid 50046:tid 50065] [client 4.213.18.60:15496] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xe.php"] [unique_id "aVfJbyzv7fgIiwkQYNC0aQAAAVE"]
[Fri Jan 02 21:34:39.381941 2026] [:error] [pid 63208:tid 63215] [client 4.213.18.60:7119] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xe.php"] [unique_id "aVfJb3KLI9INGPLzfndMHgAAAMQ"]
[Fri Jan 02 21:34:39.657974 2026] [:error] [pid 50186:tid 50208] [client 4.213.18.60:15525] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aVfJb1XqK_iX4f-S70J_9gAAAZQ"]
[Fri Jan 02 21:34:39.951637 2026] [:error] [pid 50186:tid 50207] [client 4.213.18.60:7138] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aVfJb1XqK_iX4f-S70J_9wAAAZM"]
[Fri Jan 02 21:34:40.241606 2026] [:error] [pid 63098:tid 63112] [client 4.213.18.60:7126] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aVfJcMez9k78gUs48kpn4QAAAAU"]
[Fri Jan 02 21:34:40.533310 2026] [:error] [pid 63100:tid 63181] [client 4.213.18.60:15583] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aVfJcDuUXUKd3KTnKl9VOgAAAJQ"]
[Fri Jan 02 21:34:40.824881 2026] [:error] [pid 63100:tid 63166] [client 4.213.18.60:15505] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws35.php"] [unique_id "aVfJcDuUXUKd3KTnKl9VPAAAAIU"]
[Fri Jan 02 21:34:41.099936 2026] [:error] [pid 63100:tid 63171] [client 4.213.18.60:7155] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws35.php"] [unique_id "aVfJcTuUXUKd3KTnKl9VPgAAAIo"]
[Fri Jan 02 21:34:41.372717 2026] [:error] [pid 63098:tid 63126] [client 4.213.18.60:15522] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws35.php"] [unique_id "aVfJccez9k78gUs48kpn5AAAABM"]
[Fri Jan 02 21:34:41.646437 2026] [:error] [pid 63100:tid 63182] [client 4.213.18.60:7125] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws35.php"] [unique_id "aVfJcTuUXUKd3KTnKl9VQQAAAJU"]
[Fri Jan 02 21:34:41.957178 2026] [:error] [pid 63100:tid 63178] [client 4.213.18.60:15541] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJcTuUXUKd3KTnKl9VRQAAAJE"]
[Fri Jan 02 21:34:42.230922 2026] [:error] [pid 29316:tid 29325] [client 4.213.18.60:15533] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJctfT9ty-7jZmgf-14gAAAQc"]
[Fri Jan 02 21:34:42.525338 2026] [:error] [pid 63100:tid 63172] [client 4.213.18.60:15500] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJcjuUXUKd3KTnKl9VRwAAAIs"]
[Fri Jan 02 21:34:42.800143 2026] [:error] [pid 63208:tid 63216] [client 4.213.18.60:7114] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJcnKLI9INGPLzfndMIgAAAMU"]
[Fri Jan 02 21:34:43.079385 2026] [:error] [pid 50046:tid 50066] [client 4.213.18.60:15601] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws13.php"] [unique_id "aVfJcyzv7fgIiwkQYNC0awAAAVI"]
[Fri Jan 02 21:34:43.395866 2026] [:error] [pid 63100:tid 63174] [client 4.213.18.60:15493] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws13.php"] [unique_id "aVfJczuUXUKd3KTnKl9VSAAAAI0"]
[Fri Jan 02 21:34:43.696331 2026] [:error] [pid 50046:tid 50051] [client 4.213.18.60:15602] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws13.php"] [unique_id "aVfJcyzv7fgIiwkQYNC0bAAAAUM"]
[Fri Jan 02 21:34:43.985476 2026] [:error] [pid 50186:tid 50205] [client 4.213.18.60:15535] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws13.php"] [unique_id "aVfJc1XqK_iX4f-S70J__wAAAZE"]
[Fri Jan 02 21:34:44.272267 2026] [:error] [pid 63208:tid 63214] [client 4.213.18.60:7087] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss1.php"] [unique_id "aVfJdHKLI9INGPLzfndMJgAAAMM"]
[Fri Jan 02 21:34:44.544894 2026] [:error] [pid 29316:tid 29324] [client 4.213.18.60:15604] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss1.php"] [unique_id "aVfJdNfT9ty-7jZmgf-15AAAAQY"]
[Fri Jan 02 21:34:44.853715 2026] [:error] [pid 63098:tid 63130] [client 4.213.18.60:7151] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss1.php"] [unique_id "aVfJdMez9k78gUs48kpn5gAAABc"]
[Fri Jan 02 21:34:45.124722 2026] [:error] [pid 50046:tid 50048] [client 4.213.18.60:7133] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss1.php"] [unique_id "aVfJdSzv7fgIiwkQYNC0cQAAAUA"]
[Fri Jan 02 21:34:45.405213 2026] [:error] [pid 29316:tid 29333] [client 4.213.18.60:7122] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww7.php"] [unique_id "aVfJddfT9ty-7jZmgf-15gAAAQ8"]
[Fri Jan 02 21:34:45.692341 2026] [:error] [pid 50186:tid 50189] [client 4.213.18.60:15517] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww7.php"] [unique_id "aVfJdVXqK_iX4f-S70KAAAAAAYE"]
[Fri Jan 02 21:34:46.025873 2026] [:error] [pid 63099:tid 63152] [client 4.213.18.60:7115] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww7.php"] [unique_id "aVfJdsmCZokRPYUhzvjCkAAAAFI"]
[Fri Jan 02 21:34:46.376968 2026] [:error] [pid 29316:tid 29340] [client 4.213.18.60:15536] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww7.php"] [unique_id "aVfJdtfT9ty-7jZmgf-15wAAARY"]
[Fri Jan 02 21:34:46.650908 2026] [:error] [pid 63208:tid 63222] [client 4.213.18.60:7131] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aVfJdnKLI9INGPLzfndMKQAAAMs"]
[Fri Jan 02 21:34:46.922081 2026] [:error] [pid 63099:tid 63138] [client 4.213.18.60:15607] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aVfJdsmCZokRPYUhzvjCkgAAAEQ"]
[Fri Jan 02 21:34:47.197269 2026] [:error] [pid 63208:tid 63211] [client 4.213.18.60:15610] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aVfJd3KLI9INGPLzfndMKgAAAMA"]
[Fri Jan 02 21:34:47.468475 2026] [:error] [pid 63208:tid 63218] [client 4.213.18.60:15520] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aVfJd3KLI9INGPLzfndMKwAAAMc"]
[Fri Jan 02 21:34:47.749119 2026] [:error] [pid 29316:tid 29329] [client 4.213.18.60:15567] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lisa.php"] [unique_id "aVfJd9fT9ty-7jZmgf-16wAAAQs"]
[Fri Jan 02 21:34:48.022633 2026] [:error] [pid 50046:tid 50067] [client 4.213.18.60:15531] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lisa.php"] [unique_id "aVfJeCzv7fgIiwkQYNC0cwAAAVM"]
[Fri Jan 02 21:34:48.295380 2026] [:error] [pid 63099:tid 63158] [client 4.213.18.60:15599] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lisa.php"] [unique_id "aVfJeMmCZokRPYUhzvjClgAAAFg"]
[Fri Jan 02 21:34:48.567006 2026] [:error] [pid 63208:tid 63215] [client 4.213.18.60:15513] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lisa.php"] [unique_id "aVfJeHKLI9INGPLzfndMLAAAAMQ"]
[Fri Jan 02 21:34:48.842487 2026] [:error] [pid 63098:tid 63109] [client 4.213.18.60:7149] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aVfJeMez9k78gUs48kpn7gAAAAI"]
[Fri Jan 02 21:34:49.129853 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:15503] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aVfJecez9k78gUs48kpn8QAAABg"]
[Fri Jan 02 21:34:49.405734 2026] [:error] [pid 50186:tid 50202] [client 4.213.18.60:15572] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aVfJeVXqK_iX4f-S70KABgAAAY4"]
[Fri Jan 02 21:34:49.680093 2026] [:error] [pid 29316:tid 29326] [client 4.213.18.60:7167] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aVfJedfT9ty-7jZmgf-18AAAAQg"]
[Fri Jan 02 21:34:49.952340 2026] [:error] [pid 63208:tid 63232] [client 4.213.18.60:7044] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxxx.php"] [unique_id "aVfJeXKLI9INGPLzfndMLQAAANU"]
[Fri Jan 02 21:34:50.225278 2026] [:error] [pid 29316:tid 29331] [client 4.213.18.60:15523] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxxx.php"] [unique_id "aVfJetfT9ty-7jZmgf-18QAAAQ0"]
[Fri Jan 02 21:34:50.516494 2026] [:error] [pid 63098:tid 63122] [client 4.213.18.60:15539] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxxx.php"] [unique_id "aVfJesez9k78gUs48kpn9QAAAA8"]
[Fri Jan 02 21:34:50.799513 2026] [:error] [pid 29316:tid 29320] [client 4.213.18.60:15609] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxxx.php"] [unique_id "aVfJetfT9ty-7jZmgf-18gAAAQI"]
[Fri Jan 02 21:34:51.076843 2026] [:error] [pid 50046:tid 50050] [client 4.213.18.60:7137] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aVfJeyzv7fgIiwkQYNC0dQAAAUI"]
[Fri Jan 02 21:34:51.351417 2026] [:error] [pid 50186:tid 50191] [client 4.213.18.60:7120] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aVfJe1XqK_iX4f-S70KADgAAAYM"]
[Fri Jan 02 21:34:51.639805 2026] [:error] [pid 29316:tid 29340] [client 4.213.18.60:15564] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aVfJe9fT9ty-7jZmgf-1-QAAARY"]
[Fri Jan 02 21:34:51.926490 2026] [:error] [pid 63098:tid 63129] [client 4.213.18.60:15510] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aVfJe8ez9k78gUs48kpn-AAAABY"]
[Fri Jan 02 21:34:52.266387 2026] [:error] [pid 50186:tid 50209] [client 4.213.18.60:7127] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless.php"] [unique_id "aVfJfFXqK_iX4f-S70KADwAAAZU"]
[Fri Jan 02 21:34:52.545056 2026] [:error] [pid 43358:tid 43374] [client 4.213.18.60:7117] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless.php"] [unique_id "aVfJfAncbHK9auzvrA9dWwAAAc4"]
[Fri Jan 02 21:34:52.826493 2026] [:error] [pid 50186:tid 50211] [client 4.213.18.60:15542] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless.php"] [unique_id "aVfJfFXqK_iX4f-S70KAEAAAAZc"]
[Fri Jan 02 21:34:53.101470 2026] [:error] [pid 50186:tid 50192] [client 4.213.18.60:15528] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless.php"] [unique_id "aVfJfVXqK_iX4f-S70KAEwAAAYQ"]
[Fri Jan 02 21:34:53.398046 2026] [:error] [pid 43358:tid 43380] [client 4.213.18.60:15521] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rtx.php"] [unique_id "aVfJfQncbHK9auzvrA9dXQAAAdQ"]
[Fri Jan 02 21:34:53.670682 2026] [:error] [pid 50186:tid 50207] [client 4.213.18.60:6983] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rtx.php"] [unique_id "aVfJfVXqK_iX4f-S70KAGQAAAZM"]
[Fri Jan 02 21:34:53.942276 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:7108] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rtx.php"] [unique_id "aVfJfVXqK_iX4f-S70KAHAAAAZI"]
[Fri Jan 02 21:34:54.222627 2026] [:error] [pid 50046:tid 50057] [client 4.213.18.60:15548] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rtx.php"] [unique_id "aVfJfizv7fgIiwkQYNC0dwAAAUk"]
[Fri Jan 02 21:34:54.536408 2026] [:error] [pid 63098:tid 63119] [client 4.213.18.60:15544] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bipas.php"] [unique_id "aVfJfsez9k78gUs48kpn-gAAAAw"]
[Fri Jan 02 21:34:54.839489 2026] [:error] [pid 63208:tid 63212] [client 4.213.18.60:7042] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bipas.php"] [unique_id "aVfJfnKLI9INGPLzfndMMAAAAME"]
[Fri Jan 02 21:34:55.124739 2026] [:error] [pid 29316:tid 29323] [client 4.213.18.60:15578] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bipas.php"] [unique_id "aVfJf9fT9ty-7jZmgf-2BAAAAQU"]
[Fri Jan 02 21:34:55.400397 2026] [:error] [pid 63100:tid 63164] [client 4.213.18.60:7062] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bipas.php"] [unique_id "aVfJfzuUXUKd3KTnKl9VUQAAAIM"]
[Fri Jan 02 21:34:55.674281 2026] [:error] [pid 50186:tid 50198] [client 4.213.18.60:15540] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/conte.php"] [unique_id "aVfJf1XqK_iX4f-S70KAIQAAAYo"]
[Fri Jan 02 21:34:55.954672 2026] [:error] [pid 43358:tid 43381] [client 4.213.18.60:7050] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/conte.php"] [unique_id "aVfJfwncbHK9auzvrA9dYwAAAdU"]
[Fri Jan 02 21:34:56.239698 2026] [:error] [pid 29316:tid 29321] [client 4.213.18.60:7136] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/conte.php"] [unique_id "aVfJgNfT9ty-7jZmgf-2BgAAAQM"]
[Fri Jan 02 21:34:56.518295 2026] [:error] [pid 29316:tid 29331] [client 4.213.18.60:15606] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/conte.php"] [unique_id "aVfJgNfT9ty-7jZmgf-2CAAAAQ0"]
[Fri Jan 02 21:34:56.825500 2026] [:error] [pid 29316:tid 29334] [client 4.213.18.60:7128] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class3.php"] [unique_id "aVfJgNfT9ty-7jZmgf-2CQAAARA"]
[Fri Jan 02 21:34:57.097775 2026] [:error] [pid 29316:tid 29333] [client 4.213.18.60:15597] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class3.php"] [unique_id "aVfJgdfT9ty-7jZmgf-2DAAAAQ8"]
[Fri Jan 02 21:34:57.372303 2026] [:error] [pid 50186:tid 50195] [client 4.213.18.60:15543] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class3.php"] [unique_id "aVfJgVXqK_iX4f-S70KAJgAAAYc"]
[Fri Jan 02 21:34:57.646417 2026] [:error] [pid 29316:tid 29328] [client 4.213.18.60:7109] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class3.php"] [unique_id "aVfJgdfT9ty-7jZmgf-2EAAAAQo"]
[Fri Jan 02 21:34:57.926835 2026] [:error] [pid 29316:tid 29318] [client 4.213.18.60:7132] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs18.php"] [unique_id "aVfJgdfT9ty-7jZmgf-2FAAAAQA"]
[Fri Jan 02 21:34:58.205668 2026] [:error] [pid 29316:tid 29321] [client 4.213.18.60:7123] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs18.php"] [unique_id "aVfJgtfT9ty-7jZmgf-2GAAAAQM"]
[Fri Jan 02 21:34:58.484564 2026] [:error] [pid 43358:tid 43363] [client 4.213.18.60:7148] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs18.php"] [unique_id "aVfJggncbHK9auzvrA9dZwAAAcM"]
[Fri Jan 02 21:34:58.773235 2026] [:error] [pid 43358:tid 43382] [client 4.213.18.60:7149] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs18.php"] [unique_id "aVfJggncbHK9auzvrA9daAAAAdY"]
[Fri Jan 02 21:34:59.066430 2026] [:error] [pid 43358:tid 43367] [client 4.213.18.60:15553] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/claa.php"] [unique_id "aVfJgwncbHK9auzvrA9dagAAAcc"]
[Fri Jan 02 21:34:59.357628 2026] [:error] [pid 63099:tid 63158] [client 4.213.18.60:15518] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/claa.php"] [unique_id "aVfJg8mCZokRPYUhzvjCqgAAAFg"]
[Fri Jan 02 21:34:59.652737 2026] [:error] [pid 63099:tid 63155] [client 4.213.18.60:7159] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/claa.php"] [unique_id "aVfJg8mCZokRPYUhzvjCqwAAAFU"]
[Fri Jan 02 21:34:59.937043 2026] [:error] [pid 63100:tid 63171] [client 4.213.18.60:15549] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/claa.php"] [unique_id "aVfJgzuUXUKd3KTnKl9VUgAAAIo"]
[Fri Jan 02 21:35:00.217048 2026] [:error] [pid 50186:tid 50202] [client 4.213.18.60:15491] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shoyo.php"] [unique_id "aVfJhFXqK_iX4f-S70KAKAAAAY4"]
[Fri Jan 02 21:35:00.489202 2026] [:error] [pid 63100:tid 63176] [client 4.213.18.60:7104] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shoyo.php"] [unique_id "aVfJhDuUXUKd3KTnKl9VVAAAAI8"]
[Fri Jan 02 21:35:00.764368 2026] [:error] [pid 50186:tid 50200] [client 4.213.18.60:7073] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shoyo.php"] [unique_id "aVfJhFXqK_iX4f-S70KAKQAAAYw"]
[Fri Jan 02 21:35:01.043540 2026] [:error] [pid 43358:tid 43360] [client 4.213.18.60:7162] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shoyo.php"] [unique_id "aVfJhQncbHK9auzvrA9dbgAAAcA"]
[Fri Jan 02 21:35:01.323096 2026] [:error] [pid 29316:tid 29329] [client 4.213.18.60:7051] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aVfJhdfT9ty-7jZmgf-2IAAAAQs"]
[Fri Jan 02 21:35:01.632138 2026] [:error] [pid 63098:tid 63114] [client 4.213.18.60:15565] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aVfJhcez9k78gUs48kpoAAAAAAc"]
[Fri Jan 02 21:35:01.904716 2026] [:error] [pid 43358:tid 43374] [client 4.213.18.60:7164] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aVfJhQncbHK9auzvrA9dcgAAAc4"]
[Fri Jan 02 21:35:02.191291 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:7134] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aVfJhlXqK_iX4f-S70KALAAAAZI"]
[Fri Jan 02 21:35:02.464859 2026] [:error] [pid 43358:tid 43378] [client 4.213.18.60:15557] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/waq.php"] [unique_id "aVfJhgncbHK9auzvrA9ddAAAAdI"]
[Fri Jan 02 21:35:02.746619 2026] [:error] [pid 43358:tid 43366] [client 4.213.18.60:7040] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/waq.php"] [unique_id "aVfJhgncbHK9auzvrA9ddgAAAcY"]
[Fri Jan 02 21:35:03.032342 2026] [:error] [pid 50046:tid 50065] [client 4.213.18.60:7074] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/waq.php"] [unique_id "aVfJhyzv7fgIiwkQYNC0egAAAVE"]
[Fri Jan 02 21:35:03.328832 2026] [:error] [pid 50046:tid 50061] [client 4.213.18.60:7140] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/waq.php"] [unique_id "aVfJhyzv7fgIiwkQYNC0ewAAAU0"]
[Fri Jan 02 21:35:03.605486 2026] [:error] [pid 63100:tid 63161] [client 4.213.18.60:15488] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wakak.php"] [unique_id "aVfJhzuUXUKd3KTnKl9VWAAAAIA"]
[Fri Jan 02 21:35:03.890474 2026] [:error] [pid 63100:tid 63184] [client 4.213.18.60:7105] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wakak.php"] [unique_id "aVfJhzuUXUKd3KTnKl9VWgAAAJc"]
[Fri Jan 02 21:35:04.169333 2026] [:error] [pid 50046:tid 50066] [client 4.213.18.60:7041] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wakak.php"] [unique_id "aVfJiCzv7fgIiwkQYNC0fAAAAVI"]
[Fri Jan 02 21:35:04.451022 2026] [:error] [pid 50186:tid 50203] [client 4.213.18.60:7068] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wakak.php"] [unique_id "aVfJiFXqK_iX4f-S70KAMAAAAY8"]
[Fri Jan 02 21:35:04.790802 2026] [:error] [pid 63208:tid 63217] [client 4.213.18.60:7153] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aVfJiHKLI9INGPLzfndMSAAAAMY"]
[Fri Jan 02 21:35:05.066409 2026] [:error] [pid 63100:tid 63183] [client 4.213.18.60:6982] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aVfJiTuUXUKd3KTnKl9VWwAAAJY"]
[Fri Jan 02 21:35:05.365044 2026] [:error] [pid 63208:tid 63228] [client 4.213.18.60:6978] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aVfJiXKLI9INGPLzfndMSwAAANE"]
[Fri Jan 02 21:35:05.652689 2026] [:error] [pid 50046:tid 50049] [client 4.213.18.60:15588] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aVfJiSzv7fgIiwkQYNC0fgAAAUE"]
[Fri Jan 02 21:35:05.925944 2026] [:error] [pid 63100:tid 63172] [client 4.213.18.60:15547] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aVfJiTuUXUKd3KTnKl9VXAAAAIs"]
[Fri Jan 02 21:35:06.204670 2026] [:error] [pid 50186:tid 50190] [client 4.213.18.60:7076] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aVfJilXqK_iX4f-S70KAMgAAAYI"]
[Fri Jan 02 21:35:06.485756 2026] [:error] [pid 63208:tid 63225] [client 4.213.18.60:7094] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aVfJinKLI9INGPLzfndMTgAAAM4"]
[Fri Jan 02 21:35:06.774257 2026] [:error] [pid 50186:tid 50211] [client 4.213.18.60:6999] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aVfJilXqK_iX4f-S70KANAAAAZc"]
[Fri Jan 02 21:35:07.058962 2026] [:error] [pid 63098:tid 63124] [client 4.213.18.60:15610] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xse25.php"] [unique_id "aVfJi8ez9k78gUs48kpoAQAAABE"]
[Fri Jan 02 21:35:07.360096 2026] [:error] [pid 63100:tid 63168] [client 4.213.18.60:7119] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xse25.php"] [unique_id "aVfJizuUXUKd3KTnKl9VYAAAAIc"]
[Fri Jan 02 21:35:07.700682 2026] [:error] [pid 63099:tid 63139] [client 4.213.18.60:15497] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xse25.php"] [unique_id "aVfJi8mCZokRPYUhzvjCrwAAAEU"]
[Fri Jan 02 21:35:08.020220 2026] [:error] [pid 63100:tid 63167] [client 4.213.18.60:7143] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xse25.php"] [unique_id "aVfJjDuUXUKd3KTnKl9VYgAAAIY"]
[Fri Jan 02 21:35:08.337676 2026] [:error] [pid 63099:tid 63141] [client 4.213.18.60:7142] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJjMmCZokRPYUhzvjCsQAAAEc"]
[Fri Jan 02 21:35:08.693459 2026] [:error] [pid 50186:tid 50192] [client 4.213.18.60:7011] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJjFXqK_iX4f-S70KANwAAAYQ"]
[Fri Jan 02 21:35:09.021497 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:7146] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJjcez9k78gUs48kpoBQAAABg"]
[Fri Jan 02 21:35:09.320767 2026] [:error] [pid 43358:tid 43373] [client 4.213.18.60:7079] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/nox.php"] [unique_id "aVfJjQncbHK9auzvrA9dfQAAAc0"]
[Fri Jan 02 21:35:09.612706 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:7144] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aVfJjVXqK_iX4f-S70KAOAAAAZA"]
[Fri Jan 02 21:35:09.889160 2026] [:error] [pid 50186:tid 50196] [client 4.213.18.60:7055] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aVfJjVXqK_iX4f-S70KAOwAAAYg"]
[Fri Jan 02 21:35:10.164146 2026] [:error] [pid 50186:tid 50207] [client 4.213.18.60:7048] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aVfJjlXqK_iX4f-S70KAPQAAAZM"]
[Fri Jan 02 21:35:10.438644 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:7118] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aVfJjlXqK_iX4f-S70KAPwAAAZI"]
[Fri Jan 02 21:35:10.764051 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:15526] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aVfJjsez9k78gUs48kpoCAAAAAk"]
[Fri Jan 02 21:35:11.126286 2026] [:error] [pid 29316:tid 29337] [client 4.213.18.60:7106] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aVfJj9fT9ty-7jZmgf-2IwAAARM"]
[Fri Jan 02 21:35:11.492640 2026] [:error] [pid 29316:tid 29321] [client 4.213.18.60:7018] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aVfJj9fT9ty-7jZmgf-2JQAAAQM"]
[Fri Jan 02 21:35:11.818414 2026] [:error] [pid 29316:tid 29335] [client 4.213.18.60:15541] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/info.php"] [unique_id "aVfJj9fT9ty-7jZmgf-2JwAAARE"]
[Fri Jan 02 21:35:12.130776 2026] [:error] [pid 63208:tid 63224] [client 4.213.18.60:7081] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class9.php"] [unique_id "aVfJkHKLI9INGPLzfndMTwAAAM0"]
[Fri Jan 02 21:35:12.452890 2026] [:error] [pid 63208:tid 63213] [client 4.213.18.60:6996] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class9.php"] [unique_id "aVfJkHKLI9INGPLzfndMUQAAAMI"]
[Fri Jan 02 21:35:12.766564 2026] [:error] [pid 29316:tid 29324] [client 4.213.18.60:15524] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class9.php"] [unique_id "aVfJkNfT9ty-7jZmgf-2KgAAAQY"]
[Fri Jan 02 21:35:13.082290 2026] [:error] [pid 43358:tid 43370] [client 4.213.18.60:7049] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class9.php"] [unique_id "aVfJkQncbHK9auzvrA9dgAAAAco"]
[Fri Jan 02 21:35:13.410380 2026] [:error] [pid 43358:tid 43360] [client 4.213.18.60:7071] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless11.php"] [unique_id "aVfJkQncbHK9auzvrA9dgQAAAcA"]
[Fri Jan 02 21:35:13.760250 2026] [:error] [pid 63098:tid 63122] [client 4.213.18.60:6986] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless11.php"] [unique_id "aVfJkcez9k78gUs48kpoCQAAAA8"]
[Fri Jan 02 21:35:14.136636 2026] [:error] [pid 63098:tid 63129] [client 4.213.18.60:7107] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless11.php"] [unique_id "aVfJksez9k78gUs48kpoCgAAABY"]
[Fri Jan 02 21:35:14.453852 2026] [:error] [pid 63100:tid 63164] [client 4.213.18.60:15561] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless11.php"] [unique_id "aVfJkjuUXUKd3KTnKl9VZgAAAIM"]
[Fri Jan 02 21:35:14.771885 2026] [:error] [pid 63098:tid 63123] [client 4.213.18.60:7090] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/403.php"] [unique_id "aVfJksez9k78gUs48kpoDQAAABA"]
[Fri Jan 02 21:35:37.362027 2026] [:error] [pid 63098:tid 63112] [client 4.213.18.60:7102] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ha.php"] [unique_id "aVfJqcez9k78gUs48kpoPwAAAAU"]
[Fri Jan 02 21:35:37.650322 2026] [:error] [pid 63100:tid 63181] [client 4.213.18.60:7086] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ha.php"] [unique_id "aVfJqTuUXUKd3KTnKl9VcgAAAJQ"]
[Fri Jan 02 21:35:37.954874 2026] [:error] [pid 63099:tid 63143] [client 4.213.18.60:6914] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ha.php"] [unique_id "aVfJqcmCZokRPYUhzvjCxAAAAEk"]
[Fri Jan 02 21:35:38.263462 2026] [:error] [pid 63100:tid 63171] [client 4.213.18.60:7101] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ha.php"] [unique_id "aVfJqjuUXUKd3KTnKl9VdQAAAIo"]
[Fri Jan 02 21:35:38.555103 2026] [:error] [pid 63099:tid 63145] [client 4.213.18.60:6913] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gg.php"] [unique_id "aVfJqsmCZokRPYUhzvjCxwAAAEs"]
[Fri Jan 02 21:35:38.827323 2026] [:error] [pid 50186:tid 50210] [client 4.213.18.60:15498] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gg.php"] [unique_id "aVfJqlXqK_iX4f-S70KASgAAAZY"]
[Fri Jan 02 21:35:39.126001 2026] [:error] [pid 29316:tid 29337] [client 4.213.18.60:7147] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gg.php"] [unique_id "aVfJq9fT9ty-7jZmgf-2RAAAARM"]
[Fri Jan 02 21:35:39.424684 2026] [:error] [pid 29316:tid 29330] [client 4.213.18.60:7156] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gg.php"] [unique_id "aVfJq9fT9ty-7jZmgf-2RQAAAQw"]
[Fri Jan 02 21:35:39.699761 2026] [:error] [pid 43358:tid 43375] [client 4.213.18.60:7038] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ar.php"] [unique_id "aVfJqwncbHK9auzvrA9dlwAAAc8"]
[Fri Jan 02 21:35:39.979517 2026] [:error] [pid 63100:tid 63182] [client 4.213.18.60:6936] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ar.php"] [unique_id "aVfJqzuUXUKd3KTnKl9VeAAAAJU"]
[Fri Jan 02 21:35:40.258854 2026] [:error] [pid 63208:tid 63223] [client 4.213.18.60:7077] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ar.php"] [unique_id "aVfJrHKLI9INGPLzfndMXQAAAMw"]
[Fri Jan 02 21:35:40.529941 2026] [:error] [pid 63098:tid 63117] [client 4.213.18.60:15537] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ar.php"] [unique_id "aVfJrMez9k78gUs48kpoQwAAAAo"]
[Fri Jan 02 21:35:40.832308 2026] [:error] [pid 63099:tid 63150] [client 4.213.18.60:15530] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aVfJrMmCZokRPYUhzvjCygAAAFA"]
[Fri Jan 02 21:35:41.108409 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:7158] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aVfJrVXqK_iX4f-S70KATgAAAZI"]
[Fri Jan 02 21:35:41.382926 2026] [:error] [pid 63099:tid 63134] [client 4.213.18.60:7052] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aVfJrcmCZokRPYUhzvjCywAAAEA"]
[Fri Jan 02 21:35:41.657646 2026] [:error] [pid 63099:tid 63139] [client 4.213.18.60:7010] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aVfJrcmCZokRPYUhzvjCzAAAAEU"]
[Fri Jan 02 21:35:41.954057 2026] [:error] [pid 43358:tid 43368] [client 4.213.18.60:7130] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xx.php"] [unique_id "aVfJrQncbHK9auzvrA9dnQAAAcg"]
[Fri Jan 02 21:35:42.272448 2026] [:error] [pid 29316:tid 29334] [client 4.213.18.60:15576] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xx.php"] [unique_id "aVfJrtfT9ty-7jZmgf-2SAAAARA"]
[Fri Jan 02 21:35:42.552610 2026] [:error] [pid 29316:tid 29322] [client 4.213.18.60:6961] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xx.php"] [unique_id "aVfJrtfT9ty-7jZmgf-2SQAAAQQ"]
[Fri Jan 02 21:35:42.837314 2026] [:error] [pid 43358:tid 43382] [client 4.213.18.60:7047] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xx.php"] [unique_id "aVfJrgncbHK9auzvrA9dngAAAdY"]
[Fri Jan 02 21:35:43.112707 2026] [:error] [pid 63098:tid 63109] [client 4.213.18.60:7100] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass4.php"] [unique_id "aVfJr8ez9k78gUs48kpoRQAAAAI"]
[Fri Jan 02 21:35:43.404322 2026] [:error] [pid 63208:tid 63225] [client 4.213.18.60:15573] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass4.php"] [unique_id "aVfJr3KLI9INGPLzfndMXwAAAM4"]
[Fri Jan 02 21:35:43.677145 2026] [:error] [pid 63098:tid 63127] [client 4.213.18.60:7152] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass4.php"] [unique_id "aVfJr8ez9k78gUs48kpoRgAAABQ"]
[Fri Jan 02 21:35:43.949331 2026] [:error] [pid 29316:tid 29336] [client 4.213.18.60:7113] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass4.php"] [unique_id "aVfJr9fT9ty-7jZmgf-2TAAAARI"]
[Fri Jan 02 21:35:44.225001 2026] [:error] [pid 63098:tid 63125] [client 4.213.18.60:15589] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/radio.php"] [unique_id "aVfJsMez9k78gUs48kpoSAAAABI"]
[Fri Jan 02 21:35:44.522827 2026] [:error] [pid 63208:tid 63219] [client 4.213.18.60:7058] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/radio.php"] [unique_id "aVfJsHKLI9INGPLzfndMYAAAAMg"]
[Fri Jan 02 21:35:44.794441 2026] [:error] [pid 50186:tid 50190] [client 4.213.18.60:7163] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/radio.php"] [unique_id "aVfJsFXqK_iX4f-S70KAUwAAAYI"]
[Fri Jan 02 21:35:45.069486 2026] [:error] [pid 50186:tid 50209] [client 4.213.18.60:7084] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/radio.php"] [unique_id "aVfJsVXqK_iX4f-S70KAVAAAAZU"]
[Fri Jan 02 21:35:45.342908 2026] [:error] [pid 63099:tid 63154] [client 4.213.18.60:7007] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs15.php"] [unique_id "aVfJscmCZokRPYUhzvjC0AAAAFQ"]
[Fri Jan 02 21:35:45.634730 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:7054] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs15.php"] [unique_id "aVfJscez9k78gUs48kpoSQAAAAk"]
[Fri Jan 02 21:35:45.906517 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:7092] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs15.php"] [unique_id "aVfJscez9k78gUs48kpoSwAAABg"]
[Fri Jan 02 21:35:46.178161 2026] [:error] [pid 63208:tid 63230] [client 4.213.18.60:7057] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blurbs15.php"] [unique_id "aVfJsnKLI9INGPLzfndMYgAAANM"]
[Fri Jan 02 21:35:46.472727 2026] [:error] [pid 63098:tid 63112] [client 4.213.18.60:7099] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aVfJssez9k78gUs48kpoTgAAAAU"]
[Fri Jan 02 21:35:46.764088 2026] [:error] [pid 63098:tid 63129] [client 4.213.18.60:7064] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aVfJssez9k78gUs48kpoUAAAABY"]
[Fri Jan 02 21:35:47.038708 2026] [:error] [pid 63098:tid 63108] [client 4.213.18.60:6990] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aVfJs8ez9k78gUs48kpoUQAAAAE"]
[Fri Jan 02 21:35:47.330394 2026] [:error] [pid 63098:tid 63113] [client 4.213.18.60:15600] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aVfJs8ez9k78gUs48kpoVAAAAAY"]
[Fri Jan 02 21:35:47.610964 2026] [:error] [pid 50186:tid 50189] [client 4.213.18.60:7112] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/security.php"] [unique_id "aVfJs1XqK_iX4f-S70KAVQAAAYE"]
[Fri Jan 02 21:35:47.899293 2026] [:error] [pid 63098:tid 63124] [client 4.213.18.60:7103] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/security.php"] [unique_id "aVfJs8ez9k78gUs48kpoVwAAABE"]
[Fri Jan 02 21:35:48.176429 2026] [:error] [pid 63098:tid 63127] [client 4.213.18.60:6915] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/security.php"] [unique_id "aVfJtMez9k78gUs48kpoWQAAABQ"]
[Fri Jan 02 21:35:48.450189 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:7154] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/security.php"] [unique_id "aVfJtMez9k78gUs48kpoWwAAAAk"]
[Fri Jan 02 21:35:48.724911 2026] [:error] [pid 63098:tid 63121] [client 4.213.18.60:15554] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww1.php"] [unique_id "aVfJtMez9k78gUs48kpoXQAAAA4"]
[Fri Jan 02 21:35:49.002401 2026] [:error] [pid 63208:tid 63220] [client 4.213.18.60:7150] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww1.php"] [unique_id "aVfJtXKLI9INGPLzfndMYwAAAMk"]
[Fri Jan 02 21:35:49.301879 2026] [:error] [pid 63208:tid 63227] [client 4.213.18.60:6995] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww1.php"] [unique_id "aVfJtXKLI9INGPLzfndMZAAAANA"]
[Fri Jan 02 21:35:49.584303 2026] [:error] [pid 29316:tid 29320] [client 4.213.18.60:15508] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww1.php"] [unique_id "aVfJtdfT9ty-7jZmgf-2TQAAAQI"]
[Fri Jan 02 21:35:49.856671 2026] [:error] [pid 63100:tid 63183] [client 4.213.18.60:7034] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "aVfJtTuUXUKd3KTnKl9VfAAAAJY"]
[Fri Jan 02 21:35:50.144336 2026] [:error] [pid 50186:tid 50197] [client 4.213.18.60:7072] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "aVfJtlXqK_iX4f-S70KAVgAAAYk"]
[Fri Jan 02 21:35:50.422749 2026] [:error] [pid 50186:tid 50198] [client 4.213.18.60:6989] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "aVfJtlXqK_iX4f-S70KAVwAAAYo"]
[Fri Jan 02 21:35:50.722140 2026] [:error] [pid 63100:tid 63180] [client 4.213.18.60:7097] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "aVfJtjuUXUKd3KTnKl9VgAAAAJM"]
[Fri Jan 02 21:35:51.015591 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:7098] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/manager.php"] [unique_id "aVfJt1XqK_iX4f-S70KAWAAAAZA"]
[Fri Jan 02 21:35:51.292477 2026] [:error] [pid 63100:tid 63164] [client 4.213.18.60:6925] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/manager.php"] [unique_id "aVfJtzuUXUKd3KTnKl9VgwAAAIM"]
[Fri Jan 02 21:35:51.578589 2026] [:error] [pid 43358:tid 43363] [client 4.213.18.60:7031] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/manager.php"] [unique_id "aVfJtwncbHK9auzvrA9dogAAAcM"]
[Fri Jan 02 21:35:51.885488 2026] [:error] [pid 63098:tid 63113] [client 4.213.18.60:7016] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/manager.php"] [unique_id "aVfJt8ez9k78gUs48kpoZAAAAAY"]
[Fri Jan 02 21:35:52.162104 2026] [:error] [pid 63098:tid 63117] [client 4.213.18.60:6927] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/item.php"] [unique_id "aVfJuMez9k78gUs48kpoZQAAAAo"]
[Fri Jan 02 21:35:52.436442 2026] [:error] [pid 63208:tid 63218] [client 4.213.18.60:7139] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/item.php"] [unique_id "aVfJuHKLI9INGPLzfndMZwAAAMc"]
[Fri Jan 02 21:35:52.745433 2026] [:error] [pid 29316:tid 29328] [client 4.213.18.60:6945] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/item.php"] [unique_id "aVfJuNfT9ty-7jZmgf-2TwAAAQo"]
[Fri Jan 02 21:35:53.022042 2026] [:error] [pid 50186:tid 50196] [client 4.213.18.60:7161] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/item.php"] [unique_id "aVfJuVXqK_iX4f-S70KAWwAAAYg"]
[Fri Jan 02 21:35:53.302311 2026] [:error] [pid 63098:tid 63123] [client 4.213.18.60:15532] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sx.php"] [unique_id "aVfJucez9k78gUs48kpoZwAAABA"]
[Fri Jan 02 21:35:53.615788 2026] [:error] [pid 63098:tid 63125] [client 4.213.18.60:7014] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sx.php"] [unique_id "aVfJucez9k78gUs48kpoaAAAABI"]
[Fri Jan 02 21:35:53.892992 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:7078] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sx.php"] [unique_id "aVfJucez9k78gUs48kpoaQAAAAk"]
[Fri Jan 02 21:35:54.168933 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:6934] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sx.php"] [unique_id "aVfJusez9k78gUs48kpoagAAABg"]
[Fri Jan 02 21:35:54.448087 2026] [:error] [pid 63098:tid 63107] [client 4.213.18.60:7056] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aVfJusez9k78gUs48kpobgAAAAA"]
[Fri Jan 02 21:35:54.753483 2026] [:error] [pid 63098:tid 63111] [client 4.213.18.60:7046] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aVfJusez9k78gUs48kpobwAAAAQ"]
[Fri Jan 02 21:35:55.033348 2026] [:error] [pid 29316:tid 29329] [client 4.213.18.60:7025] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aVfJu9fT9ty-7jZmgf-2UgAAAQs"]
[Fri Jan 02 21:35:55.329114 2026] [:error] [pid 63100:tid 63178] [client 4.213.18.60:7080] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aVfJuzuUXUKd3KTnKl9VigAAAJE"]
[Fri Jan 02 21:35:55.610080 2026] [:error] [pid 63100:tid 63183] [client 4.213.18.60:7063] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aVfJuzuUXUKd3KTnKl9VjAAAAJY"]
[Fri Jan 02 21:35:55.882039 2026] [:error] [pid 63100:tid 63161] [client 4.213.18.60:7083] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aVfJuzuUXUKd3KTnKl9VjgAAAIA"]
[Fri Jan 02 21:35:56.177263 2026] [:error] [pid 63100:tid 63175] [client 4.213.18.60:6992] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aVfJvDuUXUKd3KTnKl9VkQAAAI4"]
[Fri Jan 02 21:35:56.450337 2026] [:error] [pid 63099:tid 63158] [client 4.213.18.60:6923] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aVfJvMmCZokRPYUhzvjC1gAAAFg"]
[Fri Jan 02 21:35:56.735346 2026] [:error] [pid 63099:tid 63142] [client 4.213.18.60:6938] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfJvMmCZokRPYUhzvjC1wAAAEg"]
[Fri Jan 02 21:35:57.013823 2026] [:error] [pid 63099:tid 63149] [client 4.213.18.60:7116] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfJvcmCZokRPYUhzvjC2AAAAE8"]
[Fri Jan 02 21:35:57.299735 2026] [:error] [pid 63100:tid 63173] [client 4.213.18.60:7060] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfJvTuUXUKd3KTnKl9VlgAAAIw"]
[Fri Jan 02 21:35:57.571504 2026] [:error] [pid 29316:tid 29330] [client 4.213.18.60:7030] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aVfJvdfT9ty-7jZmgf-2VQAAAQw"]
[Fri Jan 02 21:35:57.878930 2026] [:error] [pid 43358:tid 43379] [client 4.213.18.60:7061] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aVfJvQncbHK9auzvrA9dowAAAdM"]
[Fri Jan 02 21:35:58.151539 2026] [:error] [pid 50186:tid 50212] [client 4.213.18.60:7021] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aVfJvlXqK_iX4f-S70KAXwAAAZg"]
[Fri Jan 02 21:35:58.426803 2026] [:error] [pid 63208:tid 63231] [client 4.213.18.60:6966] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aVfJvnKLI9INGPLzfndMaAAAANQ"]
[Fri Jan 02 21:35:58.698346 2026] [:error] [pid 63208:tid 63232] [client 4.213.18.60:15546] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aVfJvnKLI9INGPLzfndMaQAAANU"]
[Fri Jan 02 21:35:58.974920 2026] [:error] [pid 63100:tid 63162] [client 4.213.18.60:6918] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJvjuUXUKd3KTnKl9VmgAAAIE"]
[Fri Jan 02 21:35:59.253484 2026] [:error] [pid 63099:tid 63134] [client 4.213.18.60:7091] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJv8mCZokRPYUhzvjC2wAAAEA"]
[Fri Jan 02 21:35:59.525596 2026] [:error] [pid 63100:tid 63169] [client 4.213.18.60:7022] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJvzuUXUKd3KTnKl9VmwAAAIg"]
[Fri Jan 02 21:35:59.797295 2026] [:error] [pid 63100:tid 63184] [client 4.213.18.60:7096] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJvzuUXUKd3KTnKl9VnQAAAJc"]
[Fri Jan 02 21:36:00.103609 2026] [:error] [pid 63098:tid 63126] [client 4.213.18.60:7033] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "aVfJwMez9k78gUs48kpocgAAABM"]
[Fri Jan 02 21:36:00.377741 2026] [:error] [pid 63098:tid 63117] [client 4.213.18.60:7165] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "aVfJwMez9k78gUs48kpodAAAAAo"]
[Fri Jan 02 21:36:00.673950 2026] [:error] [pid 50046:tid 50061] [client 4.213.18.60:7065] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "aVfJwCzv7fgIiwkQYNC0pwAAAU0"]
[Fri Jan 02 21:36:00.949037 2026] [:error] [pid 63099:tid 63135] [client 4.213.18.60:7075] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "aVfJwMmCZokRPYUhzvjC3QAAAEE"]
[Fri Jan 02 21:36:01.231451 2026] [:error] [pid 63099:tid 63136] [client 4.213.18.60:7005] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/404.php"] [unique_id "aVfJwcmCZokRPYUhzvjC3wAAAEI"]
[Fri Jan 02 21:36:01.506183 2026] [:error] [pid 63100:tid 63175] [client 4.213.18.60:6962] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/404.php"] [unique_id "aVfJwTuUXUKd3KTnKl9VoAAAAI4"]
[Fri Jan 02 21:36:01.785938 2026] [:error] [pid 63099:tid 63152] [client 4.213.18.60:7024] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/404.php"] [unique_id "aVfJwcmCZokRPYUhzvjC4gAAAFI"]
[Fri Jan 02 21:36:02.073336 2026] [:error] [pid 63098:tid 63112] [client 4.213.18.60:7019] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/404.php"] [unique_id "aVfJwsez9k78gUs48kpofAAAAAU"]
[Fri Jan 02 21:36:02.352800 2026] [:error] [pid 43358:tid 43369] [client 4.213.18.60:6933] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfJwgncbHK9auzvrA9dpQAAAck"]
[Fri Jan 02 21:36:02.627651 2026] [:error] [pid 29316:tid 29323] [client 4.213.18.60:6993] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfJwtfT9ty-7jZmgf-2VwAAAQU"]
[Fri Jan 02 21:36:02.903348 2026] [:error] [pid 63098:tid 63108] [client 4.213.18.60:6987] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfJwsez9k78gUs48kpofwAAAAE"]
[Fri Jan 02 21:36:03.176518 2026] [:error] [pid 50046:tid 50064] [client 4.213.18.60:6980] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aVfJwyzv7fgIiwkQYNC0qAAAAVA"]
[Fri Jan 02 21:36:03.450069 2026] [:error] [pid 63098:tid 63119] [client 4.213.18.60:7027] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "aVfJw8ez9k78gUs48kpohAAAAAw"]
[Fri Jan 02 21:36:03.730027 2026] [:error] [pid 43358:tid 43378] [client 4.213.18.60:6994] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "aVfJwwncbHK9auzvrA9dpgAAAdI"]
[Fri Jan 02 21:36:04.020836 2026] [:error] [pid 63098:tid 63113] [client 4.213.18.60:7036] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "aVfJxMez9k78gUs48kpohgAAAAY"]
[Fri Jan 02 21:36:04.315994 2026] [:error] [pid 43358:tid 43380] [client 4.213.18.60:6921] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "aVfJxAncbHK9auzvrA9dpwAAAdQ"]
[Fri Jan 02 21:36:04.592031 2026] [:error] [pid 50186:tid 50199] [client 4.213.18.60:6621] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJxFXqK_iX4f-S70KAYwAAAYs"]
[Fri Jan 02 21:36:04.877235 2026] [:error] [pid 63098:tid 63125] [client 4.213.18.60:7009] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJxMez9k78gUs48kpohwAAABI"]
[Fri Jan 02 21:36:05.176793 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:6967] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJxcez9k78gUs48kpoiQAAAAk"]
[Fri Jan 02 21:36:05.450865 2026] [:error] [pid 63098:tid 63107] [client 4.213.18.60:6972] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJxcez9k78gUs48kpoigAAAAA"]
[Fri Jan 02 21:36:05.740114 2026] [:error] [pid 50186:tid 50191] [client 4.213.18.60:7000] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aVfJxVXqK_iX4f-S70KAZQAAAYM"]
[Fri Jan 02 21:36:06.015780 2026] [:error] [pid 63098:tid 63122] [client 4.213.18.60:7066] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aVfJxsez9k78gUs48kpojQAAAA8"]
[Fri Jan 02 21:36:06.338715 2026] [:error] [pid 63098:tid 63129] [client 4.213.18.60:7003] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aVfJxsez9k78gUs48kpojwAAABY"]
[Fri Jan 02 21:36:06.611232 2026] [:error] [pid 63208:tid 63217] [client 4.213.18.60:7135] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aVfJxnKLI9INGPLzfndMbAAAAMY"]
[Fri Jan 02 21:36:06.898530 2026] [:error] [pid 43358:tid 43366] [client 4.213.18.60:6931] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/click.php"] [unique_id "aVfJxgncbHK9auzvrA9dqAAAAcY"]
[Fri Jan 02 21:36:07.170608 2026] [:error] [pid 63098:tid 63130] [client 4.213.18.60:7082] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/click.php"] [unique_id "aVfJx8ez9k78gUs48kpokQAAABc"]
[Fri Jan 02 21:36:07.452113 2026] [:error] [pid 63098:tid 63124] [client 4.213.18.60:7160] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/click.php"] [unique_id "aVfJx8ez9k78gUs48kpolAAAABE"]
[Fri Jan 02 21:36:07.724784 2026] [:error] [pid 63098:tid 63119] [client 4.213.18.60:6976] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/click.php"] [unique_id "aVfJx8ez9k78gUs48kpolwAAAAw"]
[Fri Jan 02 21:36:08.015362 2026] [:error] [pid 63099:tid 63142] [client 4.213.18.60:6944] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aVfJyMmCZokRPYUhzvjC6AAAAEg"]
[Fri Jan 02 21:36:08.289744 2026] [:error] [pid 43358:tid 43384] [client 4.213.18.60:6968] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aVfJyAncbHK9auzvrA9dqwAAAdg"]
[Fri Jan 02 21:36:08.577308 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:7053] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aVfJyMez9k78gUs48kpomgAAAAk"]
[Fri Jan 02 21:36:08.857670 2026] [:error] [pid 43358:tid 43377] [client 4.213.18.60:7020] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aVfJyAncbHK9auzvrA9drQAAAdE"]
[Fri Jan 02 21:36:09.149634 2026] [:error] [pid 50186:tid 50211] [client 4.213.18.60:7004] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aVfJyVXqK_iX4f-S70KAaQAAAZc"]
[Fri Jan 02 21:36:09.439066 2026] [:error] [pid 43358:tid 43382] [client 4.213.18.60:6975] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aVfJyQncbHK9auzvrA9drwAAAdY"]
[Fri Jan 02 21:36:09.715081 2026] [:error] [pid 43358:tid 43367] [client 4.213.18.60:7059] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aVfJyQncbHK9auzvrA9dsgAAAcc"]
[Fri Jan 02 21:36:10.006778 2026] [:error] [pid 43358:tid 43365] [client 4.213.18.60:7093] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aVfJygncbHK9auzvrA9dtAAAAcU"]
[Fri Jan 02 21:36:10.289669 2026] [:error] [pid 43358:tid 43363] [client 4.213.18.60:6998] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJygncbHK9auzvrA9dtgAAAcM"]
[Fri Jan 02 21:36:10.563093 2026] [:error] [pid 29316:tid 29336] [client 4.213.18.60:6984] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJytfT9ty-7jZmgf-2XgAAARI"]
[Fri Jan 02 21:36:10.853676 2026] [:error] [pid 43358:tid 43374] [client 4.213.18.60:6997] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJygncbHK9auzvrA9duAAAAc4"]
[Fri Jan 02 21:36:11.132209 2026] [:error] [pid 29316:tid 29319] [client 4.213.18.60:7095] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css.php"] [unique_id "aVfJy9fT9ty-7jZmgf-2XwAAAQE"]
[Fri Jan 02 21:36:11.411997 2026] [:error] [pid 43358:tid 43381] [client 4.213.18.60:7001] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfJywncbHK9auzvrA9dvAAAAdU"]
[Fri Jan 02 21:36:11.705303 2026] [:error] [pid 50186:tid 50210] [client 4.213.18.60:7089] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfJy1XqK_iX4f-S70KAawAAAZY"]
[Fri Jan 02 21:36:11.979758 2026] [:error] [pid 50186:tid 50202] [client 4.213.18.60:6985] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfJy1XqK_iX4f-S70KAbAAAAY4"]
[Fri Jan 02 21:36:12.257136 2026] [:error] [pid 50186:tid 50207] [client 4.213.18.60:7008] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfJzFXqK_iX4f-S70KAbgAAAZM"]
[Fri Jan 02 21:36:12.588605 2026] [:error] [pid 50186:tid 50212] [client 4.213.18.60:6935] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "aVfJzFXqK_iX4f-S70KAcQAAAZg"]
[Fri Jan 02 21:36:12.876710 2026] [:error] [pid 29316:tid 29328] [client 4.213.18.60:7067] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "aVfJzNfT9ty-7jZmgf-2YAAAAQo"]
[Fri Jan 02 21:36:13.170580 2026] [:error] [pid 29316:tid 29341] [client 4.213.18.60:6928] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "aVfJzdfT9ty-7jZmgf-2YgAAARc"]
[Fri Jan 02 21:36:13.470171 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:6929] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "aVfJzVXqK_iX4f-S70KAcwAAAZI"]
[Fri Jan 02 21:36:13.749458 2026] [:error] [pid 50186:tid 50194] [client 4.213.18.60:6638] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class20.php"] [unique_id "aVfJzVXqK_iX4f-S70KAdQAAAYY"]
[Fri Jan 02 21:36:14.063737 2026] [:error] [pid 63208:tid 63216] [client 4.213.18.60:7070] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class20.php"] [unique_id "aVfJznKLI9INGPLzfndMcAAAAMU"]
[Fri Jan 02 21:36:14.403427 2026] [:error] [pid 50186:tid 50209] [client 4.213.18.60:15574] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class20.php"] [unique_id "aVfJzlXqK_iX4f-S70KAeQAAAZU"]
[Fri Jan 02 21:36:14.687566 2026] [:error] [pid 43358:tid 43361] [client 4.213.18.60:7028] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class20.php"] [unique_id "aVfJzgncbHK9auzvrA9dwgAAAcE"]
[Fri Jan 02 21:36:14.968975 2026] [:error] [pid 63208:tid 63223] [client 4.213.18.60:6988] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJznKLI9INGPLzfndMcQAAAMw"]
[Fri Jan 02 21:36:15.262810 2026] [:error] [pid 63208:tid 63214] [client 4.213.18.60:6613] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJz3KLI9INGPLzfndMcgAAAMM"]
[Fri Jan 02 21:36:15.547605 2026] [:error] [pid 63208:tid 63224] [client 4.213.18.60:6600] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJz3KLI9INGPLzfndMdAAAAM0"]
[Fri Jan 02 21:36:15.821315 2026] [:error] [pid 63208:tid 63230] [client 4.213.18.60:6865] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aVfJz3KLI9INGPLzfndMdwAAANM"]
[Fri Jan 02 21:36:16.110394 2026] [:error] [pid 63098:tid 63109] [client 4.213.18.60:6919] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fwe.php"] [unique_id "aVfJ0Mez9k78gUs48kpooAAAAAI"]
[Fri Jan 02 21:36:16.383332 2026] [:error] [pid 63098:tid 63115] [client 4.213.18.60:6958] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fwe.php"] [unique_id "aVfJ0Mez9k78gUs48kpoowAAAAg"]
[Fri Jan 02 21:36:16.670257 2026] [:error] [pid 63208:tid 63227] [client 4.213.18.60:6939] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fwe.php"] [unique_id "aVfJ0HKLI9INGPLzfndMeAAAANA"]
[Fri Jan 02 21:36:16.961299 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:7043] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fwe.php"] [unique_id "aVfJ0FXqK_iX4f-S70KAewAAAZA"]
[Fri Jan 02 21:36:17.236046 2026] [:error] [pid 43358:tid 43363] [client 4.213.18.60:7141] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aVfJ0QncbHK9auzvrA9dxQAAAcM"]
[Fri Jan 02 21:36:17.523808 2026] [:error] [pid 63098:tid 63117] [client 4.213.18.60:7069] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aVfJ0cez9k78gUs48kpopQAAAAo"]
[Fri Jan 02 21:36:17.802806 2026] [:error] [pid 29316:tid 29321] [client 4.213.18.60:7017] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aVfJ0dfT9ty-7jZmgf-2aQAAAQM"]
[Fri Jan 02 21:36:18.092715 2026] [:error] [pid 29316:tid 29324] [client 4.213.18.60:7023] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aVfJ0tfT9ty-7jZmgf-2agAAAQY"]
[Fri Jan 02 21:36:18.369819 2026] [:error] [pid 63098:tid 63131] [client 4.213.18.60:6952] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx1.php"] [unique_id "aVfJ0sez9k78gUs48kpoqQAAABg"]
[Fri Jan 02 21:36:18.643632 2026] [:error] [pid 63208:tid 63222] [client 4.213.18.60:7006] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx1.php"] [unique_id "aVfJ0nKLI9INGPLzfndMegAAAMs"]
[Fri Jan 02 21:36:18.959029 2026] [:error] [pid 29316:tid 29326] [client 4.213.18.60:15603] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx1.php"] [unique_id "aVfJ0tfT9ty-7jZmgf-2bQAAAQg"]
[Fri Jan 02 21:36:19.240067 2026] [:error] [pid 63208:tid 63215] [client 4.213.18.60:6948] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx1.php"] [unique_id "aVfJ03KLI9INGPLzfndMewAAAMQ"]
[Fri Jan 02 21:36:19.527499 2026] [:error] [pid 50186:tid 50203] [client 4.213.18.60:7015] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xv.php"] [unique_id "aVfJ01XqK_iX4f-S70KAhgAAAY8"]
[Fri Jan 02 21:36:19.807463 2026] [:error] [pid 63208:tid 63231] [client 4.213.18.60:6971] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xv.php"] [unique_id "aVfJ03KLI9INGPLzfndMfAAAANQ"]
[Fri Jan 02 21:36:20.094679 2026] [:error] [pid 63098:tid 63127] [client 4.213.18.60:6930] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xv.php"] [unique_id "aVfJ1Mez9k78gUs48kporAAAABQ"]
[Fri Jan 02 21:36:20.374170 2026] [:error] [pid 63098:tid 63111] [client 4.213.18.60:6604] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xv.php"] [unique_id "aVfJ1Mez9k78gUs48kporgAAAAQ"]
[Fri Jan 02 21:36:20.683669 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:6922] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fv.php"] [unique_id "aVfJ1FXqK_iX4f-S70KAiQAAAZA"]
[Fri Jan 02 21:36:20.993957 2026] [:error] [pid 50186:tid 50195] [client 4.213.18.60:6593] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fv.php"] [unique_id "aVfJ1FXqK_iX4f-S70KAjAAAAYc"]
[Fri Jan 02 21:36:21.302748 2026] [:error] [pid 63208:tid 63234] [client 4.213.18.60:6973] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fv.php"] [unique_id "aVfJ1XKLI9INGPLzfndMfgAAANc"]
[Fri Jan 02 21:36:21.599247 2026] [:error] [pid 63208:tid 63212] [client 4.213.18.60:6956] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fv.php"] [unique_id "aVfJ1XKLI9INGPLzfndMgAAAAME"]
[Fri Jan 02 21:36:21.936710 2026] [:error] [pid 43358:tid 43362] [client 4.213.18.60:6594] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aVfJ1QncbHK9auzvrA9dzAAAAcI"]
[Fri Jan 02 21:36:22.232183 2026] [:error] [pid 50186:tid 50193] [client 4.213.18.60:6943] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aVfJ1lXqK_iX4f-S70KAjgAAAYU"]
[Fri Jan 02 21:36:22.531979 2026] [:error] [pid 50186:tid 50194] [client 4.213.18.60:6628] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aVfJ1lXqK_iX4f-S70KAkAAAAYY"]
[Fri Jan 02 21:36:22.840711 2026] [:error] [pid 50046:tid 50049] [client 4.213.18.60:6963] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aVfJ1izv7fgIiwkQYNC0qwAAAUE"]
[Fri Jan 02 21:36:23.187545 2026] [:error] [pid 63208:tid 63229] [client 4.213.18.60:6946] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsd.php"] [unique_id "aVfJ13KLI9INGPLzfndMggAAANI"]
[Fri Jan 02 21:36:23.490885 2026] [:error] [pid 50186:tid 50208] [client 4.213.18.60:6623] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsd.php"] [unique_id "aVfJ11XqK_iX4f-S70KAkgAAAZQ"]
[Fri Jan 02 21:36:23.789446 2026] [:error] [pid 29316:tid 29320] [client 4.213.18.60:7012] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsd.php"] [unique_id "aVfJ19fT9ty-7jZmgf-2cQAAAQI"]
[Fri Jan 02 21:36:24.127589 2026] [:error] [pid 29316:tid 29338] [client 4.213.18.60:7060] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsd.php"] [unique_id "aVfJ2NfT9ty-7jZmgf-2cwAAARQ"]
[Fri Jan 02 21:36:24.417412 2026] [:error] [pid 50186:tid 50191] [client 4.213.18.60:6627] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gtc.php"] [unique_id "aVfJ2FXqK_iX4f-S70KAkwAAAYM"]
[Fri Jan 02 21:36:24.716976 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:6926] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gtc.php"] [unique_id "aVfJ2FXqK_iX4f-S70KAlAAAAZI"]
[Fri Jan 02 21:36:25.027167 2026] [:error] [pid 63100:tid 63180] [client 4.213.18.60:6932] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gtc.php"] [unique_id "aVfJ2TuUXUKd3KTnKl9VoQAAAJM"]
[Fri Jan 02 21:36:25.312648 2026] [:error] [pid 63100:tid 63165] [client 4.213.18.60:6615] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gtc.php"] [unique_id "aVfJ2TuUXUKd3KTnKl9VogAAAIQ"]
[Fri Jan 02 21:36:25.661457 2026] [:error] [pid 29316:tid 29318] [client 4.213.18.60:7037] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atx.php"] [unique_id "aVfJ2dfT9ty-7jZmgf-2dgAAAQA"]
[Fri Jan 02 21:36:25.962393 2026] [:error] [pid 29316:tid 29337] [client 4.213.18.60:6937] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atx.php"] [unique_id "aVfJ2dfT9ty-7jZmgf-2eAAAARM"]
[Fri Jan 02 21:36:26.347644 2026] [:error] [pid 29316:tid 29331] [client 4.213.18.60:6618] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atx.php"] [unique_id "aVfJ2tfT9ty-7jZmgf-2ewAAAQ0"]
[Fri Jan 02 21:36:26.816403 2026] [:error] [pid 50186:tid 50189] [client 4.213.18.60:6634] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atx.php"] [unique_id "aVfJ2lXqK_iX4f-S70KAlgAAAYE"]
[Fri Jan 02 21:36:27.325466 2026] [:error] [pid 63100:tid 63170] [client 4.213.18.60:6610] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/z60.php"] [unique_id "aVfJ2zuUXUKd3KTnKl9VpQAAAIk"]
[Fri Jan 02 21:36:27.643925 2026] [:error] [pid 63100:tid 63171] [client 4.213.18.60:6607] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/z60.php"] [unique_id "aVfJ2zuUXUKd3KTnKl9VqAAAAIo"]
[Fri Jan 02 21:36:27.947503 2026] [:error] [pid 63100:tid 63162] [client 4.213.18.60:6917] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/z60.php"] [unique_id "aVfJ2zuUXUKd3KTnKl9VqQAAAIE"]
[Fri Jan 02 21:36:28.401152 2026] [:error] [pid 63100:tid 63179] [client 4.213.18.60:6597] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/z60.php"] [unique_id "aVfJ3DuUXUKd3KTnKl9VqwAAAJI"]
[Fri Jan 02 21:36:28.685223 2026] [:error] [pid 50186:tid 50198] [client 4.213.18.60:6881] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cheka.php"] [unique_id "aVfJ3FXqK_iX4f-S70KAmQAAAYo"]
[Fri Jan 02 21:36:29.027238 2026] [:error] [pid 63100:tid 63163] [client 4.213.18.60:15545] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cheka.php"] [unique_id "aVfJ3TuUXUKd3KTnKl9VsAAAAII"]
[Fri Jan 02 21:36:29.407936 2026] [:error] [pid 43358:tid 43378] [client 4.213.18.60:6612] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cheka.php"] [unique_id "aVfJ3QncbHK9auzvrA9d1gAAAdI"]
[Fri Jan 02 21:36:29.851483 2026] [:error] [pid 50046:tid 50058] [client 4.213.18.60:6955] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cheka.php"] [unique_id "aVfJ3Szv7fgIiwkQYNC0rAAAAUo"]
[Fri Jan 02 21:36:30.259875 2026] [:error] [pid 63098:tid 63114] [client 4.213.18.60:6602] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cabs.php"] [unique_id "aVfJ3sez9k78gUs48kpotQAAAAc"]
[Fri Jan 02 21:36:30.599490 2026] [:error] [pid 63208:tid 63225] [client 4.213.18.60:6964] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cabs.php"] [unique_id "aVfJ3nKLI9INGPLzfndMhgAAAM4"]
[Fri Jan 02 21:36:31.003289 2026] [:error] [pid 63099:tid 63149] [client 4.213.18.60:6892] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cabs.php"] [unique_id "aVfJ38mCZokRPYUhzvjC9wAAAE8"]
[Fri Jan 02 21:36:31.358009 2026] [:error] [pid 63099:tid 63155] [client 4.213.18.60:6596] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cabs.php"] [unique_id "aVfJ38mCZokRPYUhzvjC-AAAAFU"]
[Fri Jan 02 21:36:31.746333 2026] [:error] [pid 50046:tid 50072] [client 4.213.18.60:6862] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classgoto24.php"] [unique_id "aVfJ3yzv7fgIiwkQYNC0rwAAAVg"]
[Fri Jan 02 21:36:32.052041 2026] [:error] [pid 63099:tid 63154] [client 4.213.18.60:6942] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classgoto24.php"] [unique_id "aVfJ4MmCZokRPYUhzvjC-QAAAFQ"]
[Fri Jan 02 21:36:32.535083 2026] [:error] [pid 63099:tid 63144] [client 4.213.18.60:6893] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classgoto24.php"] [unique_id "aVfJ4MmCZokRPYUhzvjC_AAAAEo"]
[Fri Jan 02 21:36:32.895846 2026] [:error] [pid 63208:tid 63218] [client 4.213.18.60:7066] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classgoto24.php"] [unique_id "aVfJ4HKLI9INGPLzfndMiwAAAMc"]
[Fri Jan 02 21:36:33.369586 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:6601] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xtride.php"] [unique_id "aVfJ4VXqK_iX4f-S70KAmwAAAZA"]
[Fri Jan 02 21:36:33.675493 2026] [:error] [pid 63208:tid 63234] [client 4.213.18.60:6951] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xtride.php"] [unique_id "aVfJ4XKLI9INGPLzfndMjQAAANc"]
[Fri Jan 02 21:36:33.970436 2026] [:error] [pid 63099:tid 63158] [client 4.213.18.60:6864] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xtride.php"] [unique_id "aVfJ4cmCZokRPYUhzvjDAAAAAFg"]
[Fri Jan 02 21:36:34.265124 2026] [:error] [pid 50046:tid 50056] [client 4.213.18.60:6850] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xtride.php"] [unique_id "aVfJ4izv7fgIiwkQYNC0sAAAAUg"]
[Fri Jan 02 21:36:34.548663 2026] [:error] [pid 50046:tid 50059] [client 4.213.18.60:6960] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws29.php"] [unique_id "aVfJ4izv7fgIiwkQYNC0sQAAAUs"]
[Fri Jan 02 21:36:34.840804 2026] [:error] [pid 63099:tid 63145] [client 4.213.18.60:6598] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws29.php"] [unique_id "aVfJ4smCZokRPYUhzvjDAQAAAEs"]
[Fri Jan 02 21:36:57.591881 2026] [:error] [pid 50046:tid 50062] [client 4.213.18.60:6631] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wft.php"] [unique_id "aVfJ-Szv7fgIiwkQYNC0zAAAAU4"]
[Fri Jan 02 21:36:57.925820 2026] [:error] [pid 63208:tid 63229] [client 4.213.18.60:6608] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wft.php"] [unique_id "aVfJ-XKLI9INGPLzfndMqwAAANI"]
[Fri Jan 02 21:36:58.223990 2026] [:error] [pid 63208:tid 63223] [client 4.213.18.60:6620] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wft.php"] [unique_id "aVfJ-nKLI9INGPLzfndMrwAAAMw"]
[Fri Jan 02 21:36:58.529976 2026] [:error] [pid 63208:tid 63224] [client 4.213.18.60:6642] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wft.php"] [unique_id "aVfJ-nKLI9INGPLzfndMsQAAAM0"]
[Fri Jan 02 21:36:58.807504 2026] [:error] [pid 63099:tid 63144] [client 4.213.18.60:6916] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws28.php"] [unique_id "aVfJ-smCZokRPYUhzvjDCQAAAEo"]
[Fri Jan 02 21:36:59.097632 2026] [:error] [pid 50186:tid 50196] [client 4.213.18.60:6609] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws28.php"] [unique_id "aVfJ-1XqK_iX4f-S70KAwwAAAYg"]
[Fri Jan 02 21:36:59.373499 2026] [:error] [pid 63099:tid 63140] [client 4.213.18.60:6636] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws28.php"] [unique_id "aVfJ-8mCZokRPYUhzvjDCwAAAEY"]
[Fri Jan 02 21:36:59.647104 2026] [:error] [pid 63099:tid 63153] [client 4.213.18.60:6861] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws28.php"] [unique_id "aVfJ-8mCZokRPYUhzvjDDAAAAFM"]
[Fri Jan 02 21:36:59.943639 2026] [:error] [pid 50046:tid 50069] [client 4.213.18.60:6863] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aVfJ-yzv7fgIiwkQYNC0zgAAAVU"]
[Fri Jan 02 21:37:00.221413 2026] [:error] [pid 63100:tid 63176] [client 4.213.18.60:6643] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aVfJ_DuUXUKd3KTnKl9V0wAAAI8"]
[Fri Jan 02 21:37:00.506911 2026] [:error] [pid 50186:tid 50205] [client 4.213.18.60:6940] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aVfJ_FXqK_iX4f-S70KAxQAAAZE"]
[Fri Jan 02 21:37:00.783678 2026] [:error] [pid 63100:tid 63181] [client 4.213.18.60:6635] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aVfJ_DuUXUKd3KTnKl9V1QAAAJQ"]
[Fri Jan 02 21:37:01.055834 2026] [:error] [pid 63098:tid 63129] [client 4.213.18.60:6896] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pn.php"] [unique_id "aVfJ_cez9k78gUs48kpo3gAAABY"]
[Fri Jan 02 21:37:01.336605 2026] [:error] [pid 50186:tid 50199] [client 4.213.18.60:6957] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pn.php"] [unique_id "aVfJ_VXqK_iX4f-S70KAxgAAAYs"]
[Fri Jan 02 21:37:01.631387 2026] [:error] [pid 50186:tid 50204] [client 4.213.18.60:6654] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pn.php"] [unique_id "aVfJ_VXqK_iX4f-S70KAxwAAAZA"]
[Fri Jan 02 21:37:01.904146 2026] [:error] [pid 50186:tid 50192] [client 4.213.18.60:6822] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pn.php"] [unique_id "aVfJ_VXqK_iX4f-S70KAyQAAAYQ"]
[Fri Jan 02 21:37:02.197496 2026] [:error] [pid 50046:tid 50048] [client 4.213.18.60:6605] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fz.php"] [unique_id "aVfJ_izv7fgIiwkQYNC00AAAAUA"]
[Fri Jan 02 21:37:02.478841 2026] [:error] [pid 63100:tid 63175] [client 4.213.18.60:6949] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fz.php"] [unique_id "aVfJ_juUXUKd3KTnKl9V2AAAAI4"]
[Fri Jan 02 21:37:02.754095 2026] [:error] [pid 43358:tid 43366] [client 4.213.18.60:6965] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fz.php"] [unique_id "aVfJ_gncbHK9auzvrA9d-QAAAcY"]
[Fri Jan 02 21:37:03.044478 2026] [:error] [pid 63100:tid 63162] [client 4.213.18.60:6947] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fz.php"] [unique_id "aVfJ_zuUXUKd3KTnKl9V2QAAAIE"]
[Fri Jan 02 21:37:03.318370 2026] [:error] [pid 50186:tid 50211] [client 4.213.18.60:6873] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sang.php"] [unique_id "aVfJ_1XqK_iX4f-S70KAygAAAZc"]
[Fri Jan 02 21:37:03.615319 2026] [:error] [pid 63099:tid 63142] [client 4.213.18.60:6974] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sang.php"] [unique_id "aVfJ_8mCZokRPYUhzvjDEQAAAEg"]
[Fri Jan 02 21:37:03.892172 2026] [:error] [pid 63099:tid 63155] [client 4.213.18.60:6820] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sang.php"] [unique_id "aVfJ_8mCZokRPYUhzvjDFAAAAFU"]
[Fri Jan 02 21:37:04.164594 2026] [:error] [pid 50046:tid 50072] [client 4.213.18.60:6592] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sang.php"] [unique_id "aVfKACzv7fgIiwkQYNC00wAAAVg"]
[Fri Jan 02 21:37:04.443739 2026] [:error] [pid 63208:tid 63217] [client 4.213.18.60:6909] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0o0.php"] [unique_id "aVfKAHKLI9INGPLzfndMvwAAAMY"]
[Fri Jan 02 21:37:04.734477 2026] [:error] [pid 63208:tid 63219] [client 4.213.18.60:6901] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0o0.php"] [unique_id "aVfKAHKLI9INGPLzfndMwQAAAMg"]
[Fri Jan 02 21:37:05.013396 2026] [:error] [pid 43358:tid 43367] [client 4.213.18.60:6653] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0o0.php"] [unique_id "aVfKAQncbHK9auzvrA9d-wAAAcc"]
[Fri Jan 02 21:37:05.287651 2026] [:error] [pid 43358:tid 43360] [client 4.213.18.60:6872] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0o0.php"] [unique_id "aVfKAQncbHK9auzvrA9d_AAAAcA"]
[Fri Jan 02 21:37:05.579575 2026] [:error] [pid 63208:tid 63227] [client 4.213.18.60:7013] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxl.php"] [unique_id "aVfKAXKLI9INGPLzfndMxgAAANA"]
[Fri Jan 02 21:37:05.858379 2026] [:error] [pid 63100:tid 63163] [client 4.213.18.60:7045] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxl.php"] [unique_id "aVfKATuUXUKd3KTnKl9V2wAAAII"]
[Fri Jan 02 21:37:06.136595 2026] [:error] [pid 50046:tid 50071] [client 4.213.18.60:15489] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxl.php"] [unique_id "aVfKAizv7fgIiwkQYNC01gAAAVc"]
[Fri Jan 02 21:37:06.409809 2026] [:error] [pid 63099:tid 63142] [client 4.213.18.60:6616] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxl.php"] [unique_id "aVfKAsmCZokRPYUhzvjDJQAAAEg"]
[Fri Jan 02 21:37:06.690997 2026] [:error] [pid 29316:tid 29332] [client 4.213.18.60:6858] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aVfKAtfT9ty-7jZmgf-2gwAAAQ4"]
[Fri Jan 02 21:37:06.965372 2026] [:error] [pid 63100:tid 63185] [client 4.213.18.60:7035] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aVfKAjuUXUKd3KTnKl9V3wAAAJg"]
[Fri Jan 02 21:37:07.237206 2026] [:error] [pid 63100:tid 63168] [client 4.213.18.60:7088] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aVfKAzuUXUKd3KTnKl9V4AAAAIc"]
[Fri Jan 02 21:37:07.519004 2026] [:error] [pid 63100:tid 63174] [client 4.213.18.60:7002] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aVfKAzuUXUKd3KTnKl9V4QAAAI0"]
[Fri Jan 02 21:37:07.805617 2026] [:error] [pid 63208:tid 63215] [client 4.213.18.60:6599] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2clas.php"] [unique_id "aVfKA3KLI9INGPLzfndMyQAAAMQ"]
[Fri Jan 02 21:37:08.080433 2026] [:error] [pid 63100:tid 63161] [client 4.213.18.60:6887] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2clas.php"] [unique_id "aVfKBDuUXUKd3KTnKl9V4gAAAIA"]
[Fri Jan 02 21:37:08.354089 2026] [:error] [pid 63100:tid 63180] [client 4.213.18.60:6869] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2clas.php"] [unique_id "aVfKBDuUXUKd3KTnKl9V4wAAAJM"]
[Fri Jan 02 21:37:08.636047 2026] [:error] [pid 43358:tid 43360] [client 4.213.18.60:6823] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2clas.php"] [unique_id "aVfKBAncbHK9auzvrA9eDgAAAcA"]
[Fri Jan 02 21:37:08.944354 2026] [:error] [pid 43358:tid 43361] [client 4.213.18.60:7039] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aVfKBAncbHK9auzvrA9eDwAAAcE"]
[Fri Jan 02 21:37:09.216466 2026] [:error] [pid 43358:tid 43370] [client 4.213.18.60:6979] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aVfKBQncbHK9auzvrA9eEAAAAco"]
[Fri Jan 02 21:37:09.506095 2026] [:error] [pid 43358:tid 43383] [client 4.213.18.60:6650] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aVfKBQncbHK9auzvrA9eEwAAAdc"]
[Fri Jan 02 21:37:09.785410 2026] [:error] [pid 63208:tid 63232] [client 4.213.18.60:7110] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aVfKBXKLI9INGPLzfndMygAAANU"]
[Fri Jan 02 21:37:10.057966 2026] [:error] [pid 43358:tid 43380] [client 4.213.18.60:6595] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/files.php"] [unique_id "aVfKBgncbHK9auzvrA9eFAAAAdQ"]
[Fri Jan 02 21:37:10.337480 2026] [:error] [pid 63099:tid 63149] [client 4.213.18.60:6857] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/files.php"] [unique_id "aVfKBsmCZokRPYUhzvjDNwAAAE8"]
[Fri Jan 02 21:37:10.616687 2026] [:error] [pid 43358:tid 43381] [client 4.213.18.60:6844] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/files.php"] [unique_id "aVfKBgncbHK9auzvrA9eGAAAAdU"]
[Fri Jan 02 21:37:10.902342 2026] [:error] [pid 63100:tid 63170] [client 4.213.18.60:6936] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/files.php"] [unique_id "aVfKBjuUXUKd3KTnKl9V6AAAAIk"]
[Fri Jan 02 21:37:11.177991 2026] [:error] [pid 29316:tid 29329] [client 4.213.18.60:6853] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aVfKB9fT9ty-7jZmgf-2hAAAAQs"]
[Fri Jan 02 21:37:11.481862 2026] [:error] [pid 63208:tid 63212] [client 4.213.18.60:7029] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aVfKB3KLI9INGPLzfndMzAAAAME"]
[Fri Jan 02 21:37:11.754892 2026] [:error] [pid 50186:tid 50198] [client 4.213.18.60:6856] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aVfKB1XqK_iX4f-S70KA1wAAAYo"]
[Fri Jan 02 21:37:12.028558 2026] [:error] [pid 50046:tid 50068] [client 4.213.18.60:6649] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aVfKCCzv7fgIiwkQYNC02QAAAVQ"]
[Fri Jan 02 21:37:12.333054 2026] [:error] [pid 43358:tid 43366] [client 4.213.18.60:6981] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aVfKCAncbHK9auzvrA9eGwAAAcY"]
[Fri Jan 02 21:37:12.623269 2026] [:error] [pid 43358:tid 43360] [client 4.213.18.60:7026] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aVfKCAncbHK9auzvrA9eHAAAAcA"]
[Fri Jan 02 21:37:12.894664 2026] [:error] [pid 50046:tid 50050] [client 4.213.18.60:6894] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aVfKCCzv7fgIiwkQYNC02wAAAUI"]
[Fri Jan 02 21:37:13.168794 2026] [:error] [pid 63208:tid 63223] [client 4.213.18.60:6800] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aVfKCXKLI9INGPLzfndMzwAAAMw"]
[Fri Jan 02 21:37:13.458201 2026] [:error] [pid 63208:tid 63219] [client 4.213.18.60:6860] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aVfKCXKLI9INGPLzfndM0QAAAMg"]
[Fri Jan 02 21:37:13.731969 2026] [:error] [pid 63100:tid 63172] [client 4.213.18.60:6644] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aVfKCTuUXUKd3KTnKl9V7QAAAIs"]
[Fri Jan 02 21:37:14.072760 2026] [:error] [pid 63098:tid 63120] [client 4.213.18.60:6639] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aVfKCsez9k78gUs48kpo4wAAAA0"]
[Fri Jan 02 21:37:14.347214 2026] [:error] [pid 63208:tid 63213] [client 4.213.18.60:6954] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aVfKCnKLI9INGPLzfndM0wAAAMI"]
[Fri Jan 02 21:37:14.633123 2026] [:error] [pid 43358:tid 43382] [client 4.213.18.60:6817] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xb.php"] [unique_id "aVfKCgncbHK9auzvrA9eIQAAAdY"]
[Fri Jan 02 21:37:14.932781 2026] [:error] [pid 63100:tid 63184] [client 4.213.18.60:6851] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xb.php"] [unique_id "aVfKCjuUXUKd3KTnKl9V8AAAAJc"]
[Fri Jan 02 21:37:15.217137 2026] [:error] [pid 63100:tid 63183] [client 4.213.18.60:6920] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xb.php"] [unique_id "aVfKCzuUXUKd3KTnKl9V8QAAAJY"]
[Fri Jan 02 21:37:15.498692 2026] [:error] [pid 63100:tid 63174] [client 4.213.18.60:6640] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xb.php"] [unique_id "aVfKCzuUXUKd3KTnKl9V8wAAAI0"]
[Fri Jan 02 21:37:15.797077 2026] [:error] [pid 43358:tid 43374] [client 4.213.18.60:6877] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/enclas.php"] [unique_id "aVfKCwncbHK9auzvrA9eIwAAAc4"]
[Fri Jan 02 21:37:16.073089 2026] [:error] [pid 63208:tid 63227] [client 4.213.18.60:6991] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/enclas.php"] [unique_id "aVfKDHKLI9INGPLzfndM1AAAANA"]
[Fri Jan 02 21:37:16.349032 2026] [:error] [pid 63100:tid 63175] [client 4.213.18.60:6645] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/enclas.php"] [unique_id "aVfKDDuUXUKd3KTnKl9V-QAAAI4"]
[Fri Jan 02 21:37:16.664953 2026] [:error] [pid 50046:tid 50063] [client 4.213.18.60:6788] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/enclas.php"] [unique_id "aVfKDCzv7fgIiwkQYNC03wAAAU8"]
[Fri Jan 02 21:37:16.942015 2026] [:error] [pid 63098:tid 63116] [client 4.213.18.60:6855] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/he.php"] [unique_id "aVfKDMez9k78gUs48kpo5QAAAAk"]
[Fri Jan 02 21:37:17.214028 2026] [:error] [pid 63100:tid 63166] [client 4.213.18.60:6969] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/he.php"] [unique_id "aVfKDTuUXUKd3KTnKl9V_AAAAIU"]
[Fri Jan 02 21:37:17.485939 2026] [:error] [pid 50186:tid 50210] [client 4.213.18.60:6883] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/he.php"] [unique_id "aVfKDVXqK_iX4f-S70KA3QAAAZY"]
[Fri Jan 02 21:37:17.767806 2026] [:error] [pid 63100:tid 63171] [client 4.213.18.60:6950] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/he.php"] [unique_id "aVfKDTuUXUKd3KTnKl9V_gAAAIo"]
[Fri Jan 02 21:37:18.041824 2026] [:error] [pid 29316:tid 29337] [client 4.213.18.60:6882] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid.php"] [unique_id "aVfKDtfT9ty-7jZmgf-2iAAAARM"]
[Fri Jan 02 21:37:18.315675 2026] [:error] [pid 50186:tid 50202] [client 4.213.18.60:6614] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid.php"] [unique_id "aVfKDlXqK_iX4f-S70KA3wAAAY4"]
[Fri Jan 02 21:37:18.594101 2026] [:error] [pid 50186:tid 50208] [client 4.213.18.60:6803] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid.php"] [unique_id "aVfKDlXqK_iX4f-S70KA4QAAAZQ"]
[Fri Jan 02 21:37:18.875133 2026] [:error] [pid 29316:tid 29321] [client 4.213.18.60:6859] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid.php"] [unique_id "aVfKDtfT9ty-7jZmgf-2iwAAAQM"]
[Fri Jan 02 21:37:19.156838 2026] [:error] [pid 63208:tid 63231] [client 4.213.18.60:6924] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aVfKD3KLI9INGPLzfndM2AAAANQ"]
[Fri Jan 02 21:37:19.459394 2026] [:error] [pid 50046:tid 50048] [client 4.213.18.60:6879] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aVfKDyzv7fgIiwkQYNC04QAAAUA"]
[Fri Jan 02 21:37:19.803416 2026] [:error] [pid 29316:tid 29324] [client 4.213.18.60:7085] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aVfKD9fT9ty-7jZmgf-2jAAAAQY"]
[Fri Jan 02 21:37:20.113462 2026] [:error] [pid 50186:tid 50198] [client 4.213.18.60:6651] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aVfKEFXqK_iX4f-S70KA5wAAAYo"]
[Fri Jan 02 21:37:20.416426 2026] [:error] [pid 50186:tid 50199] [client 4.213.18.60:6852] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aVfKEFXqK_iX4f-S70KA6gAAAYs"]
[Fri Jan 02 21:37:20.730692 2026] [:error] [pid 50046:tid 50052] [client 4.213.18.60:6626] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aVfKECzv7fgIiwkQYNC04wAAAUQ"]
[Fri Jan 02 21:37:21.040693 2026] [:error] [pid 63208:tid 63233] [client 4.213.18.60:6888] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aVfKEXKLI9INGPLzfndM2gAAANY"]
[Fri Jan 02 21:37:21.390212 2026] [:error] [pid 50046:tid 50054] [client 4.213.18.60:6802] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aVfKESzv7fgIiwkQYNC05QAAAUY"]
[Fri Jan 02 21:37:21.695011 2026] [:error] [pid 29316:tid 29339] [client 4.213.18.60:6611] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfKEdfT9ty-7jZmgf-2jgAAARU"]
[Fri Jan 02 21:37:22.011895 2026] [:error] [pid 43358:tid 43363] [client 4.213.18.60:7032] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfKEgncbHK9auzvrA9eKAAAAcM"]
[Fri Jan 02 21:37:22.356026 2026] [:error] [pid 29316:tid 29334] [client 4.213.18.60:6646] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfKEtfT9ty-7jZmgf-2jwAAARA"]
[Fri Jan 02 21:37:22.652876 2026] [:error] [pid 63208:tid 63216] [client 4.213.18.60:7039] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ma1.php"] [unique_id "aVfKEnKLI9INGPLzfndM3gAAAMU"]
[Fri Jan 02 21:37:22.938417 2026] [:error] [pid 63208:tid 63214] [client 4.213.18.60:6912] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfKEnKLI9INGPLzfndM3wAAAMM"]
[Fri Jan 02 21:37:23.246511 2026] [:error] [pid 63208:tid 63217] [client 4.213.18.60:6959] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfKE3KLI9INGPLzfndM4QAAAMY"]
[Fri Jan 02 21:37:23.581100 2026] [:error] [pid 50186:tid 50194] [client 4.213.18.60:6900] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfKE1XqK_iX4f-S70KA8AAAAYY"]
[Fri Jan 02 21:37:23.887959 2026] [:error] [pid 50186:tid 50191] [client 4.213.18.60:6891] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVfKE1XqK_iX4f-S70KA8wAAAYM"]
[Fri Jan 02 21:37:24.188755 2026] [:error] [pid 50186:tid 50206] [client 4.213.18.60:6812] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfKFFXqK_iX4f-S70KA9QAAAZI"]
[Fri Jan 02 21:37:24.471860 2026] [:error] [pid 50046:tid 50051] [client 4.213.18.60:6970] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfKFCzv7fgIiwkQYNC07AAAAUM"]
[Fri Jan 02 21:37:24.787408 2026] [:error] [pid 50046:tid 50066] [client 4.213.18.60:6889] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfKFCzv7fgIiwkQYNC07QAAAVI"]
[Fri Jan 02 21:37:25.103313 2026] [:error] [pid 50186:tid 50198] [client 4.213.18.60:6870] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVfKFVXqK_iX4f-S70KA-QAAAYo"]
[Fri Jan 02 21:37:25.420246 2026] [:error] [pid 29316:tid 29319] [client 4.213.18.60:6732] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVfKFdfT9ty-7jZmgf-2kwAAAQE"]
[Fri Jan 02 21:37:25.747210 2026] [:error] [pid 63100:tid 63176] [client 4.213.18.60:6637] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVfKFTuUXUKd3KTnKl9WCAAAAI8"]
[Fri Jan 02 21:37:26.070340 2026] [:error] [pid 43358:tid 43366] [client 4.213.18.60:6619] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVfKFgncbHK9auzvrA9eKgAAAcY"]
[Fri Jan 02 21:37:26.418509 2026] [:error] [pid 50046:tid 50069] [client 4.213.18.60:6866] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aVfKFizv7fgIiwkQYNC07wAAAVU"]
[Fri Jan 02 21:37:26.734468 2026] [:error] [pid 63099:tid 63148] [client 4.213.18.60:6808] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfKFsmCZokRPYUhzvjDOwAAAE4"]
[Fri Jan 02 21:37:27.021501 2026] [:error] [pid 29316:tid 29330] [client 4.213.18.60:6632] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfKF9fT9ty-7jZmgf-2mQAAAQw"]
[Fri Jan 02 21:37:27.314207 2026] [:error] [pid 29316:tid 29321] [client 4.213.18.60:6899] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfKF9fT9ty-7jZmgf-2mwAAAQM"]
[Fri Jan 02 21:37:27.633180 2026] [:error] [pid 43358:tid 43361] [client 4.213.18.60:6724] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfKFwncbHK9auzvrA9eLAAAAcE"]
[Fri Jan 02 21:37:27.928896 2026] [:error] [pid 63208:tid 63225] [client 4.213.18.60:6792] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVfKF3KLI9INGPLzfndM5QAAAM4"]
[Fri Jan 02 21:37:28.226832 2026] [:error] [pid 29316:tid 29331] [client 4.213.18.60:6798] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVfKGNfT9ty-7jZmgf-2nAAAAQ0"]
[Fri Jan 02 21:37:28.568576 2026] [:error] [pid 29316:tid 29324] [client 4.213.18.60:6734] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVfKGNfT9ty-7jZmgf-2nQAAAQY"]
[Fri Jan 02 21:37:28.894545 2026] [:error] [pid 43358:tid 43368] [client 4.213.18.60:6953] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVfKGAncbHK9auzvrA9eLQAAAcg"]
[Fri Jan 02 21:37:29.213043 2026] [:error] [pid 50186:tid 50193] [client 4.213.18.60:6816] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfKGVXqK_iX4f-S70KBAgAAAYU"]
[Fri Jan 02 21:37:29.514001 2026] [:error] [pid 63100:tid 63178] [client 4.213.18.60:6807] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfKGTuUXUKd3KTnKl9WCgAAAJE"]
[Fri Jan 02 21:37:29.801202 2026] [:error] [pid 63100:tid 63167] [client 4.213.18.60:6784] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfKGTuUXUKd3KTnKl9WCwAAAIY"]
[Fri Jan 02 21:37:30.115515 2026] [:error] [pid 63100:tid 63164] [client 4.213.18.60:6630] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVfKGjuUXUKd3KTnKl9WDAAAAIM"]
[Fri Jan 02 21:37:30.437731 2026] [:error] [pid 63100:tid 63162] [client 4.213.18.60:6815] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfKGjuUXUKd3KTnKl9WEAAAAIE"]
[Fri Jan 02 21:37:30.819572 2026] [:error] [pid 50186:tid 50200] [client 4.213.18.60:6731] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfKGlXqK_iX4f-S70KBCQAAAYw"]
[Fri Jan 02 21:37:31.188724 2026] [:error] [pid 50186:tid 50203] [client 4.213.18.60:6818] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfKG1XqK_iX4f-S70KBDAAAAY8"]
[Fri Jan 02 21:37:31.533872 2026] [:error] [pid 43358:tid 43378] [client 4.213.18.60:6655] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVfKGwncbHK9auzvrA9eLwAAAdI"]
[Fri Jan 02 21:37:31.906428 2026] [:error] [pid 29316:tid 29323] [client 4.213.18.60:6783] [client 4.213.18.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVfKG9fT9ty-7jZmgf-2ngAAAQU"]
[Fri Jan 02 21:37:32.251364 2026] [:error] [pid 43358:tid 43383] [client 4.213.18.60:6854] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfKHAncbHK9auzvrA9eMAAAAdc"]
[Fri Jan 02 21:37:32.598495 2026] [:error] [pid 43358:tid 43380] [client 4.213.18.60:6641] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfKHAncbHK9auzvrA9eMQAAAdQ"]
[Fri Jan 02 21:37:32.923242 2026] [:error] [pid 29316:tid 29336] [client 4.213.18.60:6876] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVfKHNfT9ty-7jZmgf-2nwAAARI"]
[Fri Jan 02 21:37:33.248098 2026] [:error] [pid 43358:tid 43377] [client 4.213.18.60:6880] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfKHQncbHK9auzvrA9eMwAAAdE"]
[Fri Jan 02 21:37:33.564633 2026] [:error] [pid 50186:tid 50193] [client 4.213.18.60:6867] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfKHVXqK_iX4f-S70KBEwAAAYU"]
[Fri Jan 02 21:37:33.937025 2026] [:error] [pid 50046:tid 50070] [client 4.213.18.60:6764] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfKHSzv7fgIiwkQYNC0-AAAAVY"]
[Fri Jan 02 21:37:34.252878 2026] [:error] [pid 63098:tid 63107] [client 4.213.18.60:6728] [client 4.213.18.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVfKHsez9k78gUs48kpo6gAAAAA"]
[Wed Jan 07 11:55:25.527851 2026] [:error] [pid 58294:tid 58309] [client 195.178.110.161:48716] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aV3ZLVfzA7c0ITpf3nG7egAAAI0"]
[Wed Jan 07 14:46:14.906698 2026] [:error] [pid 58294:tid 58303] [client 195.178.110.161:50326] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aV4BNlfzA7c0ITpf3nHiUQAAAIc"]
[Fri Jan 09 13:24:04.418276 2026] [:error] [pid 14770:tid 14780] [client 104.28.153.17:29703] [client 104.28.153.17] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aWCQ9B5QbaVZ-6newJb8GQAAAgg"]
[Wed Jan 14 08:26:44.941654 2026] [:error] [pid 19278:tid 19289] [client 52.169.124.184:3721] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aWbixFGofyyxZQcTd1U0ygAAAAk"]
[Wed Jan 14 08:26:45.441513 2026] [:error] [pid 19187:tid 19193] [client 52.169.124.184:6734] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aWbixc9QVhFYhOfPPbO2HQAAAEE"]
[Wed Jan 14 08:26:45.942141 2026] [:error] [pid 19189:tid 19250] [client 52.169.124.184:6830] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aWbixXCsh382x04yx-3yjQAAAcM"]
[Wed Jan 14 08:26:46.443264 2026] [:error] [pid 19189:tid 19271] [client 52.169.124.184:5664] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aWbixnCsh382x04yx-3yjwAAAdg"]
[Wed Jan 14 08:26:46.941952 2026] [:error] [pid 19188:tid 19242] [client 52.169.124.184:6163] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6y7t.php"] [unique_id "aWbixp4gjaoWMKiTtXtM6QAAAVY"]
[Wed Jan 14 08:26:47.441337 2026] [:error] [pid 19187:tid 19216] [client 52.169.124.184:3264] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6y7t.php"] [unique_id "aWbix89QVhFYhOfPPbO2IAAAAFc"]
[Wed Jan 14 08:26:47.940246 2026] [:error] [pid 19188:tid 19227] [client 52.169.124.184:5637] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6y7t.php"] [unique_id "aWbix54gjaoWMKiTtXtM7wAAAUc"]
[Wed Jan 14 08:26:48.441675 2026] [:error] [pid 19189:tid 19262] [client 52.169.124.184:6191] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6y7t.php"] [unique_id "aWbiyHCsh382x04yx-3ylQAAAc8"]
[Wed Jan 14 08:26:48.942476 2026] [:error] [pid 19278:tid 19283] [client 52.169.124.184:7194] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/monso.php"] [unique_id "aWbiyFGofyyxZQcTd1U01gAAAAM"]
[Wed Jan 14 08:26:49.444565 2026] [:error] [pid 19187:tid 19203] [client 52.169.124.184:6886] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/monso.php"] [unique_id "aWbiyc9QVhFYhOfPPbO2JQAAAEs"]
[Wed Jan 14 08:26:49.951916 2026] [:error] [pid 19187:tid 19217] [client 52.169.124.184:5694] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/monso.php"] [unique_id "aWbiyc9QVhFYhOfPPbO2JgAAAFg"]
[Wed Jan 14 08:26:50.457721 2026] [:error] [pid 19278:tid 19291] [client 52.169.124.184:3324] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/monso.php"] [unique_id "aWbiylGofyyxZQcTd1U03AAAAAs"]
[Wed Jan 14 08:26:50.958327 2026] [:error] [pid 19188:tid 19230] [client 52.169.124.184:6749] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bnnof6.php"] [unique_id "aWbiyp4gjaoWMKiTtXtM9AAAAUo"]
[Wed Jan 14 08:26:51.459215 2026] [:error] [pid 19189:tid 19260] [client 52.169.124.184:5493] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bnnof6.php"] [unique_id "aWbiy3Csh382x04yx-3ymAAAAc0"]
[Wed Jan 14 08:26:51.960292 2026] [:error] [pid 19188:tid 19241] [client 52.169.124.184:2232] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bnnof6.php"] [unique_id "aWbiy54gjaoWMKiTtXtM-gAAAVU"]
[Wed Jan 14 08:26:52.461133 2026] [:error] [pid 19188:tid 19240] [client 52.169.124.184:2029] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bnnof6.php"] [unique_id "aWbizJ4gjaoWMKiTtXtM_AAAAVQ"]
[Wed Jan 14 08:26:52.963033 2026] [:error] [pid 19187:tid 19206] [client 52.169.124.184:5218] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/str.php"] [unique_id "aWbizM9QVhFYhOfPPbO2KAAAAE4"]
[Wed Jan 14 08:26:53.467876 2026] [:error] [pid 19278:tid 19282] [client 52.169.124.184:3296] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/str.php"] [unique_id "aWbizVGofyyxZQcTd1U04AAAAAI"]
[Wed Jan 14 08:26:53.969453 2026] [:error] [pid 19278:tid 19304] [client 52.169.124.184:6739] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/str.php"] [unique_id "aWbizVGofyyxZQcTd1U04wAAABg"]
[Wed Jan 14 08:26:54.470475 2026] [:error] [pid 19188:tid 19236] [client 52.169.124.184:5245] [client 52.169.124.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/str.php"] [unique_id "aWbizp4gjaoWMKiTtXtNAwAAAVA"]
[Sat Jan 17 20:01:59.979421 2026] [:error] [pid 31224:tid 31285] [client 104.28.153.23:41287] [client 104.28.153.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aWt6NzgpVpEMk8-OQkgckgAAAFg"]
[Tue Jan 20 22:17:33.425074 2026] [autoindex:error] [pid 56326:tid 56333] [client 20.196.95.39:11264] AH01276: Cannot serve directory /home/end2endh/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 22:17:42.078870 2026] [autoindex:error] [pid 56326:tid 56334] [client 20.196.95.39:11264] AH01276: Cannot serve directory /home/end2endh/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Jan 23 19:04:46.714006 2026] [:error] [pid 11607:tid 11657] [client 161.115.239.110:29281] [client 161.115.239.110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXNVzgucTAUsUUzKw5f-FAAAAE0"]
[Fri Jan 23 19:05:12.163811 2026] [:error] [pid 1517:tid 1534] [client 161.115.239.70:62019] [client 161.115.239.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/author/12/"] [unique_id "aXNV6CZNw8-8ydKHCJtjDAAAAc4"]
[Fri Jan 23 19:05:13.032300 2026] [:error] [pid 1517:tid 1538] [client 161.115.239.70:65333] [client 161.115.239.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/author/12/"] [unique_id "aXNV6SZNw8-8ydKHCJtjDQAAAdI"]
[Fri Jan 23 19:05:13.890870 2026] [:error] [pid 11606:tid 11628] [client 161.115.239.70:24575] [client 161.115.239.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/author/12/"] [unique_id "aXNV6VnjAJqfHEQLcshyJAAAAA0"]
[Fri Jan 23 19:05:14.751475 2026] [:error] [pid 64230:tid 64252] [client 161.115.239.70:3195] [client 161.115.239.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/author/12/"] [unique_id "aXNV6q2JXmVjD91caKKwjwAAAVM"]
[Fri Jan 23 19:05:15.713922 2026] [:error] [pid 11608:tid 11684] [client 161.115.239.110:34181] [client 161.115.239.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.115.239.110, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aXNV674alK6RZLlMctq2kwAAAIw"]
[Fri Jan 23 19:05:23.682655 2026] [:error] [pid 64912:tid 64924] [client 161.115.239.110:52489] [client 161.115.239.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.115.239.110, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aXNV87em6jVGKqodwtLmuQAAAYo"]
[Fri Jan 23 19:05:28.986721 2026] [:error] [pid 64912:tid 64925] [client 161.115.239.110:52489] [client 161.115.239.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.115.239.110, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aXNV-Lem6jVGKqodwtLmvwAAAYs"]
[Fri Jan 23 19:05:34.228692 2026] [:error] [pid 64912:tid 64920] [client 161.115.239.110:52489] [client 161.115.239.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.115.239.110, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aXNV_rem6jVGKqodwtLm0wAAAYY"]
[Fri Jan 23 21:37:39.346407 2026] [:error] [pid 11608:tid 11673] [client 196.177.114.215:56253] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5o74alK6RZLlMctrWmgAAAIE"]
[Fri Jan 23 21:37:39.364368 2026] [:error] [pid 62368:tid 62389] [client 196.177.114.215:56252] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aXN5oyeMzKRnyYLMANOfngAAARI"]
[Wed Jan 28 07:00:59.648023 2026] [:error] [pid 2454:tid 2474] [client 1.234.36.78:54553] [client 1.234.36.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aXlDq5vv4I21Ywd7NNY62wAAAZA"]
[Thu Jan 29 22:28:18.025231 2026] [:error] [pid 20486:tid 20511] [client 47.90.227.150:36696] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aXtugngqSZb6GBx5nnMV2AAAARY"]
[Fri Jan 30 07:17:38.134469 2026] [:error] [pid 38980:tid 39001] [client 1.234.36.78:55301] [client 1.234.36.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aXvqkrYByxUZEaKXdHr0twAAAg4"]
[Thu Feb 05 15:49:52.772575 2026] [:error] [pid 33122:tid 33125] [client 161.35.195.203:61212] [client 161.35.195.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.195.203, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aYRLoPW0IebAnFB9KDDwpQAAAEE"]
[Fri Feb 06 00:31:29.512315 2026] [:error] [pid 11459:tid 11523] [client 45.148.10.238:47864] [client 45.148.10.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aYTF4Zn3t_QGiBnEMgP5xAAAAEw"]
[Fri Feb 06 18:42:35.687282 2026] [:error] [pid 3382:tid 3457] [client 185.137.164.10:25121] [client 185.137.164.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/HEAD"] [unique_id "aYXFm8IgU1HR0rhYrE8oWQAAAJE"]
[Mon Feb 09 05:44:51.826899 2026] [:error] [pid 47939:tid 48009] [client 195.178.110.223:39456] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aYkD09kpZei8M7cJ2z1D9gAAAIM"]
[Mon Feb 09 06:47:14.240909 2026] [:error] [pid 48044:tid 48061] [client 195.178.110.223:50852] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aYkScpvmvsMP5E03sZLr8QAAAM8"]
[Tue Feb 10 06:05:25.741404 2026] [:error] [pid 30054:tid 30072] [client 159.65.15.207:60996] [client 159.65.15.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aYpaJWecgOOXCu-GgYUsawAAARA"]
[Fri Feb 13 07:24:44.334653 2026] [autoindex:error] [pid 51243:tid 51266] [client 20.100.187.56:58747] AH01276: Cannot serve directory /home/end2endh/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 07:24:44.601588 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:47957] [client 20.100.187.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aY5hPKp--SFY2nwOiql2pQAAAMo"]
[Fri Feb 13 07:24:50.609255 2026] [:error] [pid 49225:tid 49316] [client 20.100.187.56:33123] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zaa.php"] [unique_id "aY5hQjwH8-zGxtAd3jsEKQAAAJY"]
[Fri Feb 13 07:24:58.388078 2026] [:error] [pid 49224:tid 49289] [client 20.100.187.56:34125] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zaa.php"] [unique_id "aY5hStiAvPoWmw5YhwnErQAAAFY"]
[Fri Feb 13 07:25:31.741960 2026] [:error] [pid 49223:tid 49247] [client 20.100.187.56:36573] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY5hax8A_fZBamNLnfVfZwAAAA8"]
[Fri Feb 13 07:26:49.899451 2026] [:error] [pid 49335:tid 49353] [client 20.100.187.56:32480] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aY5huap--SFY2nwOiql37gAAANA"]
[Fri Feb 13 07:26:50.770812 2026] [:error] [pid 49223:tid 49249] [client 20.100.187.56:23339] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aY5huh8A_fZBamNLnfVf8wAAABE"]
[Fri Feb 13 07:26:52.156871 2026] [:error] [pid 49225:tid 49304] [client 20.100.187.56:59439] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aY5hvDwH8-zGxtAd3jsFbgAAAIo"]
[Fri Feb 13 07:26:53.052733 2026] [:error] [pid 49225:tid 49302] [client 20.100.187.56:35543] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aY5hvTwH8-zGxtAd3jsFcQAAAIg"]
[Fri Feb 13 07:26:53.827423 2026] [:error] [pid 49335:tid 49357] [client 20.100.187.56:25699] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dr.php"] [unique_id "aY5hvap--SFY2nwOiql3-gAAANQ"]
[Fri Feb 13 07:26:54.464448 2026] [:error] [pid 51243:tid 51253] [client 20.100.187.56:23301] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dr.php"] [unique_id "aY5hvsim7ZTAHzi7xZv08wAAAQg"]
[Fri Feb 13 07:26:55.424093 2026] [:error] [pid 49335:tid 49344] [client 20.100.187.56:35541] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dr.php"] [unique_id "aY5hv6p--SFY2nwOiql4AAAAAMc"]
[Fri Feb 13 07:26:56.358324 2026] [:error] [pid 49335:tid 49350] [client 20.100.187.56:29449] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dr.php"] [unique_id "aY5hwKp--SFY2nwOiql4BAAAAM0"]
[Fri Feb 13 07:26:56.998579 2026] [:error] [pid 51243:tid 51254] [client 20.100.187.56:29457] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY5hwMim7ZTAHzi7xZv0-wAAAQk"]
[Fri Feb 13 07:26:57.743405 2026] [:error] [pid 49225:tid 49309] [client 20.100.187.56:25671] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY5hwTwH8-zGxtAd3jsFdAAAAI8"]
[Fri Feb 13 07:26:58.393663 2026] [:error] [pid 49225:tid 49297] [client 20.100.187.56:31022] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY5hwjwH8-zGxtAd3jsFdgAAAIM"]
[Fri Feb 13 07:26:59.221316 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:35767] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY5hw6p--SFY2nwOiql4DwAAAM4"]
[Fri Feb 13 07:27:00.132619 2026] [:error] [pid 49224:tid 49277] [client 20.100.187.56:64280] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5hxNiAvPoWmw5YhwnGIgAAAEo"]
[Fri Feb 13 07:27:01.061188 2026] [:error] [pid 49224:tid 49287] [client 20.100.187.56:25689] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5hxdiAvPoWmw5YhwnGJQAAAFQ"]
[Fri Feb 13 07:27:01.697339 2026] [:error] [pid 49224:tid 49284] [client 20.100.187.56:31027] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5hxdiAvPoWmw5YhwnGKwAAAFE"]
[Fri Feb 13 07:27:02.581096 2026] [:error] [pid 49225:tid 49318] [client 20.100.187.56:64269] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5hxjwH8-zGxtAd3jsFfQAAAJg"]
[Fri Feb 13 07:27:03.544611 2026] [:error] [pid 49223:tid 49251] [client 20.100.187.56:29450] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5hxx8A_fZBamNLnfVgAAAAABM"]
[Fri Feb 13 07:27:04.821441 2026] [:error] [pid 49223:tid 49250] [client 20.100.187.56:27272] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5hyB8A_fZBamNLnfVgBQAAABI"]
[Fri Feb 13 07:27:06.019354 2026] [:error] [pid 49225:tid 49313] [client 20.100.187.56:37878] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5hyjwH8-zGxtAd3jsFggAAAJM"]
[Fri Feb 13 07:27:06.877292 2026] [:error] [pid 49335:tid 49341] [client 20.100.187.56:59440] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5hyqp--SFY2nwOiql4GgAAAMQ"]
[Fri Feb 13 07:27:07.946771 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:63666] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aY5hy6p--SFY2nwOiql4IAAAAMo"]
[Fri Feb 13 07:27:09.025055 2026] [:error] [pid 51243:tid 51266] [client 20.100.187.56:63676] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aY5hzcim7ZTAHzi7xZv1DAAAARU"]
[Fri Feb 13 07:27:09.679487 2026] [:error] [pid 51243:tid 51267] [client 20.100.187.56:56815] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aY5hzcim7ZTAHzi7xZv1DwAAARY"]
[Fri Feb 13 07:27:10.653879 2026] [:error] [pid 49335:tid 49357] [client 20.100.187.56:56821] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwso.php"] [unique_id "aY5hzqp--SFY2nwOiql4JQAAANQ"]
[Fri Feb 13 07:27:11.449623 2026] [:error] [pid 49335:tid 49356] [client 20.100.187.56:64319] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about/function.php"] [unique_id "aY5hz6p--SFY2nwOiql4KAAAANM"]
[Fri Feb 13 07:27:12.513190 2026] [:error] [pid 49225:tid 49299] [client 20.100.187.56:51710] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about/function.php"] [unique_id "aY5h0DwH8-zGxtAd3jsFiwAAAIU"]
[Fri Feb 13 07:27:13.653318 2026] [:error] [pid 49223:tid 49246] [client 20.100.187.56:58171] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about/function.php"] [unique_id "aY5h0R8A_fZBamNLnfVgFQAAAA4"]
[Fri Feb 13 07:27:14.392861 2026] [:error] [pid 51243:tid 51255] [client 20.100.187.56:64265] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about/function.php"] [unique_id "aY5h0sim7ZTAHzi7xZv1GQAAAQo"]
[Fri Feb 13 07:27:16.397347 2026] [:error] [pid 49335:tid 49360] [client 20.100.187.56:30982] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/geck.php"] [unique_id "aY5h1Kp--SFY2nwOiql4MAAAANc"]
[Fri Feb 13 07:27:19.934471 2026] [:error] [pid 49335:tid 49349] [client 20.100.187.56:59400] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/geck.php"] [unique_id "aY5h16p--SFY2nwOiql4NwAAAMw"]
[Fri Feb 13 07:27:21.560100 2026] [:error] [pid 49225:tid 49306] [client 20.100.187.56:29473] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/geck.php"] [unique_id "aY5h2TwH8-zGxtAd3jsFmQAAAIw"]
[Fri Feb 13 07:27:23.669986 2026] [:error] [pid 51243:tid 51252] [client 20.100.187.56:64257] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/geck.php"] [unique_id "aY5h28im7ZTAHzi7xZv1IwAAAQc"]
[Fri Feb 13 07:27:26.547798 2026] [:error] [pid 51243:tid 51255] [client 20.100.187.56:51690] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/errw.php"] [unique_id "aY5h3sim7ZTAHzi7xZv1KwAAAQo"]
[Fri Feb 13 07:27:28.978456 2026] [:error] [pid 49335:tid 49349] [client 20.100.187.56:53444] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/errw.php"] [unique_id "aY5h4Kp--SFY2nwOiql44AAAAMw"]
[Fri Feb 13 07:27:32.718953 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:61493] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/errw.php"] [unique_id "aY5h5Kp--SFY2nwOiql47AAAAMo"]
[Fri Feb 13 07:27:35.829004 2026] [:error] [pid 49224:tid 49291] [client 20.100.187.56:27266] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/errw.php"] [unique_id "aY5h59iAvPoWmw5YhwnGiQAAAFg"]
[Fri Feb 13 07:27:37.122976 2026] [:error] [pid 49224:tid 49279] [client 20.100.187.56:31530] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aY5h6diAvPoWmw5YhwnGkAAAAEw"]
[Fri Feb 13 07:27:38.406538 2026] [:error] [pid 49225:tid 49297] [client 20.100.187.56:31022] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aY5h6jwH8-zGxtAd3jsFuAAAAIM"]
[Fri Feb 13 07:27:39.398281 2026] [:error] [pid 51243:tid 51263] [client 20.100.187.56:51676] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aY5h68im7ZTAHzi7xZv1TwAAARI"]
[Fri Feb 13 07:27:40.469021 2026] [:error] [pid 51243:tid 51256] [client 20.100.187.56:27892] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aY5h7Mim7ZTAHzi7xZv1VAAAAQs"]
[Fri Feb 13 07:27:41.608860 2026] [:error] [pid 49335:tid 49350] [client 20.100.187.56:31495] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jsond.php"] [unique_id "aY5h7ap--SFY2nwOiql5AQAAAM0"]
[Fri Feb 13 07:27:43.041096 2026] [:error] [pid 51243:tid 51254] [client 20.100.187.56:27854] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jsond.php"] [unique_id "aY5h78im7ZTAHzi7xZv1WAAAAQk"]
[Fri Feb 13 07:27:44.604503 2026] [:error] [pid 49224:tid 49283] [client 20.100.187.56:30403] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jsond.php"] [unique_id "aY5h8NiAvPoWmw5YhwnGngAAAFA"]
[Fri Feb 13 07:27:46.371188 2026] [:error] [pid 49224:tid 49277] [client 20.100.187.56:32436] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jsond.php"] [unique_id "aY5h8tiAvPoWmw5YhwnGpwAAAEo"]
[Fri Feb 13 07:31:50.475514 2026] [:error] [pid 51243:tid 51259] [client 20.100.187.56:58752] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hzz.php"] [unique_id "aY5i5sim7ZTAHzi7xZv3agAAAQ4"]
[Fri Feb 13 07:31:51.869095 2026] [:error] [pid 51243:tid 51266] [client 20.100.187.56:7535] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hzz.php"] [unique_id "aY5i58im7ZTAHzi7xZv3cQAAARU"]
[Fri Feb 13 07:31:52.946865 2026] [:error] [pid 49225:tid 49301] [client 20.100.187.56:48660] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hzz.php"] [unique_id "aY5i6DwH8-zGxtAd3jsINgAAAIc"]
[Fri Feb 13 07:31:53.767471 2026] [:error] [pid 49335:tid 49350] [client 20.100.187.56:48661] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hzz.php"] [unique_id "aY5i6ap--SFY2nwOiql73wAAAM0"]
[Fri Feb 13 07:31:54.684306 2026] [:error] [pid 49335:tid 49357] [client 20.100.187.56:49115] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5i6qp--SFY2nwOiql74wAAANQ"]
[Fri Feb 13 07:31:55.740136 2026] [:error] [pid 49224:tid 49287] [client 20.100.187.56:7513] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5i69iAvPoWmw5YhwnI3wAAAFQ"]
[Fri Feb 13 07:31:57.025974 2026] [:error] [pid 49223:tid 49233] [client 20.100.187.56:29455] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5i7R8A_fZBamNLnfViUwAAAAE"]
[Fri Feb 13 07:31:58.016472 2026] [:error] [pid 49225:tid 49308] [client 20.100.187.56:48665] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5i7jwH8-zGxtAd3jsIRQAAAI4"]
[Fri Feb 13 07:31:58.816743 2026] [:error] [pid 49224:tid 49267] [client 20.100.187.56:7507] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/system.php"] [unique_id "aY5i7tiAvPoWmw5YhwnI6gAAAEA"]
[Fri Feb 13 07:32:00.237773 2026] [:error] [pid 49223:tid 49246] [client 20.100.187.56:7550] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/system.php"] [unique_id "aY5i8B8A_fZBamNLnfViXgAAAA4"]
[Fri Feb 13 07:32:01.007108 2026] [:error] [pid 49225:tid 49300] [client 20.100.187.56:26282] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/system.php"] [unique_id "aY5i8TwH8-zGxtAd3jsISwAAAIY"]
[Fri Feb 13 07:32:02.130654 2026] [:error] [pid 49224:tid 49283] [client 20.100.187.56:25724] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/system.php"] [unique_id "aY5i8tiAvPoWmw5YhwnI9gAAAFA"]
[Fri Feb 13 07:32:03.296256 2026] [:error] [pid 49223:tid 49244] [client 20.100.187.56:25717] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aY5i8x8A_fZBamNLnfViaAAAAAw"]
[Fri Feb 13 07:32:04.428300 2026] [:error] [pid 49224:tid 49276] [client 20.100.187.56:37882] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aY5i9NiAvPoWmw5YhwnJBgAAAEk"]
[Fri Feb 13 07:32:05.454966 2026] [:error] [pid 51243:tid 51246] [client 20.100.187.56:29454] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aY5i9cim7ZTAHzi7xZv3vQAAAQE"]
[Fri Feb 13 07:32:06.688154 2026] [:error] [pid 51243:tid 51258] [client 20.100.187.56:62761] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aY5i9sim7ZTAHzi7xZv3xwAAAQ0"]
[Fri Feb 13 07:32:07.711571 2026] [:error] [pid 49335:tid 49361] [client 20.100.187.56:7983] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwq13.php"] [unique_id "aY5i96p--SFY2nwOiql8BwAAANg"]
[Fri Feb 13 07:32:09.429590 2026] [:error] [pid 49335:tid 49349] [client 20.100.187.56:59415] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwq13.php"] [unique_id "aY5i-ap--SFY2nwOiql8FQAAAMw"]
[Fri Feb 13 07:32:10.549131 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:34061] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwq13.php"] [unique_id "aY5i-qp--SFY2nwOiql8HAAAAM4"]
[Fri Feb 13 07:32:11.726747 2026] [:error] [pid 49335:tid 49344] [client 20.100.187.56:23019] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zwq13.php"] [unique_id "aY5i-6p--SFY2nwOiql8JgAAAMc"]
[Fri Feb 13 07:32:13.744246 2026] [:error] [pid 51243:tid 51246] [client 20.100.187.56:59332] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5i_cim7ZTAHzi7xZv31QAAAQE"]
[Fri Feb 13 07:32:16.715925 2026] [:error] [pid 49223:tid 49249] [client 20.100.187.56:63643] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5jAB8A_fZBamNLnfVigQAAABE"]
[Fri Feb 13 07:32:17.997407 2026] [:error] [pid 49335:tid 49342] [client 20.100.187.56:36150] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5jAap--SFY2nwOiql8QQAAAMU"]
[Fri Feb 13 07:32:19.685277 2026] [:error] [pid 49223:tid 49245] [client 20.100.187.56:7955] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5jAx8A_fZBamNLnfViiAAAAA0"]
[Fri Feb 13 07:32:20.599727 2026] [:error] [pid 49223:tid 49236] [client 20.100.187.56:36145] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5jBB8A_fZBamNLnfViiwAAAAQ"]
[Fri Feb 13 07:32:21.559978 2026] [:error] [pid 49335:tid 49340] [client 20.100.187.56:59390] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5jBap--SFY2nwOiql8TAAAAMM"]
[Fri Feb 13 07:32:22.261606 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:7872] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5jBqp--SFY2nwOiql8UgAAAMo"]
[Fri Feb 13 07:32:23.206759 2026] [:error] [pid 49225:tid 49306] [client 20.100.187.56:23009] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5jBzwH8-zGxtAd3jsIgwAAAIw"]
[Fri Feb 13 07:32:24.421862 2026] [:error] [pid 51243:tid 51268] [client 20.100.187.56:58057] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.cache/x.php"] [unique_id "aY5jCMim7ZTAHzi7xZv34gAAARc"]
[Fri Feb 13 07:32:25.737489 2026] [:error] [pid 49223:tid 49244] [client 20.100.187.56:7877] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.cache/x.php"] [unique_id "aY5jCR8A_fZBamNLnfVingAAAAw"]
[Fri Feb 13 07:32:27.061068 2026] [:error] [pid 49335:tid 49338] [client 20.100.187.56:7885] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.cache/x.php"] [unique_id "aY5jC6p--SFY2nwOiql8bQAAAME"]
[Fri Feb 13 07:32:28.700517 2026] [:error] [pid 51243:tid 51258] [client 20.100.187.56:7896] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.cache/x.php"] [unique_id "aY5jDMim7ZTAHzi7xZv35wAAAQ0"]
[Fri Feb 13 07:32:30.251594 2026] [:error] [pid 49335:tid 49344] [client 20.100.187.56:44992] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/la.php"] [unique_id "aY5jDqp--SFY2nwOiql8hgAAAMc"]
[Fri Feb 13 07:32:31.786580 2026] [:error] [pid 49225:tid 49317] [client 20.100.187.56:45031] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/la.php"] [unique_id "aY5jDzwH8-zGxtAd3jsIlAAAAJc"]
[Fri Feb 13 07:32:33.905397 2026] [:error] [pid 49225:tid 49314] [client 20.100.187.56:30941] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/la.php"] [unique_id "aY5jETwH8-zGxtAd3jsImwAAAJQ"]
[Fri Feb 13 07:32:35.477700 2026] [:error] [pid 49224:tid 49269] [client 20.100.187.56:64296] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/la.php"] [unique_id "aY5jE9iAvPoWmw5YhwnJUwAAAEI"]
[Fri Feb 13 07:32:36.372056 2026] [:error] [pid 49223:tid 49251] [client 20.100.187.56:47348] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aY5jFB8A_fZBamNLnfVirAAAABM"]
[Fri Feb 13 07:32:37.527204 2026] [:error] [pid 49335:tid 49341] [client 20.100.187.56:39194] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aY5jFap--SFY2nwOiql8qAAAAMQ"]
[Fri Feb 13 07:32:38.690274 2026] [:error] [pid 51243:tid 51249] [client 20.100.187.56:36132] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aY5jFsim7ZTAHzi7xZv4AwAAAQQ"]
[Fri Feb 13 07:32:39.539747 2026] [:error] [pid 49223:tid 49242] [client 20.100.187.56:28812] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/install.php"] [unique_id "aY5jFx8A_fZBamNLnfVitAAAAAo"]
[Fri Feb 13 07:32:40.833642 2026] [:error] [pid 49225:tid 49311] [client 20.100.187.56:44357] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Geforce.php"] [unique_id "aY5jGDwH8-zGxtAd3jsIuAAAAJE"]
[Fri Feb 13 07:32:42.225773 2026] [:error] [pid 49225:tid 49299] [client 20.100.187.56:64260] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Geforce.php"] [unique_id "aY5jGjwH8-zGxtAd3jsIugAAAIU"]
[Fri Feb 13 07:32:42.931938 2026] [:error] [pid 49335:tid 49339] [client 20.100.187.56:22969] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Geforce.php"] [unique_id "aY5jGqp--SFY2nwOiql8xQAAAMI"]
[Fri Feb 13 07:32:43.858636 2026] [:error] [pid 49335:tid 49360] [client 20.100.187.56:26769] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Geforce.php"] [unique_id "aY5jG6p--SFY2nwOiql8zwAAANc"]
[Fri Feb 13 07:32:44.854826 2026] [:error] [pid 49224:tid 49281] [client 20.100.187.56:64286] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/nyan.php"] [unique_id "aY5jHNiAvPoWmw5YhwnJaQAAAE4"]
[Fri Feb 13 07:32:45.867800 2026] [:error] [pid 49335:tid 49337] [client 20.100.187.56:35812] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/nyan.php"] [unique_id "aY5jHap--SFY2nwOiql82gAAAMA"]
[Fri Feb 13 07:32:46.689317 2026] [:error] [pid 49225:tid 49316] [client 20.100.187.56:47297] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/nyan.php"] [unique_id "aY5jHjwH8-zGxtAd3jsIwAAAAJY"]
[Fri Feb 13 07:32:55.174901 2026] [autoindex:error] [pid 49225:tid 49314] [client 20.100.187.56:28826] AH01276: Cannot serve directory /home/end2endh/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 07:32:58.297958 2026] [:error] [pid 49225:tid 49303] [client 20.100.187.56:56893] [client 20.100.187.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aY5jKjwH8-zGxtAd3jsI9gAAAIk"]
[Fri Feb 13 07:36:44.638037 2026] [:error] [pid 49223:tid 49244] [client 20.100.187.56:32395] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ak.php"] [unique_id "aY5kDB8A_fZBamNLnfVkjwAAAAw"]
[Fri Feb 13 07:37:01.259174 2026] [:error] [pid 49335:tid 49357] [client 20.100.187.56:59407] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ak.php"] [unique_id "aY5kHap--SFY2nwOiqmBTAAAANQ"]
[Fri Feb 13 07:37:18.018349 2026] [:error] [pid 49335:tid 49342] [client 20.100.187.56:30441] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.trash7309/dd/"] [unique_id "aY5kLqp--SFY2nwOiqmBhgAAAMU"]
[Fri Feb 13 07:37:23.563132 2026] [:error] [pid 49335:tid 49352] [client 20.100.187.56:16122] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mds.php"] [unique_id "aY5kM6p--SFY2nwOiqmBlAAAAM8"]
[Fri Feb 13 07:37:25.890708 2026] [:error] [pid 49225:tid 49318] [client 20.100.187.56:16103] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mds.php"] [unique_id "aY5kNTwH8-zGxtAd3jsLwwAAAJg"]
[Fri Feb 13 07:37:27.397568 2026] [:error] [pid 49225:tid 49297] [client 20.100.187.56:16120] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mds.php"] [unique_id "aY5kNzwH8-zGxtAd3jsLzAAAAIM"]
[Fri Feb 13 07:37:29.982146 2026] [:error] [pid 49225:tid 49305] [client 20.100.187.56:57507] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mds.php"] [unique_id "aY5kOTwH8-zGxtAd3jsL0gAAAIs"]
[Fri Feb 13 07:37:35.562314 2026] [:error] [pid 49224:tid 49284] [client 20.100.187.56:27267] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ellv3.php"] [unique_id "aY5kP9iAvPoWmw5YhwnMwAAAAFE"]
[Fri Feb 13 07:37:38.425255 2026] [:error] [pid 49225:tid 49298] [client 20.100.187.56:8022] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ellv3.php"] [unique_id "aY5kQjwH8-zGxtAd3jsL4wAAAIQ"]
[Fri Feb 13 07:37:40.322524 2026] [:error] [pid 51243:tid 51248] [client 20.100.187.56:61464] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ellv3.php"] [unique_id "aY5kRMim7ZTAHzi7xZv7JwAAAQM"]
[Fri Feb 13 07:37:52.589645 2026] [autoindex:error] [pid 49224:tid 49267] [client 20.100.187.56:31448] AH01276: Cannot serve directory /home/end2endh/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Feb 13 07:38:02.023809 2026] [:error] [pid 51243:tid 51260] [client 20.100.187.56:27801] [client 20.100.187.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY5kWsim7ZTAHzi7xZv7UwAAAQ8"]
[Fri Feb 13 07:38:26.806726 2026] [:error] [pid 49335:tid 49349] [client 20.100.187.56:56839] [client 20.100.187.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY5kcqp--SFY2nwOiqmCTwAAAMw"]
[Fri Feb 13 07:38:28.350235 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:23841] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aY5kdKp--SFY2nwOiqmCXAAAAMo"]
[Fri Feb 13 07:38:30.627486 2026] [:error] [pid 49225:tid 49298] [client 20.100.187.56:29968] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aY5kdjwH8-zGxtAd3jsMVgAAAIQ"]
[Fri Feb 13 07:38:33.378210 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:39833] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aY5keap--SFY2nwOiqmCdQAAAM4"]
[Fri Feb 13 07:38:37.123860 2026] [:error] [pid 49223:tid 49232] [client 20.100.187.56:7324] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/raw.php"] [unique_id "aY5kfR8A_fZBamNLnfVl2gAAAAA"]
[Fri Feb 13 07:38:39.778176 2026] [:error] [pid 49335:tid 49356] [client 20.100.187.56:24869] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/raw.php"] [unique_id "aY5kf6p--SFY2nwOiqmCjAAAANM"]
[Fri Feb 13 07:38:41.912176 2026] [:error] [pid 49224:tid 49270] [client 20.100.187.56:48631] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/raw.php"] [unique_id "aY5kgdiAvPoWmw5YhwnNTgAAAEM"]
[Fri Feb 13 07:38:43.572470 2026] [:error] [pid 49223:tid 49232] [client 20.100.187.56:49924] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/raw.php"] [unique_id "aY5kgx8A_fZBamNLnfVl5gAAAAA"]
[Fri Feb 13 07:38:45.019407 2026] [:error] [pid 49225:tid 49316] [client 20.100.187.56:23817] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aY5khTwH8-zGxtAd3jsMbQAAAJY"]
[Fri Feb 13 07:38:47.097768 2026] [:error] [pid 49223:tid 49233] [client 20.100.187.56:52230] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aY5khx8A_fZBamNLnfVl9gAAAAE"]
[Fri Feb 13 07:38:48.549048 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:63286] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aY5kiKp--SFY2nwOiqmCpwAAAM4"]
[Fri Feb 13 07:38:49.753960 2026] [:error] [pid 49335:tid 49360] [client 20.100.187.56:48621] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aY5kiap--SFY2nwOiqmCqAAAANc"]
[Fri Feb 13 07:38:51.259712 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:52244] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5ki6p--SFY2nwOiqmCqQAAAMo"]
[Fri Feb 13 07:38:52.288623 2026] [:error] [pid 49335:tid 49348] [client 20.100.187.56:63232] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5kjKp--SFY2nwOiqmCqgAAAMs"]
[Fri Feb 13 07:38:53.287229 2026] [:error] [pid 49225:tid 49300] [client 20.100.187.56:52284] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5kjTwH8-zGxtAd3jsMfwAAAIY"]
[Fri Feb 13 07:38:54.853436 2026] [:error] [pid 51243:tid 51268] [client 20.100.187.56:7358] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5kjsim7ZTAHzi7xZv7nAAAARc"]
[Fri Feb 13 07:38:55.948415 2026] [:error] [pid 49224:tid 49268] [client 20.100.187.56:43728] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mal.php"] [unique_id "aY5kj9iAvPoWmw5YhwnNaQAAAEE"]
[Fri Feb 13 07:38:57.135851 2026] [:error] [pid 49223:tid 49253] [client 20.100.187.56:49976] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mal.php"] [unique_id "aY5kkR8A_fZBamNLnfVmAQAAABU"]
[Fri Feb 13 07:38:58.121408 2026] [:error] [pid 49223:tid 49237] [client 20.100.187.56:40457] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mal.php"] [unique_id "aY5kkh8A_fZBamNLnfVmBAAAAAU"]
[Fri Feb 13 07:38:59.741799 2026] [:error] [pid 49224:tid 49287] [client 20.100.187.56:34565] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mal.php"] [unique_id "aY5kk9iAvPoWmw5YhwnNcQAAAFQ"]
[Fri Feb 13 07:39:00.838285 2026] [:error] [pid 51243:tid 51269] [client 20.100.187.56:39266] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5klMim7ZTAHzi7xZv7vgAAARg"]
[Fri Feb 13 07:39:01.790937 2026] [:error] [pid 49225:tid 49309] [client 20.100.187.56:23878] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5klTwH8-zGxtAd3jsMhgAAAI8"]
[Fri Feb 13 07:39:03.302964 2026] [:error] [pid 49225:tid 49299] [client 20.100.187.56:31900] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5klzwH8-zGxtAd3jsMjAAAAIU"]
[Fri Feb 13 07:39:04.630790 2026] [:error] [pid 51243:tid 51254] [client 20.100.187.56:24394] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5kmMim7ZTAHzi7xZv76gAAAQk"]
[Fri Feb 13 07:39:06.081097 2026] [:error] [pid 49335:tid 49359] [client 20.100.187.56:53505] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aY5kmqp--SFY2nwOiqmDDQAAANY"]
[Fri Feb 13 07:39:07.939167 2026] [:error] [pid 49335:tid 49340] [client 20.100.187.56:62044] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aY5km6p--SFY2nwOiqmDFAAAAMM"]
[Fri Feb 13 07:39:09.736239 2026] [:error] [pid 49335:tid 49356] [client 20.100.187.56:31912] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aY5knap--SFY2nwOiqmDIQAAANM"]
[Fri Feb 13 07:39:10.970606 2026] [:error] [pid 49335:tid 49346] [client 20.100.187.56:26325] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aY5knqp--SFY2nwOiqmDSwAAAMk"]
[Fri Feb 13 07:39:12.175339 2026] [:error] [pid 51243:tid 51247] [client 20.100.187.56:36533] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5koMim7ZTAHzi7xZv8MQAAAQI"]
[Fri Feb 13 07:39:13.354792 2026] [:error] [pid 49225:tid 49316] [client 20.100.187.56:36600] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5koTwH8-zGxtAd3jsMqwAAAJY"]
[Fri Feb 13 07:39:14.567322 2026] [:error] [pid 49335:tid 49340] [client 20.100.187.56:49177] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5koqp--SFY2nwOiqmDYAAAAMM"]
[Fri Feb 13 07:39:15.590570 2026] [:error] [pid 49223:tid 49237] [client 20.100.187.56:34114] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5kox8A_fZBamNLnfVmLgAAAAU"]
[Fri Feb 13 07:39:16.728384 2026] [:error] [pid 51243:tid 51258] [client 20.100.187.56:63569] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5kpMim7ZTAHzi7xZv8RAAAAQ0"]
[Fri Feb 13 07:39:21.711630 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:7272] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5kqap--SFY2nwOiqmDcQAAAM4"]
[Fri Feb 13 07:40:00.244344 2026] [:error] [pid 49223:tid 49248] [client 20.100.187.56:7835] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tphp.php"] [unique_id "aY5k0B8A_fZBamNLnfVmpgAAABA"]
[Fri Feb 13 07:40:01.516089 2026] [:error] [pid 49223:tid 49241] [client 20.100.187.56:39874] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tphp.php"] [unique_id "aY5k0R8A_fZBamNLnfVmqAAAAAk"]
[Fri Feb 13 07:40:03.307055 2026] [:error] [pid 49335:tid 49346] [client 20.100.187.56:35564] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tphp.php"] [unique_id "aY5k06p--SFY2nwOiqmETwAAAMk"]
[Fri Feb 13 07:40:05.311973 2026] [:error] [pid 49224:tid 49276] [client 20.100.187.56:28811] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tphp.php"] [unique_id "aY5k1diAvPoWmw5YhwnOWwAAAEk"]
[Fri Feb 13 07:40:07.024381 2026] [:error] [pid 51243:tid 51261] [client 20.100.187.56:39878] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cs.php"] [unique_id "aY5k18im7ZTAHzi7xZv80QAAARA"]
[Fri Feb 13 07:40:08.875375 2026] [:error] [pid 49225:tid 49317] [client 20.100.187.56:58699] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cs.php"] [unique_id "aY5k2DwH8-zGxtAd3jsNTwAAAJc"]
[Fri Feb 13 07:40:11.517706 2026] [:error] [pid 49225:tid 49303] [client 20.100.187.56:39915] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cs.php"] [unique_id "aY5k2zwH8-zGxtAd3jsNUwAAAIk"]
[Fri Feb 13 07:40:14.004740 2026] [:error] [pid 51243:tid 51257] [client 20.100.187.56:45013] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cs.php"] [unique_id "aY5k3sim7ZTAHzi7xZv83wAAAQw"]
[Fri Feb 13 07:40:15.797290 2026] [:error] [pid 49225:tid 49305] [client 20.100.187.56:35540] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/user.php"] [unique_id "aY5k3zwH8-zGxtAd3jsNZwAAAIs"]
[Fri Feb 13 07:40:17.181176 2026] [:error] [pid 49335:tid 49337] [client 20.100.187.56:64300] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/user.php"] [unique_id "aY5k4ap--SFY2nwOiqmEYQAAAMA"]
[Fri Feb 13 07:40:18.900989 2026] [:error] [pid 51243:tid 51260] [client 20.100.187.56:64310] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/user.php"] [unique_id "aY5k4sim7ZTAHzi7xZv85AAAAQ8"]
[Fri Feb 13 07:40:20.370364 2026] [:error] [pid 49335:tid 49338] [client 20.100.187.56:47340] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/user.php"] [unique_id "aY5k5Kp--SFY2nwOiqmEZgAAAME"]
[Fri Feb 13 07:40:21.687267 2026] [:error] [pid 49225:tid 49309] [client 20.100.187.56:47325] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5k5TwH8-zGxtAd3jsNdgAAAI8"]
[Fri Feb 13 07:40:22.674881 2026] [:error] [pid 49335:tid 49347] [client 20.100.187.56:26754] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5k5qp--SFY2nwOiqmEbgAAAMo"]
[Fri Feb 13 07:40:23.333931 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:30915] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5k56p--SFY2nwOiqmEdQAAAM4"]
[Fri Feb 13 07:40:24.618852 2026] [:error] [pid 49335:tid 49345] [client 20.100.187.56:47342] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aY5k6Kp--SFY2nwOiqmEegAAAMg"]
[Fri Feb 13 07:40:26.375104 2026] [:error] [pid 49225:tid 49300] [client 20.100.187.56:8159] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8xyz.php"] [unique_id "aY5k6jwH8-zGxtAd3jsNgAAAAIY"]
[Fri Feb 13 07:40:27.636323 2026] [:error] [pid 49224:tid 49275] [client 20.100.187.56:58693] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8xyz.php"] [unique_id "aY5k69iAvPoWmw5YhwnOpgAAAEg"]
[Fri Feb 13 07:40:30.310769 2026] [:error] [pid 49225:tid 49318] [client 20.100.187.56:28857] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8xyz.php"] [unique_id "aY5k7jwH8-zGxtAd3jsNhwAAAJg"]
[Fri Feb 13 07:40:34.268947 2026] [:error] [pid 49223:tid 49252] [client 20.100.187.56:7870] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8xyz.php"] [unique_id "aY5k8h8A_fZBamNLnfVm_AAAABQ"]
[Fri Feb 13 07:40:35.467717 2026] [:error] [pid 49335:tid 49345] [client 20.100.187.56:29433] [client 20.100.187.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aY5k86p--SFY2nwOiqmEkAAAAMg"]
[Fri Feb 13 07:40:37.823732 2026] [:error] [pid 49224:tid 49271] [client 20.100.187.56:7279] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rezor.php"] [unique_id "aY5k9diAvPoWmw5YhwnO2QAAAEQ"]
[Fri Feb 13 07:40:39.621387 2026] [:error] [pid 49224:tid 49276] [client 20.100.187.56:19230] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rezor.php"] [unique_id "aY5k99iAvPoWmw5YhwnO4QAAAEk"]
[Fri Feb 13 07:40:41.315056 2026] [:error] [pid 49224:tid 49268] [client 20.100.187.56:29419] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rezor.php"] [unique_id "aY5k-diAvPoWmw5YhwnO5wAAAEE"]
[Fri Feb 13 07:40:43.686603 2026] [:error] [pid 49335:tid 49359] [client 20.100.187.56:19218] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Wp-good.php"] [unique_id "aY5k-6p--SFY2nwOiqmEowAAANY"]
[Fri Feb 13 07:40:45.381457 2026] [:error] [pid 49335:tid 49337] [client 20.100.187.56:63567] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Wp-good.php"] [unique_id "aY5k_ap--SFY2nwOiqmErAAAAMA"]
[Fri Feb 13 07:40:48.236820 2026] [:error] [pid 49224:tid 49272] [client 20.100.187.56:52207] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Wp-good.php"] [unique_id "aY5lANiAvPoWmw5YhwnPBgAAAEU"]
[Fri Feb 13 07:40:51.114031 2026] [:error] [pid 49335:tid 49351] [client 20.100.187.56:26352] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Wp-good.php"] [unique_id "aY5lA6p--SFY2nwOiqmEuAAAAM4"]
[Fri Feb 13 07:40:52.874856 2026] [:error] [pid 49335:tid 49340] [client 20.100.187.56:52859] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ze.php"] [unique_id "aY5lBKp--SFY2nwOiqmEuwAAAMM"]
[Fri Feb 13 07:40:54.973065 2026] [:error] [pid 49335:tid 49350] [client 20.100.187.56:43777] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ze.php"] [unique_id "aY5lBqp--SFY2nwOiqmEvgAAAM0"]
[Fri Feb 13 07:40:56.600572 2026] [:error] [pid 51243:tid 51247] [client 20.100.187.56:23873] [client 20.100.187.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ze.php"] [unique_id "aY5lCMim7ZTAHzi7xZv9KgAAAQI"]
[Fri Feb 20 17:47:14.278212 2026] [:error] [pid 54520:tid 54541] [client 141.98.11.239:52966] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZgtomQaQX7QUBqXcyG_1AAAAJM"]
[Fri Feb 20 17:48:18.332709 2026] [:error] [pid 54461:tid 54513] [client 141.98.11.239:50949] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgt4i372fkN0w39NDOQlAAAAFU"]
[Fri Feb 20 17:48:20.242019 2026] [:error] [pid 54461:tid 54504] [client 141.98.11.239:50949] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aZgt5C372fkN0w39NDOQlwAAAEw"]
[Fri Feb 20 17:48:43.375378 2026] [:error] [pid 46012:tid 46027] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZgt-zXz-GTvuxLwgUEOxQAAAU0"]
[Fri Feb 20 17:48:44.942597 2026] [:error] [pid 46012:tid 46019] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZgt_DXz-GTvuxLwgUEOyAAAAUU"], referer: https://www.end2end.hostone.com.au/wp-login.php
[Fri Feb 20 17:48:46.430460 2026] [:error] [pid 46012:tid 46031] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZgt_jXz-GTvuxLwgUEOygAAAVE"], referer: https://www.end2end.hostone.com.au/wp-login.php
[Fri Feb 20 17:48:47.998498 2026] [:error] [pid 46012:tid 46016] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZgt_zXz-GTvuxLwgUEOzAAAAUI"], referer: https://www.end2end.hostone.com.au/wp-login.php
[Fri Feb 20 17:48:49.623841 2026] [:error] [pid 46012:tid 46018] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZguATXz-GTvuxLwgUEO0AAAAUQ"]
[Fri Feb 20 17:48:51.469502 2026] [:error] [pid 46012:tid 46028] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZguAzXz-GTvuxLwgUEO1gAAAU4"], referer: https://www.end2end.hostone.com.au/wp-login.php
[Fri Feb 20 17:48:52.958248 2026] [:error] [pid 46012:tid 46038] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZguBDXz-GTvuxLwgUEO2AAAAVg"], referer: https://www.end2end.hostone.com.au/wp-login.php
[Fri Feb 20 17:48:54.448265 2026] [:error] [pid 46012:tid 46021] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZguBjXz-GTvuxLwgUEO2QAAAUc"], referer: https://www.end2end.hostone.com.au/wp-login.php
[Fri Feb 20 17:48:56.031812 2026] [:error] [pid 46012:tid 46017] [client 141.98.11.239:55825] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aZguCDXz-GTvuxLwgUEO2gAAAUM"]
[Mon Feb 23 19:04:51.552009 2026] [:error] [pid 25295:tid 25336] [client 158.158.42.25:41185] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aZw0U42Av4J1Jnqi7yK9zwAAAIU"]
[Mon Feb 23 19:04:52.223136 2026] [:error] [pid 39640:tid 39687] [client 158.158.42.25:40551] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aZw0VNsK--eVCgzvvufRiAAAApE"]
[Mon Feb 23 19:04:52.920898 2026] [:error] [pid 39640:tid 39681] [client 158.158.42.25:42788] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aZw0VNsK--eVCgzvvufRjAAAAos"]
[Mon Feb 23 19:04:53.597209 2026] [:error] [pid 39639:tid 39652] [client 158.158.42.25:42428] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aZw0VRpFkMoMi8uTUUOltwAAAkk"]
[Mon Feb 23 19:04:54.304079 2026] [:error] [pid 39639:tid 39646] [client 158.158.42.25:42028] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maraz.php"] [unique_id "aZw0VhpFkMoMi8uTUUOluQAAAkM"]
[Mon Feb 23 19:04:55.020671 2026] [:error] [pid 39504:tid 39525] [client 158.158.42.25:48780] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maraz.php"] [unique_id "aZw0V3LcHpOlI9gwwJoSuwAAAVM"]
[Mon Feb 23 19:04:55.760689 2026] [:error] [pid 39538:tid 39563] [client 158.158.42.25:39113] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maraz.php"] [unique_id "aZw0Vy4Zk8-cQOG3ZnpmSQAAAZU"]
[Mon Feb 23 19:04:56.383890 2026] [:error] [pid 39639:tid 39647] [client 158.158.42.25:38080] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maraz.php"] [unique_id "aZw0WBpFkMoMi8uTUUOlvQAAAkQ"]
[Mon Feb 23 19:04:57.000670 2026] [:error] [pid 39639:tid 39663] [client 158.158.42.25:42400] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aZw0WBpFkMoMi8uTUUOlvwAAAlQ"]
[Mon Feb 23 19:04:57.531797 2026] [:error] [pid 39639:tid 39661] [client 158.158.42.25:42452] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aZw0WRpFkMoMi8uTUUOlwgAAAlI"]
[Mon Feb 23 19:04:58.189991 2026] [:error] [pid 39540:tid 39575] [client 158.158.42.25:39166] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aZw0Wrsgm9aTWhlRScKcswAAAcY"]
[Mon Feb 23 19:04:58.790010 2026] [:error] [pid 39639:tid 39650] [client 158.158.42.25:42412] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aZw0WhpFkMoMi8uTUUOlygAAAkc"]
[Mon Feb 23 19:04:59.402505 2026] [:error] [pid 25293:tid 25310] [client 158.158.42.25:43168] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/erty.php"] [unique_id "aZw0W-L9XfBf66iHi_eoFwAAAAs"]
[Mon Feb 23 19:04:59.965076 2026] [:error] [pid 25295:tid 25359] [client 158.158.42.25:43169] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/erty.php"] [unique_id "aZw0W42Av4J1Jnqi7yK90AAAAJM"]
[Mon Feb 23 19:05:00.788920 2026] [:error] [pid 25295:tid 25353] [client 158.158.42.25:42409] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/erty.php"] [unique_id "aZw0XI2Av4J1Jnqi7yK90gAAAJA"]
[Mon Feb 23 19:05:01.998808 2026] [:error] [pid 39639:tid 39648] [client 158.158.42.25:48770] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/erty.php"] [unique_id "aZw0XRpFkMoMi8uTUUOlzQAAAkU"]
[Mon Feb 23 19:05:02.608299 2026] [:error] [pid 29909:tid 29911] [client 158.158.42.25:48004] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/24.php"] [unique_id "aZw0Xj9oc2QzltksUk7VKgAAAQA"]
[Mon Feb 23 19:05:03.214344 2026] [:error] [pid 39540:tid 39583] [client 158.158.42.25:43170] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/24.php"] [unique_id "aZw0X7sgm9aTWhlRScKcugAAAc4"]
[Mon Feb 23 19:05:03.832730 2026] [:error] [pid 39639:tid 39657] [client 158.158.42.25:42768] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/24.php"] [unique_id "aZw0XxpFkMoMi8uTUUOlzwAAAk4"]
[Mon Feb 23 19:05:04.579851 2026] [:error] [pid 39540:tid 39571] [client 158.158.42.25:48816] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/24.php"] [unique_id "aZw0YLsgm9aTWhlRScKcvgAAAcI"]
[Mon Feb 23 19:05:05.236861 2026] [:error] [pid 39538:tid 39555] [client 158.158.42.25:45130] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bzjdlofz.php"] [unique_id "aZw0YS4Zk8-cQOG3ZnpmUAAAAY0"]
[Mon Feb 23 19:05:05.891287 2026] [:error] [pid 25380:tid 25391] [client 158.158.42.25:44671] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bzjdlofz.php"] [unique_id "aZw0YaKrc8yFQ8fy78ofAwAAAMk"]
[Mon Feb 23 19:05:06.546112 2026] [:error] [pid 25380:tid 25394] [client 158.158.42.25:12704] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bzjdlofz.php"] [unique_id "aZw0YqKrc8yFQ8fy78ofBQAAAMw"]
[Mon Feb 23 19:05:07.199860 2026] [:error] [pid 25294:tid 25376] [client 158.158.42.25:39396] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bzjdlofz.php"] [unique_id "aZw0YyRCFB3CqIo_jfbUdwAAAFc"]
[Mon Feb 23 19:05:07.879483 2026] [:error] [pid 25294:tid 25341] [client 158.158.42.25:12696] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aZw0YyRCFB3CqIo_jfbUeQAAAEQ"]
[Mon Feb 23 19:05:08.533461 2026] [:error] [pid 25294:tid 25362] [client 158.158.42.25:47171] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aZw0ZCRCFB3CqIo_jfbUfAAAAE4"]
[Mon Feb 23 19:05:09.095203 2026] [:error] [pid 25293:tid 25302] [client 158.158.42.25:40598] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aZw0ZeL9XfBf66iHi_eoGAAAAAM"]
[Mon Feb 23 19:05:09.735195 2026] [:error] [pid 25293:tid 25307] [client 158.158.42.25:48781] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aZw0ZeL9XfBf66iHi_eoGwAAAAg"]
[Mon Feb 23 19:05:10.369660 2026] [:error] [pid 39540:tid 39585] [client 158.158.42.25:43166] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aZw0Zrsgm9aTWhlRScKcwgAAAdA"]
[Mon Feb 23 19:05:10.900925 2026] [:error] [pid 25293:tid 25314] [client 158.158.42.25:45170] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aZw0ZuL9XfBf66iHi_eoHQAAAA8"]
[Mon Feb 23 19:05:11.433112 2026] [:error] [pid 25294:tid 25356] [client 158.158.42.25:43147] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aZw0ZyRCFB3CqIo_jfbUfgAAAEs"]
[Mon Feb 23 19:05:11.981062 2026] [:error] [pid 39538:tid 39549] [client 158.158.42.25:48825] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aZw0Zy4Zk8-cQOG3ZnpmUgAAAYc"]
[Mon Feb 23 19:05:12.465305 2026] [:error] [pid 29909:tid 29926] [client 158.158.42.25:42797] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw0aD9oc2QzltksUk7VLwAAAQ8"]
[Mon Feb 23 19:05:12.951335 2026] [:error] [pid 29909:tid 29933] [client 158.158.42.25:12732] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw0aD9oc2QzltksUk7VMgAAARY"]
[Mon Feb 23 19:05:13.433993 2026] [:error] [pid 39639:tid 39645] [client 158.158.42.25:42394] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw0aRpFkMoMi8uTUUOl1QAAAkI"]
[Mon Feb 23 19:05:13.930793 2026] [:error] [pid 29909:tid 29916] [client 158.158.42.25:42754] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw0aT9oc2QzltksUk7VNAAAAQU"]
[Mon Feb 23 19:05:14.484198 2026] [:error] [pid 25295:tid 25337] [client 158.158.42.25:42790] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "aZw0ao2Av4J1Jnqi7yK90wAAAIY"]
[Mon Feb 23 19:05:15.143752 2026] [:error] [pid 25295:tid 25344] [client 158.158.42.25:40527] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "aZw0a42Av4J1Jnqi7yK91AAAAIs"]
[Mon Feb 23 19:05:15.701136 2026] [:error] [pid 39640:tid 39675] [client 158.158.42.25:12672] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "aZw0a9sK--eVCgzvvufRmgAAAoU"]
[Mon Feb 23 19:05:16.215599 2026] [:error] [pid 39640:tid 39674] [client 158.158.42.25:12717] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "aZw0bNsK--eVCgzvvufRmwAAAoQ"]
[Mon Feb 23 19:05:16.722545 2026] [:error] [pid 39640:tid 39676] [client 158.158.42.25:42479] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aZw0bNsK--eVCgzvvufRnQAAAoY"]
[Mon Feb 23 19:05:17.273156 2026] [:error] [pid 25293:tid 25311] [client 158.158.42.25:45175] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aZw0beL9XfBf66iHi_eoHwAAAAw"]
[Mon Feb 23 19:05:17.848973 2026] [:error] [pid 25380:tid 25397] [client 158.158.42.25:42809] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aZw0baKrc8yFQ8fy78ofCwAAAM8"]
[Mon Feb 23 19:05:18.449679 2026] [:error] [pid 25380:tid 25390] [client 158.158.42.25:42453] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aZw0bqKrc8yFQ8fy78ofDgAAAMg"]
[Mon Feb 23 19:05:19.108960 2026] [:error] [pid 25380:tid 25385] [client 158.158.42.25:42813] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ak.php"] [unique_id "aZw0b6Krc8yFQ8fy78ofEAAAAMM"]
[Mon Feb 23 19:05:19.673979 2026] [:error] [pid 25380:tid 25403] [client 158.158.42.25:45139] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ak.php"] [unique_id "aZw0b6Krc8yFQ8fy78ofEQAAANU"]
[Mon Feb 23 19:05:20.252646 2026] [:error] [pid 25295:tid 25369] [client 158.158.42.25:40895] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ak.php"] [unique_id "aZw0cI2Av4J1Jnqi7yK92QAAAJg"]
[Mon Feb 23 19:05:20.955267 2026] [:error] [pid 25294:tid 25358] [client 158.158.42.25:42458] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ak.php"] [unique_id "aZw0cCRCFB3CqIo_jfbUhAAAAEw"]
[Mon Feb 23 19:05:21.553279 2026] [:error] [pid 25380:tid 25392] [client 158.158.42.25:40884] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-style.php"] [unique_id "aZw0caKrc8yFQ8fy78ofFQAAAMo"]
[Mon Feb 23 19:05:22.108573 2026] [:error] [pid 25294:tid 25351] [client 158.158.42.25:42449] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-style.php"] [unique_id "aZw0ciRCFB3CqIo_jfbUhwAAAEk"]
[Mon Feb 23 19:05:22.635388 2026] [:error] [pid 25293:tid 25317] [client 158.158.42.25:48807] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-style.php"] [unique_id "aZw0cuL9XfBf66iHi_eoIQAAABI"]
[Mon Feb 23 19:05:23.252562 2026] [:error] [pid 25294:tid 25330] [client 158.158.42.25:40875] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-style.php"] [unique_id "aZw0cyRCFB3CqIo_jfbUiQAAAEE"]
[Mon Feb 23 19:05:23.831969 2026] [:error] [pid 29909:tid 29919] [client 158.158.42.25:48014] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x0x.php"] [unique_id "aZw0cz9oc2QzltksUk7VRgAAAQg"]
[Mon Feb 23 19:05:24.391833 2026] [:error] [pid 25295:tid 25339] [client 158.158.42.25:40894] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x0x.php"] [unique_id "aZw0dI2Av4J1Jnqi7yK92wAAAIg"]
[Mon Feb 23 19:05:24.895590 2026] [:error] [pid 25380:tid 25383] [client 158.158.42.25:47036] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x0x.php"] [unique_id "aZw0dKKrc8yFQ8fy78ofGwAAAME"]
[Mon Feb 23 19:05:25.386740 2026] [:error] [pid 25295:tid 25340] [client 158.158.42.25:40889] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x0x.php"] [unique_id "aZw0dY2Av4J1Jnqi7yK93AAAAIk"]
[Mon Feb 23 19:05:25.899556 2026] [:error] [pid 29909:tid 29926] [client 158.158.42.25:42472] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0byte.php"] [unique_id "aZw0dT9oc2QzltksUk7VSgAAAQ8"]
[Mon Feb 23 19:05:26.458733 2026] [:error] [pid 29909:tid 29923] [client 158.158.42.25:47187] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0byte.php"] [unique_id "aZw0dj9oc2QzltksUk7VSwAAAQw"]
[Mon Feb 23 19:05:26.983174 2026] [:error] [pid 25294:tid 25341] [client 158.158.42.25:40574] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0byte.php"] [unique_id "aZw0diRCFB3CqIo_jfbUigAAAEQ"]
[Mon Feb 23 19:05:27.484122 2026] [:error] [pid 25294:tid 25362] [client 158.158.42.25:47012] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0byte.php"] [unique_id "aZw0dyRCFB3CqIo_jfbUjQAAAE4"]
[Mon Feb 23 19:05:27.972255 2026] [:error] [pid 25295:tid 25346] [client 158.158.42.25:43159] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "aZw0d42Av4J1Jnqi7yK93QAAAIw"]
[Mon Feb 23 19:05:28.526604 2026] [:error] [pid 25380:tid 25393] [client 158.158.42.25:12735] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "aZw0eKKrc8yFQ8fy78ofIgAAAMs"]
[Mon Feb 23 19:05:29.040762 2026] [:error] [pid 39639:tid 39657] [client 158.158.42.25:45124] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "aZw0eRpFkMoMi8uTUUOl3gAAAk4"]
[Mon Feb 23 19:05:29.605475 2026] [:error] [pid 39504:tid 39508] [client 158.158.42.25:40832] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "aZw0eXLcHpOlI9gwwJoSxAAAAUI"]
[Mon Feb 23 19:05:30.100103 2026] [:error] [pid 25380:tid 25398] [client 158.158.42.25:47005] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/logs1.php"] [unique_id "aZw0eqKrc8yFQ8fy78ofJgAAANA"]
[Mon Feb 23 19:05:30.619888 2026] [:error] [pid 39540:tid 39578] [client 158.158.42.25:47224] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/logs1.php"] [unique_id "aZw0ersgm9aTWhlRScKc0AAAAck"]
[Mon Feb 23 19:05:31.199215 2026] [:error] [pid 39639:tid 39661] [client 158.158.42.25:42752] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/logs1.php"] [unique_id "aZw0expFkMoMi8uTUUOl4AAAAlI"]
[Mon Feb 23 19:05:31.748013 2026] [:error] [pid 39639:tid 39659] [client 158.158.42.25:47227] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/logs1.php"] [unique_id "aZw0expFkMoMi8uTUUOl4gAAAlA"]
[Mon Feb 23 19:05:32.295648 2026] [:error] [pid 25380:tid 25404] [client 158.158.42.25:42467] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/35.php"] [unique_id "aZw0fKKrc8yFQ8fy78ofKAAAANY"]
[Mon Feb 23 19:05:32.903147 2026] [:error] [pid 39640:tid 39692] [client 158.158.42.25:47625] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/35.php"] [unique_id "aZw0fNsK--eVCgzvvufRnwAAApY"]
[Mon Feb 23 19:05:33.643711 2026] [:error] [pid 25380:tid 25390] [client 158.158.42.25:47655] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/35.php"] [unique_id "aZw0faKrc8yFQ8fy78ofLgAAAMg"]
[Mon Feb 23 19:05:34.223615 2026] [:error] [pid 25380:tid 25385] [client 158.158.42.25:40845] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/35.php"] [unique_id "aZw0fqKrc8yFQ8fy78ofMAAAAMM"]
[Mon Feb 23 19:05:34.797468 2026] [:error] [pid 39639:tid 39645] [client 158.158.42.25:33511] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lanka.php"] [unique_id "aZw0fhpFkMoMi8uTUUOl5QAAAkI"]
[Mon Feb 23 19:05:35.476108 2026] [:error] [pid 25380:tid 25393] [client 158.158.42.25:45147] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lanka.php"] [unique_id "aZw0f6Krc8yFQ8fy78ofNAAAAMs"]
[Mon Feb 23 19:05:36.164953 2026] [:error] [pid 25294:tid 25351] [client 158.158.42.25:33514] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lanka.php"] [unique_id "aZw0gCRCFB3CqIo_jfbUlAAAAEk"]
[Mon Feb 23 19:05:36.914788 2026] [:error] [pid 25380:tid 25384] [client 158.158.42.25:44113] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lanka.php"] [unique_id "aZw0gKKrc8yFQ8fy78ofOgAAAMI"]
[Mon Feb 23 19:05:37.625953 2026] [:error] [pid 25380:tid 25403] [client 158.158.42.25:42463] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/knmt.php"] [unique_id "aZw0gaKrc8yFQ8fy78ofPgAAANU"]
[Mon Feb 23 19:05:38.265276 2026] [:error] [pid 25380:tid 25392] [client 158.158.42.25:47223] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/knmt.php"] [unique_id "aZw0gqKrc8yFQ8fy78ofQgAAAMo"]
[Mon Feb 23 19:05:38.835880 2026] [:error] [pid 39540:tid 39570] [client 158.158.42.25:43174] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/knmt.php"] [unique_id "aZw0grsgm9aTWhlRScKc0gAAAcE"]
[Mon Feb 23 19:05:39.406157 2026] [:error] [pid 39639:tid 39665] [client 158.158.42.25:42397] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/knmt.php"] [unique_id "aZw0gxpFkMoMi8uTUUOl5wAAAlY"]
[Mon Feb 23 19:05:40.093297 2026] [:error] [pid 25295:tid 25333] [client 158.158.42.25:42606] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZw0hI2Av4J1Jnqi7yK94QAAAIM"]
[Mon Feb 23 19:05:40.605842 2026] [:error] [pid 25380:tid 25402] [client 158.158.42.25:42619] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZw0hKKrc8yFQ8fy78ofRQAAANQ"]
[Mon Feb 23 19:05:41.176071 2026] [:error] [pid 39639:tid 39652] [client 158.158.42.25:43161] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZw0hRpFkMoMi8uTUUOl6wAAAkk"]
[Mon Feb 23 19:05:41.713319 2026] [:error] [pid 39540:tid 39593] [client 158.158.42.25:42379] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZw0hbsgm9aTWhlRScKc1gAAAdg"]
[Mon Feb 23 19:05:42.290469 2026] [:error] [pid 25293:tid 25303] [client 158.158.42.25:45179] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lkui.php"] [unique_id "aZw0huL9XfBf66iHi_eoLAAAAAQ"]
[Mon Feb 23 19:05:43.075730 2026] [:error] [pid 39639:tid 39648] [client 158.158.42.25:43148] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lkui.php"] [unique_id "aZw0hxpFkMoMi8uTUUOl7wAAAkU"]
[Mon Feb 23 19:05:43.779792 2026] [:error] [pid 39639:tid 39664] [client 158.158.42.25:42408] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lkui.php"] [unique_id "aZw0hxpFkMoMi8uTUUOl9AAAAlU"]
[Mon Feb 23 19:05:44.518649 2026] [:error] [pid 39540:tid 39583] [client 158.158.42.25:47219] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lkui.php"] [unique_id "aZw0iLsgm9aTWhlRScKc4AAAAc4"]
[Mon Feb 23 19:05:45.079762 2026] [:error] [pid 39540:tid 39574] [client 158.158.42.25:12698] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "aZw0ibsgm9aTWhlRScKc5QAAAcU"]
[Mon Feb 23 19:05:45.701892 2026] [:error] [pid 39540:tid 39573] [client 158.158.42.25:43172] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "aZw0ibsgm9aTWhlRScKc6wAAAcQ"]
[Mon Feb 23 19:05:46.555428 2026] [:error] [pid 39540:tid 39589] [client 158.158.42.25:46984] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "aZw0irsgm9aTWhlRScKc8QAAAdQ"]
[Mon Feb 23 19:05:47.393268 2026] [:error] [pid 39504:tid 39529] [client 158.158.42.25:42593] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "aZw0i3LcHpOlI9gwwJoSywAAAVc"]
[Mon Feb 23 19:05:48.041671 2026] [:error] [pid 39639:tid 39657] [client 158.158.42.25:12683] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZw0jBpFkMoMi8uTUUOl_QAAAk4"]
[Mon Feb 23 19:05:48.650818 2026] [:error] [pid 39639:tid 39662] [client 158.158.42.25:47222] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZw0jBpFkMoMi8uTUUOl_gAAAlM"]
[Mon Feb 23 19:06:19.185191 2026] [:error] [pid 39639:tid 39643] [client 158.158.42.25:40832] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file.php"] [unique_id "aZw0qxpFkMoMi8uTUUOmWgAAAkA"]
[Mon Feb 23 19:06:20.462981 2026] [:error] [pid 39639:tid 39656] [client 158.158.42.25:48527] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file.php"] [unique_id "aZw0rBpFkMoMi8uTUUOmXgAAAk0"]
[Mon Feb 23 19:06:21.811251 2026] [:error] [pid 39639:tid 39666] [client 158.158.42.25:43261] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file.php"] [unique_id "aZw0rRpFkMoMi8uTUUOmZQAAAlc"]
[Mon Feb 23 19:06:23.237287 2026] [:error] [pid 39504:tid 39528] [client 158.158.42.25:43047] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file.php"] [unique_id "aZw0r3LcHpOlI9gwwJoS0AAAAVY"]
[Mon Feb 23 19:06:24.205809 2026] [:error] [pid 39540:tid 39578] [client 158.158.42.25:43690] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/403.php"] [unique_id "aZw0sLsgm9aTWhlRScKdBgAAAck"]
[Mon Feb 23 19:06:24.852823 2026] [:error] [pid 39540:tid 39589] [client 158.158.42.25:48521] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/403.php"] [unique_id "aZw0sLsgm9aTWhlRScKdCgAAAdQ"]
[Mon Feb 23 19:06:25.399831 2026] [:error] [pid 39639:tid 39658] [client 158.158.42.25:45187] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/403.php"] [unique_id "aZw0sRpFkMoMi8uTUUOmdAAAAk8"]
[Mon Feb 23 19:06:26.069321 2026] [:error] [pid 25380:tid 25398] [client 158.158.42.25:41550] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "aZw0sqKrc8yFQ8fy78ofhgAAANA"]
[Mon Feb 23 19:06:26.794850 2026] [:error] [pid 39640:tid 39681] [client 158.158.42.25:41262] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "aZw0stsK--eVCgzvvufRqAAAAos"]
[Mon Feb 23 19:06:27.798119 2026] [:error] [pid 25380:tid 25384] [client 158.158.42.25:48546] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "aZw0s6Krc8yFQ8fy78ofjgAAAMI"]
[Mon Feb 23 19:06:28.728157 2026] [:error] [pid 25380:tid 25385] [client 158.158.42.25:43228] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "aZw0tKKrc8yFQ8fy78ofkgAAAMM"]
[Mon Feb 23 19:06:29.558945 2026] [:error] [pid 39540:tid 39587] [client 158.158.42.25:43235] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/155.php"] [unique_id "aZw0tbsgm9aTWhlRScKdDgAAAdI"]
[Mon Feb 23 19:06:30.252179 2026] [:error] [pid 39538:tid 39546] [client 158.158.42.25:45193] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/155.php"] [unique_id "aZw0ti4Zk8-cQOG3ZnpmXgAAAYQ"]
[Mon Feb 23 19:06:30.823119 2026] [:error] [pid 39540:tid 39578] [client 158.158.42.25:43682] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/155.php"] [unique_id "aZw0trsgm9aTWhlRScKdGAAAAck"]
[Mon Feb 23 19:06:31.581806 2026] [:error] [pid 39639:tid 39658] [client 158.158.42.25:48570] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/155.php"] [unique_id "aZw0txpFkMoMi8uTUUOmewAAAk8"]
[Mon Feb 23 19:06:32.124054 2026] [:error] [pid 25380:tid 25403] [client 158.158.42.25:39546] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xsox.php"] [unique_id "aZw0uKKrc8yFQ8fy78oflQAAANU"]
[Mon Feb 23 19:06:32.941287 2026] [:error] [pid 25380:tid 25405] [client 158.158.42.25:41573] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xsox.php"] [unique_id "aZw0uKKrc8yFQ8fy78ofmAAAANc"]
[Mon Feb 23 19:06:33.513236 2026] [:error] [pid 25380:tid 25386] [client 158.158.42.25:45236] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xsox.php"] [unique_id "aZw0uaKrc8yFQ8fy78ofnAAAAMQ"]
[Mon Feb 23 19:06:34.059800 2026] [:error] [pid 39538:tid 39558] [client 158.158.42.25:41552] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xsox.php"] [unique_id "aZw0ui4Zk8-cQOG3ZnpmYQAAAZA"]
[Mon Feb 23 19:06:34.709079 2026] [:error] [pid 39540:tid 39579] [client 158.158.42.25:41267] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aZw0ursgm9aTWhlRScKdGwAAAco"]
[Mon Feb 23 19:06:35.526586 2026] [:error] [pid 25380:tid 25401] [client 158.158.42.25:48537] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aZw0u6Krc8yFQ8fy78ofoQAAANM"]
[Mon Feb 23 19:06:36.254006 2026] [:error] [pid 39639:tid 39657] [client 158.158.42.25:43699] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aZw0vBpFkMoMi8uTUUOmgAAAAk4"]
[Mon Feb 23 19:06:36.909712 2026] [:error] [pid 39639:tid 39645] [client 158.158.42.25:39497] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "aZw0vBpFkMoMi8uTUUOmiQAAAkI"]
[Mon Feb 23 19:06:37.783353 2026] [:error] [pid 39538:tid 39548] [client 158.158.42.25:46209] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aZw0vS4Zk8-cQOG3ZnpmYwAAAYY"]
[Mon Feb 23 19:06:38.819319 2026] [:error] [pid 25295:tid 25339] [client 158.158.42.25:39497] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aZw0vo2Av4J1Jnqi7yK96gAAAIg"]
[Mon Feb 23 19:06:39.442286 2026] [:error] [pid 25293:tid 25311] [client 158.158.42.25:41577] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aZw0v-L9XfBf66iHi_eoMAAAAAw"]
[Mon Feb 23 19:06:40.003661 2026] [:error] [pid 25295:tid 25336] [client 158.158.42.25:47030] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aZw0wI2Av4J1Jnqi7yK97gAAAIU"]
[Mon Feb 23 19:06:40.765865 2026] [:error] [pid 39640:tid 39686] [client 158.158.42.25:41567] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "aZw0wNsK--eVCgzvvufRsgAAApA"]
[Mon Feb 23 19:06:41.514245 2026] [:error] [pid 25380:tid 25399] [client 158.158.42.25:48534] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "aZw0waKrc8yFQ8fy78ofswAAANE"]
[Mon Feb 23 19:06:42.168259 2026] [:error] [pid 25380:tid 25406] [client 158.158.42.25:47641] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "aZw0wqKrc8yFQ8fy78oftgAAANg"]
[Mon Feb 23 19:06:42.767382 2026] [:error] [pid 25380:tid 25395] [client 158.158.42.25:43680] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "aZw0wqKrc8yFQ8fy78ofuwAAAM0"]
[Mon Feb 23 19:06:43.481000 2026] [:error] [pid 25380:tid 25405] [client 158.158.42.25:39541] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "aZw0w6Krc8yFQ8fy78ofvQAAANc"]
[Mon Feb 23 19:06:44.742699 2026] [:error] [pid 39538:tid 39564] [client 158.158.42.25:43650] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "aZw0xC4Zk8-cQOG3ZnpmZQAAAZY"]
[Mon Feb 23 19:06:45.255670 2026] [:error] [pid 39538:tid 39547] [client 158.158.42.25:47642] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "aZw0xS4Zk8-cQOG3ZnpmZwAAAYU"]
[Mon Feb 23 19:06:45.843727 2026] [:error] [pid 39538:tid 39550] [client 158.158.42.25:42894] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "aZw0xS4Zk8-cQOG3ZnpmaAAAAYg"]
[Mon Feb 23 19:06:46.465308 2026] [:error] [pid 29909:tid 29929] [client 158.158.42.25:45197] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZw0xj9oc2QzltksUk7VWgAAARI"]
[Mon Feb 23 19:06:47.198963 2026] [:error] [pid 25295:tid 25335] [client 158.158.42.25:43260] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZw0x42Av4J1Jnqi7yK98wAAAIQ"]
[Mon Feb 23 19:06:47.853194 2026] [:error] [pid 39538:tid 39553] [client 158.158.42.25:45299] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZw0xy4Zk8-cQOG3ZnpmbAAAAYs"]
[Mon Feb 23 19:06:48.604882 2026] [:error] [pid 39538:tid 39546] [client 158.158.42.25:43069] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZw0yC4Zk8-cQOG3ZnpmcAAAAYQ"]
[Mon Feb 23 19:06:49.532334 2026] [:error] [pid 39504:tid 39520] [client 158.158.42.25:45229] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZw0yXLcHpOlI9gwwJoS2gAAAU4"]
[Mon Feb 23 19:06:50.198457 2026] [:error] [pid 25380:tid 25402] [client 158.158.42.25:40872] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZw0yqKrc8yFQ8fy78ofvwAAANQ"]
[Mon Feb 23 19:06:51.133586 2026] [:error] [pid 25380:tid 25385] [client 158.158.42.25:43014] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZw0y6Krc8yFQ8fy78ofwgAAAMM"]
[Mon Feb 23 19:06:51.808735 2026] [:error] [pid 25380:tid 25404] [client 158.158.42.25:41233] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZw0y6Krc8yFQ8fy78ofxAAAANY"]
[Mon Feb 23 19:06:52.582293 2026] [:error] [pid 25380:tid 25403] [client 158.158.42.25:41247] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shlo.php"] [unique_id "aZw0zKKrc8yFQ8fy78ofxwAAANU"]
[Mon Feb 23 19:06:53.676182 2026] [:error] [pid 39504:tid 39510] [client 158.158.42.25:42919] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shlo.php"] [unique_id "aZw0zXLcHpOlI9gwwJoS2wAAAUQ"]
[Mon Feb 23 19:06:54.453466 2026] [:error] [pid 39540:tid 39574] [client 158.158.42.25:41248] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shlo.php"] [unique_id "aZw0zrsgm9aTWhlRScKdMAAAAcU"]
[Mon Feb 23 19:06:55.041149 2026] [:error] [pid 39540:tid 39572] [client 158.158.42.25:41055] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shlo.php"] [unique_id "aZw0z7sgm9aTWhlRScKdMgAAAcM"]
[Mon Feb 23 19:06:55.730930 2026] [:error] [pid 39540:tid 39578] [client 158.158.42.25:43072] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aZw0z7sgm9aTWhlRScKdMwAAAck"]
[Mon Feb 23 19:06:56.349231 2026] [:error] [pid 39540:tid 39590] [client 158.158.42.25:45873] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aZw00Lsgm9aTWhlRScKdNAAAAdU"]
[Mon Feb 23 19:06:56.967776 2026] [:error] [pid 39540:tid 39589] [client 158.158.42.25:42883] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aZw00Lsgm9aTWhlRScKdNgAAAdQ"]
[Mon Feb 23 19:06:57.614128 2026] [:error] [pid 39639:tid 39661] [client 158.158.42.25:41081] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aZw00RpFkMoMi8uTUUOmjgAAAlI"]
[Mon Feb 23 19:06:58.199305 2026] [:error] [pid 39639:tid 39663] [client 158.158.42.25:43022] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gdn.php"] [unique_id "aZw00hpFkMoMi8uTUUOmjwAAAlQ"]
[Mon Feb 23 19:06:59.259420 2026] [:error] [pid 39639:tid 39648] [client 158.158.42.25:41071] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gdn.php"] [unique_id "aZw00xpFkMoMi8uTUUOmkQAAAkU"]
[Mon Feb 23 19:06:59.942879 2026] [:error] [pid 39639:tid 39667] [client 158.158.42.25:41820] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gdn.php"] [unique_id "aZw00xpFkMoMi8uTUUOmkwAAAlg"]
[Mon Feb 23 19:07:00.790086 2026] [:error] [pid 39639:tid 39650] [client 158.158.42.25:41080] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gdn.php"] [unique_id "aZw01BpFkMoMi8uTUUOmlQAAAkc"]
[Mon Feb 23 19:07:01.542023 2026] [:error] [pid 39639:tid 39652] [client 158.158.42.25:41817] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZw01RpFkMoMi8uTUUOmmAAAAkk"]
[Mon Feb 23 19:07:02.266044 2026] [:error] [pid 25294:tid 25343] [client 158.158.42.25:42882] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZw01iRCFB3CqIo_jfbUvwAAAEU"]
[Mon Feb 23 19:07:03.514440 2026] [:error] [pid 25293:tid 25311] [client 158.158.42.25:43252] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZw01-L9XfBf66iHi_eoPAAAAAw"]
[Mon Feb 23 19:07:04.153498 2026] [:error] [pid 25294:tid 25354] [client 158.158.42.25:48554] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZw02CRCFB3CqIo_jfbUwQAAAEo"]
[Mon Feb 23 19:07:04.866476 2026] [:error] [pid 39639:tid 39649] [client 158.158.42.25:47670] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aZw02BpFkMoMi8uTUUOmnAAAAkY"]
[Mon Feb 23 19:07:05.838147 2026] [:error] [pid 39540:tid 39584] [client 158.158.42.25:45201] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aZw02bsgm9aTWhlRScKdOQAAAc8"]
[Mon Feb 23 19:07:06.538521 2026] [:error] [pid 39639:tid 39659] [client 158.158.42.25:45276] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aZw02hpFkMoMi8uTUUOmnQAAAlA"]
[Mon Feb 23 19:07:07.339749 2026] [:error] [pid 39540:tid 39569] [client 158.158.42.25:43041] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "aZw027sgm9aTWhlRScKdOgAAAcA"]
[Mon Feb 23 19:07:08.236026 2026] [:error] [pid 39540:tid 39579] [client 158.158.42.25:40855] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws69.php"] [unique_id "aZw03Lsgm9aTWhlRScKdOwAAAco"]
[Mon Feb 23 19:07:08.889987 2026] [:error] [pid 25294:tid 25375] [client 158.158.42.25:47633] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws69.php"] [unique_id "aZw03CRCFB3CqIo_jfbUwgAAAFY"]
[Mon Feb 23 19:07:09.508322 2026] [:error] [pid 39639:tid 39658] [client 158.158.42.25:43691] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws69.php"] [unique_id "aZw03RpFkMoMi8uTUUOmowAAAk8"]
[Mon Feb 23 19:07:10.206991 2026] [:error] [pid 39640:tid 39679] [client 158.158.42.25:42891] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws69.php"] [unique_id "aZw03tsK--eVCgzvvufRuwAAAok"]
[Mon Feb 23 19:07:10.809296 2026] [:error] [pid 25294:tid 25362] [client 158.158.42.25:48141] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amp.php"] [unique_id "aZw03iRCFB3CqIo_jfbUxAAAAE4"]
[Mon Feb 23 19:07:11.552014 2026] [:error] [pid 25293:tid 25309] [client 158.158.42.25:46208] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amp.php"] [unique_id "aZw03-L9XfBf66iHi_eoPgAAAAo"]
[Mon Feb 23 19:07:12.081071 2026] [:error] [pid 25380:tid 25385] [client 158.158.42.25:47039] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amp.php"] [unique_id "aZw04KKrc8yFQ8fy78of0AAAAMM"]
[Mon Feb 23 19:07:12.747301 2026] [:error] [pid 39540:tid 39580] [client 158.158.42.25:47025] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amp.php"] [unique_id "aZw04Lsgm9aTWhlRScKdPgAAAcs"]
[Mon Feb 23 19:07:13.364741 2026] [:error] [pid 25294:tid 25334] [client 158.158.42.25:41253] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZw04SRCFB3CqIo_jfbUygAAAEM"]
[Mon Feb 23 19:07:13.924736 2026] [:error] [pid 39504:tid 39517] [client 158.158.42.25:47630] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZw04XLcHpOlI9gwwJoS3gAAAUs"]
[Mon Feb 23 19:07:14.638705 2026] [:error] [pid 39640:tid 39689] [client 158.158.42.25:45243] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZw04tsK--eVCgzvvufRvQAAApM"]
[Mon Feb 23 19:07:15.167529 2026] [:error] [pid 25380:tid 25404] [client 158.158.42.25:41263] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZw046Krc8yFQ8fy78of0gAAANY"]
[Mon Feb 23 19:07:15.737234 2026] [:error] [pid 25380:tid 25394] [client 158.158.42.25:47662] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Jcrop.php"] [unique_id "aZw046Krc8yFQ8fy78of0wAAAMw"]
[Mon Feb 23 19:07:43.745889 2026] [:error] [pid 39540:tid 39590] [client 158.158.42.25:46270] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aZw0_7sgm9aTWhlRScKdYAAAAdU"]
[Mon Feb 23 19:07:44.264124 2026] [:error] [pid 25295:tid 25340] [client 158.158.42.25:45091] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aZw1AI2Av4J1Jnqi7yK9_AAAAIk"]
[Mon Feb 23 19:07:45.106086 2026] [:error] [pid 39639:tid 39659] [client 158.158.42.25:47684] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aZw1ARpFkMoMi8uTUUOm0AAAAlA"]
[Mon Feb 23 19:07:45.677874 2026] [:error] [pid 39540:tid 39573] [client 158.158.42.25:39925] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aZw1Absgm9aTWhlRScKdYQAAAcQ"]
[Mon Feb 23 19:07:46.316993 2026] [:error] [pid 39540:tid 39586] [client 158.158.42.25:41493] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h2a2ck.php"] [unique_id "aZw1Arsgm9aTWhlRScKdZAAAAdE"]
[Mon Feb 23 19:07:46.953158 2026] [:error] [pid 39540:tid 39582] [client 158.158.42.25:45097] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h2a2ck.php"] [unique_id "aZw1Arsgm9aTWhlRScKdZgAAAc0"]
[Mon Feb 23 19:07:47.972316 2026] [:error] [pid 39540:tid 39583] [client 158.158.42.25:46723] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h2a2ck.php"] [unique_id "aZw1A7sgm9aTWhlRScKdaQAAAc4"]
[Mon Feb 23 19:07:48.918519 2026] [:error] [pid 39504:tid 39527] [client 158.158.42.25:46768] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h2a2ck.php"] [unique_id "aZw1BHLcHpOlI9gwwJoS5gAAAVU"]
[Mon Feb 23 19:07:49.573752 2026] [:error] [pid 39538:tid 39544] [client 158.158.42.25:45103] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cytyr.php"] [unique_id "aZw1BS4Zk8-cQOG3ZnpmewAAAYI"]
[Mon Feb 23 19:07:50.187791 2026] [:error] [pid 39538:tid 39560] [client 158.158.42.25:39918] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cytyr.php"] [unique_id "aZw1Bi4Zk8-cQOG3ZnpmfAAAAZI"]
[Mon Feb 23 19:07:50.919103 2026] [:error] [pid 25295:tid 25332] [client 158.158.42.25:41955] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cytyr.php"] [unique_id "aZw1Bo2Av4J1Jnqi7yK-AQAAAII"]
[Mon Feb 23 19:07:51.586680 2026] [:error] [pid 25380:tid 25391] [client 158.158.42.25:40091] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cytyr.php"] [unique_id "aZw1B6Krc8yFQ8fy78ogJAAAAMk"]
[Mon Feb 23 19:07:52.473066 2026] [:error] [pid 39504:tid 39525] [client 158.158.42.25:41484] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h02ugyh.php"] [unique_id "aZw1CHLcHpOlI9gwwJoS6QAAAVM"]
[Mon Feb 23 19:07:53.295025 2026] [:error] [pid 25295:tid 25349] [client 158.158.42.25:48323] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h02ugyh.php"] [unique_id "aZw1CY2Av4J1Jnqi7yK-AwAAAI4"]
[Mon Feb 23 19:07:54.011789 2026] [:error] [pid 39504:tid 39519] [client 158.158.42.25:48199] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h02ugyh.php"] [unique_id "aZw1CnLcHpOlI9gwwJoS6gAAAU0"]
[Mon Feb 23 19:07:55.049140 2026] [:error] [pid 39538:tid 39564] [client 158.158.42.25:41510] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/h02ugyh.php"] [unique_id "aZw1Cy4Zk8-cQOG3ZnpmgQAAAZY"]
[Mon Feb 23 19:07:55.667285 2026] [:error] [pid 39540:tid 39592] [client 158.158.42.25:40104] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aZw1C7sgm9aTWhlRScKdbQAAAdc"]
[Mon Feb 23 19:07:56.403334 2026] [:error] [pid 39639:tid 39647] [client 158.158.42.25:42702] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aZw1DBpFkMoMi8uTUUOm1gAAAkQ"]
[Mon Feb 23 19:07:57.231705 2026] [:error] [pid 39640:tid 39681] [client 158.158.42.25:42702] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aZw1DdsK--eVCgzvvufRwgAAAos"]
[Mon Feb 23 19:07:58.095052 2026] [:error] [pid 29909:tid 29929] [client 158.158.42.25:43559] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aZw1Dj9oc2QzltksUk7VcwAAARI"]
[Mon Feb 23 19:07:59.021330 2026] [:error] [pid 25295:tid 25329] [client 158.158.42.25:41933] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aZw1D42Av4J1Jnqi7yK-CAAAAIE"]
[Mon Feb 23 19:07:59.612987 2026] [:error] [pid 25380:tid 25394] [client 158.158.42.25:48223] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aZw1D6Krc8yFQ8fy78ogRwAAAMw"]
[Mon Feb 23 19:08:00.417229 2026] [:error] [pid 25295:tid 25327] [client 158.158.42.25:43757] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aZw1EI2Av4J1Jnqi7yK-CQAAAIA"]
[Mon Feb 23 19:08:00.977511 2026] [:error] [pid 39538:tid 39550] [client 158.158.42.25:42319] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aZw1EC4Zk8-cQOG3ZnpmgwAAAYg"]
[Mon Feb 23 19:08:01.627879 2026] [:error] [pid 39640:tid 39676] [client 158.158.42.25:39308] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ava.php"] [unique_id "aZw1EdsK--eVCgzvvufRxgAAAoY"]
[Mon Feb 23 19:08:02.222641 2026] [:error] [pid 25295:tid 25353] [client 158.158.42.25:44830] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ava.php"] [unique_id "aZw1Eo2Av4J1Jnqi7yK-CgAAAJA"]
[Mon Feb 23 19:08:02.967511 2026] [:error] [pid 39540:tid 39575] [client 158.158.42.25:46454] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ava.php"] [unique_id "aZw1Ersgm9aTWhlRScKddQAAAcY"]
[Mon Feb 23 19:08:03.649635 2026] [:error] [pid 25294:tid 25341] [client 158.158.42.25:39352] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ava.php"] [unique_id "aZw1EyRCFB3CqIo_jfbU6QAAAEQ"]
[Mon Feb 23 19:08:04.568658 2026] [:error] [pid 39640:tid 39686] [client 158.158.42.25:43878] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/balin.php"] [unique_id "aZw1FNsK--eVCgzvvufR0gAAApA"]
[Mon Feb 23 19:08:05.232934 2026] [:error] [pid 25294:tid 25334] [client 158.158.42.25:4232] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/balin.php"] [unique_id "aZw1FSRCFB3CqIo_jfbU7AAAAEM"]
[Mon Feb 23 19:08:06.227452 2026] [:error] [pid 25294:tid 25358] [client 158.158.42.25:46443] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/balin.php"] [unique_id "aZw1FiRCFB3CqIo_jfbU7wAAAEw"]
[Mon Feb 23 19:08:06.892913 2026] [:error] [pid 25294:tid 25372] [client 158.158.42.25:43853] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/balin.php"] [unique_id "aZw1FiRCFB3CqIo_jfbU8AAAAFM"]
[Mon Feb 23 19:08:07.845894 2026] [:error] [pid 25294:tid 25364] [client 158.158.42.25:43944] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aZw1FyRCFB3CqIo_jfbU9AAAAE8"]
[Mon Feb 23 19:08:08.694477 2026] [:error] [pid 39540:tid 39575] [client 158.158.42.25:46458] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aZw1GLsgm9aTWhlRScKdhQAAAcY"]
[Mon Feb 23 19:08:09.621298 2026] [:error] [pid 25294:tid 25366] [client 158.158.42.25:43913] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aZw1GSRCFB3CqIo_jfbU9wAAAFA"]
[Mon Feb 23 19:08:10.369319 2026] [:error] [pid 25294:tid 25331] [client 158.158.42.25:45343] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aZw1GiRCFB3CqIo_jfbU-gAAAEI"]
[Mon Feb 23 19:08:11.185045 2026] [:error] [pid 25380:tid 25384] [client 158.158.42.25:32215] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/13ede.php"] [unique_id "aZw1G6Krc8yFQ8fy78ogVQAAAMI"]
[Mon Feb 23 19:08:11.828503 2026] [:error] [pid 25380:tid 25390] [client 158.158.42.25:44400] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/13ede.php"] [unique_id "aZw1G6Krc8yFQ8fy78ogXwAAAMg"]
[Mon Feb 23 19:08:12.596652 2026] [:error] [pid 39639:tid 39658] [client 158.158.42.25:40779] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/13ede.php"] [unique_id "aZw1HBpFkMoMi8uTUUOm4gAAAk8"]
[Mon Feb 23 19:08:13.311894 2026] [:error] [pid 25294:tid 25358] [client 158.158.42.25:32208] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/13ede.php"] [unique_id "aZw1HSRCFB3CqIo_jfbVOwAAAEw"]
[Mon Feb 23 19:08:14.133732 2026] [:error] [pid 25294:tid 25328] [client 158.158.42.25:41743] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/akhvg.php"] [unique_id "aZw1HiRCFB3CqIo_jfbVPwAAAEA"]
[Mon Feb 23 19:08:14.700285 2026] [:error] [pid 25294:tid 25368] [client 158.158.42.25:41751] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/akhvg.php"] [unique_id "aZw1HiRCFB3CqIo_jfbVQQAAAFE"]
[Mon Feb 23 19:08:15.355787 2026] [:error] [pid 39639:tid 39662] [client 158.158.42.25:45356] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/akhvg.php"] [unique_id "aZw1HxpFkMoMi8uTUUOm5wAAAlM"]
[Mon Feb 23 19:08:16.103579 2026] [:error] [pid 39639:tid 39664] [client 158.158.42.25:44451] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/akhvg.php"] [unique_id "aZw1IBpFkMoMi8uTUUOm6QAAAlU"]
[Mon Feb 23 19:08:16.852298 2026] [:error] [pid 39639:tid 39654] [client 158.158.42.25:41784] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aZw1IBpFkMoMi8uTUUOm6gAAAks"]
[Mon Feb 23 19:08:17.555929 2026] [:error] [pid 39639:tid 39660] [client 158.158.42.25:41633] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aZw1IRpFkMoMi8uTUUOm7AAAAlE"]
[Mon Feb 23 19:08:18.241058 2026] [:error] [pid 39639:tid 39656] [client 158.158.42.25:44446] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aZw1IhpFkMoMi8uTUUOm8AAAAk0"]
[Mon Feb 23 19:08:18.773022 2026] [:error] [pid 29909:tid 29912] [client 158.158.42.25:41009] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assacc.php"] [unique_id "aZw1Ij9oc2QzltksUk7VegAAAQE"]
[Mon Feb 23 19:08:19.750736 2026] [:error] [pid 39639:tid 39648] [client 158.158.42.25:44417] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aZw1IxpFkMoMi8uTUUOm9AAAAkU"]
[Mon Feb 23 19:08:20.588568 2026] [:error] [pid 25294:tid 25362] [client 158.158.42.25:47953] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aZw1JCRCFB3CqIo_jfbVQwAAAE4"]
[Mon Feb 23 19:08:21.478516 2026] [:error] [pid 39640:tid 39692] [client 158.158.42.25:41003] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aZw1JdsK--eVCgzvvufSJQAAApY"]
[Mon Feb 23 19:08:22.215039 2026] [:error] [pid 39639:tid 39654] [client 158.158.42.25:39192] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aZw1JhpFkMoMi8uTUUOm-AAAAks"]
[Mon Feb 23 19:08:22.786932 2026] [:error] [pid 25294:tid 25373] [client 158.158.42.25:13255] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aZw1JiRCFB3CqIo_jfbVRgAAAFQ"]
[Mon Feb 23 19:08:23.408305 2026] [:error] [pid 39640:tid 39683] [client 158.158.42.25:41391] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aZw1J9sK--eVCgzvvufSKAAAAo0"]
[Mon Feb 23 19:08:23.912479 2026] [:error] [pid 25380:tid 25385] [client 158.158.42.25:41766] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aZw1J6Krc8yFQ8fy78ogawAAAMM"]
[Mon Feb 23 19:08:24.593060 2026] [:error] [pid 25293:tid 25307] [client 158.158.42.25:41307] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aZw1KOL9XfBf66iHi_eoRQAAAAg"]
[Mon Feb 23 19:08:25.287088 2026] [:error] [pid 25380:tid 25397] [client 158.158.42.25:41347] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw1KaKrc8yFQ8fy78ogbwAAAM8"]
[Mon Feb 23 19:08:25.892515 2026] [:error] [pid 39640:tid 39680] [client 158.158.42.25:40360] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw1KdsK--eVCgzvvufSKQAAAoo"]
[Mon Feb 23 19:08:26.476782 2026] [:error] [pid 39640:tid 39672] [client 158.158.42.25:47813] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw1KtsK--eVCgzvvufSKgAAAoI"]
[Mon Feb 23 19:08:27.093244 2026] [:error] [pid 39640:tid 39687] [client 158.158.42.25:41374] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fetch.php"] [unique_id "aZw1K9sK--eVCgzvvufSLAAAApE"]
[Mon Feb 23 19:08:27.698601 2026] [:error] [pid 39639:tid 39645] [client 158.158.42.25:47854] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jnhddqyz.php"] [unique_id "aZw1KxpFkMoMi8uTUUOm_gAAAkI"]
[Mon Feb 23 19:08:28.268267 2026] [:error] [pid 25294:tid 25341] [client 158.158.42.25:45496] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jnhddqyz.php"] [unique_id "aZw1LCRCFB3CqIo_jfbVSAAAAEQ"]
[Mon Feb 23 19:08:28.809606 2026] [:error] [pid 39640:tid 39690] [client 158.158.42.25:44074] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jnhddqyz.php"] [unique_id "aZw1LNsK--eVCgzvvufSLgAAApQ"]
[Mon Feb 23 19:08:29.589311 2026] [:error] [pid 39639:tid 39653] [client 158.158.42.25:45454] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jnhddqyz.php"] [unique_id "aZw1LRpFkMoMi8uTUUOnAgAAAko"]
[Mon Feb 23 19:08:30.312234 2026] [:error] [pid 25380:tid 25398] [client 158.158.42.25:47098] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aZw1LqKrc8yFQ8fy78ogcAAAANA"]
[Mon Feb 23 19:08:30.995078 2026] [:error] [pid 39504:tid 39511] [client 158.158.42.25:39730] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aZw1LnLcHpOlI9gwwJoS8gAAAUU"]
[Mon Feb 23 19:08:31.751328 2026] [:error] [pid 25380:tid 25392] [client 158.158.42.25:47814] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aZw1L6Krc8yFQ8fy78ogcgAAAMo"]
[Mon Feb 23 19:08:32.405987 2026] [:error] [pid 39639:tid 39660] [client 158.158.42.25:45439] [client 158.158.42.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aZw1MBpFkMoMi8uTUUOnBgAAAlE"]
[Tue Feb 24 07:55:46.341405 2026] [:error] [pid 37540:tid 37607] [client 20.166.77.60:7249] [client 20.166.77.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZzpAiahRAUBJS8hpJWUUAAAAIU"]
[Tue Feb 24 07:55:53.736842 2026] [:error] [pid 37538:tid 37572] [client 20.166.77.60:10159] [client 20.166.77.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZzpCSynTiHZ9J0Y2nZ4XAAAABg"]
[Tue Feb 24 07:56:06.298745 2026] [:error] [pid 37540:tid 37623] [client 20.166.77.60:5742] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZzpFiahRAUBJS8hpJWUogAAAJU"]
[Tue Feb 24 07:56:07.351300 2026] [:error] [pid 37538:tid 37566] [client 20.166.77.60:1259] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZzpFyynTiHZ9J0Y2nZ4ZgAAABI"]
[Tue Feb 24 07:56:08.355193 2026] [:error] [pid 37540:tid 37612] [client 20.166.77.60:1244] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZzpGCahRAUBJS8hpJWUpgAAAIo"]
[Tue Feb 24 07:56:09.403492 2026] [:error] [pid 11672:tid 11698] [client 20.166.77.60:1532] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aZzpGfa0fhnmfPYq92vMFwAAARg"]
[Tue Feb 24 07:56:09.663074 2026] [:error] [pid 41188:tid 41198] [client 20.166.77.60:10113] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZzpGQWRg7szIRhA0WiUigAAAUc"]
[Tue Feb 24 07:56:10.185365 2026] [:error] [pid 37540:tid 37604] [client 20.166.77.60:9318] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZzpGiahRAUBJS8hpJWUsgAAAII"]
[Tue Feb 24 07:56:10.692772 2026] [:error] [pid 41188:tid 41192] [client 20.166.77.60:4037] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZzpGgWRg7szIRhA0WiUjQAAAUE"]
[Tue Feb 24 07:56:11.198917 2026] [:error] [pid 37540:tid 37611] [client 20.166.77.60:3610] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZzpGyahRAUBJS8hpJWUswAAAIk"]
[Tue Feb 24 07:56:11.720380 2026] [:error] [pid 37644:tid 37670] [client 20.166.77.60:7126] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZzpG0LaEhVDwBRydH2CWgAAANg"]
[Tue Feb 24 07:56:12.221370 2026] [:error] [pid 37538:tid 37571] [client 20.166.77.60:6018] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZzpHCynTiHZ9J0Y2nZ4awAAABc"]
[Tue Feb 24 07:56:12.744602 2026] [:error] [pid 41188:tid 41207] [client 20.166.77.60:8112] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZzpHAWRg7szIRhA0WiUkgAAAVA"]
[Tue Feb 24 07:56:13.272899 2026] [:error] [pid 41188:tid 41197] [client 20.166.77.60:8981] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi.php"] [unique_id "aZzpHQWRg7szIRhA0WiUlQAAAUY"]
[Tue Feb 24 07:56:13.802575 2026] [:error] [pid 41188:tid 41210] [client 20.166.77.60:3179] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aZzpHQWRg7szIRhA0WiUmgAAAVM"]
[Tue Feb 24 07:56:14.326659 2026] [:error] [pid 11672:tid 11681] [client 20.166.77.60:2345] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aZzpHva0fhnmfPYq92vMHQAAAQc"]
[Tue Feb 24 07:56:14.848350 2026] [:error] [pid 37538:tid 37558] [client 20.166.77.60:6453] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aZzpHiynTiHZ9J0Y2nZ4bwAAAAo"]
[Tue Feb 24 07:56:15.403560 2026] [:error] [pid 37540:tid 37618] [client 20.166.77.60:6463] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aZzpHyahRAUBJS8hpJWUugAAAJA"]
[Tue Feb 24 07:56:15.965748 2026] [:error] [pid 37540:tid 37611] [client 20.166.77.60:5261] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/az.php"] [unique_id "aZzpHyahRAUBJS8hpJWUwgAAAIk"]
[Tue Feb 24 07:56:16.546423 2026] [:error] [pid 41188:tid 41214] [client 20.166.77.60:9346] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZzpIAWRg7szIRhA0WiUqQAAAVc"]
[Tue Feb 24 07:56:17.104146 2026] [:error] [pid 41188:tid 41209] [client 20.166.77.60:9383] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZzpIQWRg7szIRhA0WiUrQAAAVI"]
[Tue Feb 24 07:56:17.627554 2026] [:error] [pid 37644:tid 37670] [client 20.166.77.60:9366] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZzpIULaEhVDwBRydH2CZgAAANg"]
[Tue Feb 24 07:56:18.132596 2026] [:error] [pid 37644:tid 37658] [client 20.166.77.60:7751] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/app.php"] [unique_id "aZzpIkLaEhVDwBRydH2CaQAAAMw"]
[Tue Feb 24 07:56:18.632974 2026] [:error] [pid 41188:tid 41208] [client 20.166.77.60:3271] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/app.php"] [unique_id "aZzpIgWRg7szIRhA0WiUrwAAAVE"]
[Tue Feb 24 07:56:19.132549 2026] [:error] [pid 41188:tid 41207] [client 20.166.77.60:1154] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/app.php"] [unique_id "aZzpIwWRg7szIRhA0WiUswAAAVA"]
[Tue Feb 24 07:56:19.691189 2026] [:error] [pid 37539:tid 37577] [client 20.166.77.60:2646] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/app.php"] [unique_id "aZzpI3Enr46jUQep9z_mxQAAAEI"]
[Tue Feb 24 07:56:20.249458 2026] [:error] [pid 37644:tid 37646] [client 20.166.77.60:10794] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aZzpJELaEhVDwBRydH2CawAAAMA"]
[Tue Feb 24 07:56:20.764321 2026] [:error] [pid 37539:tid 37590] [client 20.166.77.60:10783] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aZzpJHEnr46jUQep9z_myAAAAE8"]
[Tue Feb 24 07:56:21.372167 2026] [:error] [pid 37539:tid 37575] [client 20.166.77.60:1193] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aZzpJXEnr46jUQep9z_mzAAAAEA"]
[Tue Feb 24 07:56:21.953926 2026] [:error] [pid 37538:tid 37564] [client 20.166.77.60:9238] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aZzpJSynTiHZ9J0Y2nZ4dAAAABA"]
[Tue Feb 24 07:56:22.459256 2026] [:error] [pid 41188:tid 41208] [client 20.166.77.60:2677] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "aZzpJgWRg7szIRhA0WiUvAAAAVE"]
[Tue Feb 24 07:56:22.961421 2026] [:error] [pid 37539:tid 37598] [client 20.166.77.60:3816] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "aZzpJnEnr46jUQep9z_mzwAAAFc"]
[Tue Feb 24 07:56:23.483671 2026] [:error] [pid 11672:tid 11691] [client 20.166.77.60:1197] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "aZzpJ_a0fhnmfPYq92vMQAAAARE"]
[Tue Feb 24 07:56:23.982594 2026] [:error] [pid 37539:tid 37578] [client 20.166.77.60:3833] [client 20.166.77.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "aZzpJ3Enr46jUQep9z_m1AAAAEM"]
[Thu Feb 26 15:13:31.474746 2026] [:error] [pid 55051:tid 55075] [client 34.16.116.38:35244] [client 34.16.116.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ_ymwmK1w2kZvh5eLHzJQAAAJU"]
[Thu Feb 26 15:24:30.474442 2026] [:error] [pid 55051:tid 55070] [client 34.16.116.38:55828] [client 34.16.116.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ_1LgmK1w2kZvh5eLH1RQAAAJA"]
[Thu Feb 26 16:34:25.177041 2026] [:error] [pid 25311:tid 25331] [client 104.197.144.220:55656] [client 104.197.144.220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaAFkdfdM__yZAgJFStB2wAAAZE"]
[Thu Feb 26 17:09:32.725493 2026] [:error] [pid 54991:tid 55021] [client 104.197.144.220:59534] [client 104.197.144.220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaANzN4Zx-mJ8gbRB2itIgAAAEE"]
[Thu Feb 26 17:36:59.585451 2026] [:error] [pid 55051:tid 55068] [client 35.222.4.238:44788] [client 35.222.4.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaAUOwmK1w2kZvh5eLEqxQAAAI4"]
[Thu Feb 26 17:48:50.585268 2026] [:error] [pid 20419:tid 20443] [client 35.222.4.238:50156] [client 35.222.4.238] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaAXAu3DVDvMfTYYUBX50wAAAdU"]
[Thu Feb 26 18:26:46.170119 2026] [:error] [pid 25311:tid 25337] [client 129.212.228.231:58671] [client 129.212.228.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aaAf5tfdM__yZAgJFStufQAAAZc"]
[Thu Feb 26 18:26:48.158151 2026] [:error] [pid 3883:tid 3892] [client 129.212.228.231:60812] [client 129.212.228.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "aaAf6OA33x90V6yYHagoEwAAAUY"]
[Thu Feb 26 20:10:41.107356 2026] [:error] [pid 20419:tid 20437] [client 195.178.110.28:52948] [client 195.178.110.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aaA4Qe3DVDvMfTYYUBVIVwAAAc8"]
[Thu Feb 26 22:26:48.203335 2026] [:error] [pid 25311:tid 25325] [client 20.203.144.43:38915] [client 20.203.144.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBYKNfdM__yZAgJFSvsbAAAAYs"]
[Thu Feb 26 22:26:48.713082 2026] [:error] [pid 54991:tid 55035] [client 20.203.144.43:23177] [client 20.203.144.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBYKN4Zx-mJ8gbRB2j_yQAAAE8"]
[Thu Feb 26 22:26:49.203777 2026] [:error] [pid 20419:tid 20445] [client 20.203.144.43:23181] [client 20.203.144.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBYKe3DVDvMfTYYUBVpUwAAAdc"]
[Thu Feb 26 22:26:49.686363 2026] [:error] [pid 20419:tid 20427] [client 20.203.144.43:8348] [client 20.203.144.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaBYKe3DVDvMfTYYUBVpVQAAAcU"]
[Sat Feb 28 02:39:48.909320 2026] [:error] [pid 15098:tid 15108] [client 20.220.144.87:26504] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHk9MkFqny8dQQbmTk5BAAAAIM"]
[Sat Feb 28 02:39:49.328620 2026] [:error] [pid 38620:tid 38630] [client 20.220.144.87:26562] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHk9QP6I7SRqrhh7RpaDAAAAUg"]
[Sat Feb 28 02:39:49.743111 2026] [:error] [pid 15098:tid 15121] [client 20.220.144.87:26501] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHk9ckFqny8dQQbmTk5DQAAAI8"]
[Sat Feb 28 02:39:50.156338 2026] [:error] [pid 38586:tid 38589] [client 20.220.144.87:26611] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHk9r_i6nvKNhjFW7V8_QAAAQA"]
[Sat Feb 28 09:36:53.583691 2026] [:error] [pid 11791:tid 11794] [client 45.153.34.31:36930] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aaJGtWuX5e1Q32gqxH2lBwAAAQE"]
[Sat Feb 28 17:21:17.422841 2026] [:error] [pid 39183:tid 39197] [client 204.76.203.25:44598] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env"] [unique_id "aaKzjRCf4HvhVePw3LY-pAAAAAU"]
[Sat Feb 28 17:29:26.006944 2026] [:error] [pid 39183:tid 39196] [client 134.149.59.124:4060] [client 134.149.59.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaK1dhCf4HvhVePw3LZJugAAAAQ"]
[Sat Feb 28 17:29:52.264158 2026] [:error] [pid 11791:tid 11798] [client 134.149.59.124:8247] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as1337.php"] [unique_id "aaK1kGuX5e1Q32gqxH2EQAAAAQU"]
[Sat Feb 28 17:29:52.784308 2026] [:error] [pid 49763:tid 49779] [client 134.149.59.124:5643] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wolf-shell.php"] [unique_id "aaK1kLTHSOG_yf2PpqEZ2gAAAc0"]
[Sat Feb 28 17:29:53.281829 2026] [:error] [pid 49763:tid 49776] [client 134.149.59.124:7273] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wolf-shell.php"] [unique_id "aaK1kbTHSOG_yf2PpqEZ3wAAAco"]
[Sat Feb 28 17:29:53.779544 2026] [:error] [pid 49763:tid 49767] [client 134.149.59.124:6707] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wolf-shell.php"] [unique_id "aaK1kbTHSOG_yf2PpqEZ5AAAAcE"]
[Sat Feb 28 17:29:54.278203 2026] [:error] [pid 49763:tid 49779] [client 134.149.59.124:3186] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wolf-shell.php"] [unique_id "aaK1krTHSOG_yf2PpqEZ6AAAAc0"]
[Sat Feb 28 17:29:54.776971 2026] [:error] [pid 39183:tid 39215] [client 134.149.59.124:5359] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaK1khCf4HvhVePw3LZKaAAAABc"]
[Sat Feb 28 17:29:55.276112 2026] [:error] [pid 49763:tid 49773] [client 134.149.59.124:7136] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaK1k7THSOG_yf2PpqEZ7wAAAcc"]
[Sat Feb 28 17:29:55.785848 2026] [:error] [pid 39184:tid 39220] [client 134.149.59.124:7238] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaK1k1tZF9Zd_U7easBFiQAAAEE"]
[Sat Feb 28 17:29:56.286706 2026] [:error] [pid 39184:tid 39239] [client 134.149.59.124:4943] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaK1lFtZF9Zd_U7easBFjAAAAFQ"]
[Sat Feb 28 17:29:56.790822 2026] [:error] [pid 39184:tid 39238] [client 134.149.59.124:6948] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zeal.php"] [unique_id "aaK1lFtZF9Zd_U7easBFjgAAAFM"]
[Sat Feb 28 17:29:57.295481 2026] [:error] [pid 39183:tid 39197] [client 134.149.59.124:7382] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zeal.php"] [unique_id "aaK1lRCf4HvhVePw3LZKgAAAAAU"]
[Sat Feb 28 17:56:54.838561 2026] [:error] [pid 39184:tid 39229] [client 45.153.34.31:38080] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aaK75ltZF9Zd_U7easBTSQAAAEo"]
[Sat Feb 28 19:34:09.196434 2026] [:error] [pid 39185:tid 39263] [client 20.216.146.160:28421] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp9.php"] [unique_id "aaLSsRVE-FfM89u7BQaKzgAAAJE"]
[Sat Feb 28 19:34:09.665741 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:16636] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp9.php"] [unique_id "aaLSsbTHSOG_yf2PpqHL9wAAAdc"]
[Sat Feb 28 19:34:10.134055 2026] [:error] [pid 52460:tid 52473] [client 20.216.146.160:13261] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp9.php"] [unique_id "aaLSsrLWOogAgHGh62Q0AQAAAYo"]
[Sat Feb 28 19:34:10.602806 2026] [:error] [pid 39183:tid 39206] [client 20.216.146.160:48217] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp9.php"] [unique_id "aaLSshCf4HvhVePw3LbSTgAAAA4"]
[Sat Feb 28 19:34:11.071910 2026] [:error] [pid 49763:tid 49773] [client 20.216.146.160:43855] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/path.php"] [unique_id "aaLSs7THSOG_yf2PpqHL_QAAAcc"]
[Sat Feb 28 19:34:11.542924 2026] [:error] [pid 52460:tid 52478] [client 20.216.146.160:14551] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/path.php"] [unique_id "aaLSs7LWOogAgHGh62Q0GgAAAY8"]
[Sat Feb 28 19:34:12.012416 2026] [:error] [pid 49763:tid 49777] [client 20.216.146.160:14529] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/path.php"] [unique_id "aaLStLTHSOG_yf2PpqHMAQAAAcs"]
[Sat Feb 28 19:34:12.481183 2026] [:error] [pid 39185:tid 39262] [client 20.216.146.160:13279] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/path.php"] [unique_id "aaLStBVE-FfM89u7BQaK0wAAAJA"]
[Sat Feb 28 19:34:12.950094 2026] [:error] [pid 49763:tid 49769] [client 20.216.146.160:7806] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLStLTHSOG_yf2PpqHMCAAAAcM"]
[Sat Feb 28 19:34:13.422051 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:12289] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLStbTHSOG_yf2PpqHMCgAAAdE"]
[Sat Feb 28 19:34:13.896868 2026] [:error] [pid 39184:tid 39231] [client 20.216.146.160:7780] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLStVtZF9Zd_U7easCJRwAAAEw"]
[Sat Feb 28 19:34:14.366717 2026] [:error] [pid 52460:tid 52480] [client 20.216.146.160:23703] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLStrLWOogAgHGh62Q0MwAAAZE"]
[Sat Feb 28 19:34:14.836820 2026] [:error] [pid 39184:tid 39222] [client 20.216.146.160:23743] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLStltZF9Zd_U7easCJSQAAAEM"]
[Sat Feb 28 19:34:15.308334 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:13289] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLSt7THSOG_yf2PpqHMEgAAAdI"]
[Sat Feb 28 19:34:15.777255 2026] [:error] [pid 39184:tid 39228] [client 20.216.146.160:13273] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLSt1tZF9Zd_U7easCJTQAAAEk"]
[Sat Feb 28 19:34:16.246372 2026] [:error] [pid 49763:tid 49773] [client 20.216.146.160:7796] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLSuLTHSOG_yf2PpqHMGQAAAcc"]
[Sat Feb 28 19:34:16.716548 2026] [:error] [pid 39184:tid 39242] [client 20.216.146.160:23727] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-tem.php"] [unique_id "aaLSuFtZF9Zd_U7easCJTwAAAFc"]
[Sat Feb 28 19:34:17.188537 2026] [:error] [pid 39184:tid 39240] [client 20.216.146.160:23686] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-tem.php"] [unique_id "aaLSuVtZF9Zd_U7easCJUwAAAFU"]
[Sat Feb 28 19:34:17.659048 2026] [:error] [pid 52460:tid 52482] [client 20.216.146.160:12305] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-tem.php"] [unique_id "aaLSubLWOogAgHGh62Q0YAAAAZM"]
[Sat Feb 28 19:34:18.128656 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:3335] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-tem.php"] [unique_id "aaLSurTHSOG_yf2PpqHMJQAAAdM"]
[Sat Feb 28 19:34:18.598490 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:16878] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av6m.php"] [unique_id "aaLSurTHSOG_yf2PpqHMJwAAAdY"]
[Sat Feb 28 19:34:19.067342 2026] [:error] [pid 39185:tid 39256] [client 20.216.146.160:7746] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av6m.php"] [unique_id "aaLSuxVE-FfM89u7BQaK3AAAAIo"]
[Sat Feb 28 19:34:19.541138 2026] [:error] [pid 49763:tid 49778] [client 20.216.146.160:7792] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av6m.php"] [unique_id "aaLSu7THSOG_yf2PpqHMLQAAAcw"]
[Sat Feb 28 19:34:20.011273 2026] [:error] [pid 49763:tid 49786] [client 20.216.146.160:3389] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av6m.php"] [unique_id "aaLSvLTHSOG_yf2PpqHMMgAAAdQ"]
[Sat Feb 28 19:34:20.488817 2026] [:error] [pid 49763:tid 49787] [client 20.216.146.160:17335] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLSvLTHSOG_yf2PpqHMNwAAAdU"]
[Sat Feb 28 19:34:20.957669 2026] [:error] [pid 11791:tid 11813] [client 20.216.146.160:12729] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLSvGuX5e1Q32gqxH2pqAAAARQ"]
[Sat Feb 28 19:34:21.426825 2026] [:error] [pid 39184:tid 39221] [client 20.216.146.160:3133] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLSvVtZF9Zd_U7easCJZgAAAEI"]
[Sat Feb 28 19:34:21.896234 2026] [:error] [pid 49763:tid 49786] [client 20.216.146.160:12633] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLSvbTHSOG_yf2PpqHMQAAAAdQ"]
[Sat Feb 28 19:34:22.364121 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:17291] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/btx25.php"] [unique_id "aaLSvrTHSOG_yf2PpqHMSQAAAdY"]
[Sat Feb 28 19:34:22.833944 2026] [:error] [pid 39183:tid 39215] [client 20.216.146.160:3078] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/btx25.php"] [unique_id "aaLSvhCf4HvhVePw3LbS4AAAABc"]
[Sat Feb 28 19:34:23.303072 2026] [:error] [pid 39183:tid 39199] [client 20.216.146.160:16894] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/btx25.php"] [unique_id "aaLSvxCf4HvhVePw3LbS5AAAAAc"]
[Sat Feb 28 19:34:23.773071 2026] [:error] [pid 52460:tid 52468] [client 20.216.146.160:17316] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/btx25.php"] [unique_id "aaLSv7LWOogAgHGh62Q0rQAAAYU"]
[Sat Feb 28 19:34:24.242651 2026] [:error] [pid 52460:tid 52485] [client 20.216.146.160:16853] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mga.php"] [unique_id "aaLSwLLWOogAgHGh62Q0tgAAAZY"]
[Sat Feb 28 19:34:24.713273 2026] [:error] [pid 39183:tid 39215] [client 20.216.146.160:24477] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mga.php"] [unique_id "aaLSwBCf4HvhVePw3LbS8QAAABc"]
[Sat Feb 28 19:34:25.183930 2026] [:error] [pid 52460:tid 52471] [client 20.216.146.160:12674] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mga.php"] [unique_id "aaLSwbLWOogAgHGh62Q0xAAAAYg"]
[Sat Feb 28 19:34:25.655344 2026] [:error] [pid 39183:tid 39211] [client 20.216.146.160:3134] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mga.php"] [unique_id "aaLSwRCf4HvhVePw3LbS9QAAABM"]
[Sat Feb 28 19:34:26.126605 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:24490] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maxro.php"] [unique_id "aaLSwrTHSOG_yf2PpqHMdQAAAcY"]
[Sat Feb 28 19:34:26.596238 2026] [:error] [pid 52460:tid 52475] [client 20.216.146.160:2650] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maxro.php"] [unique_id "aaLSwrLWOogAgHGh62Q03QAAAYw"]
[Sat Feb 28 19:34:27.064761 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:2669] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maxro.php"] [unique_id "aaLSw7THSOG_yf2PpqHMhAAAAcY"]
[Sat Feb 28 19:34:27.534620 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:3375] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/maxro.php"] [unique_id "aaLSw7THSOG_yf2PpqHMigAAAc0"]
[Sat Feb 28 19:34:28.003648 2026] [:error] [pid 52460:tid 52482] [client 20.216.146.160:3113] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/agg.php"] [unique_id "aaLSxLLWOogAgHGh62Q07wAAAZM"]
[Sat Feb 28 19:34:28.472173 2026] [:error] [pid 39183:tid 39199] [client 20.216.146.160:12608] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/agg.php"] [unique_id "aaLSxBCf4HvhVePw3LbS_wAAAAc"]
[Sat Feb 28 19:34:28.940889 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:24468] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/agg.php"] [unique_id "aaLSxLTHSOG_yf2PpqHMkQAAAcA"]
[Sat Feb 28 19:34:29.409777 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:18085] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/agg.php"] [unique_id "aaLSxbTHSOG_yf2PpqHMmAAAAc0"]
[Sat Feb 28 19:34:29.880669 2026] [:error] [pid 39184:tid 39241] [client 20.216.146.160:8741] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "aaLSxVtZF9Zd_U7easCJpQAAAFY"]
[Sat Feb 28 19:34:30.350805 2026] [:error] [pid 52460:tid 52477] [client 20.216.146.160:12637] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "aaLSxrLWOogAgHGh62Q0_wAAAY4"]
[Sat Feb 28 19:34:30.820899 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:24488] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "aaLSxrTHSOG_yf2PpqHMogAAAc0"]
[Sat Feb 28 19:34:31.290870 2026] [:error] [pid 49763:tid 49769] [client 20.216.146.160:12659] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "aaLSx7THSOG_yf2PpqHMrAAAAcM"]
[Sat Feb 28 19:34:31.763962 2026] [:error] [pid 39184:tid 39230] [client 20.216.146.160:16892] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aaLSx1tZF9Zd_U7easCJqQAAAEs"]
[Sat Feb 28 19:34:32.237624 2026] [:error] [pid 52460:tid 52480] [client 20.216.146.160:3347] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aaLSyLLWOogAgHGh62Q1EwAAAZE"]
[Sat Feb 28 19:34:32.707060 2026] [:error] [pid 52460:tid 52464] [client 20.216.146.160:12610] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aaLSyLLWOogAgHGh62Q1GwAAAYE"]
[Sat Feb 28 19:34:33.176166 2026] [:error] [pid 39183:tid 39204] [client 20.216.146.160:44839] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wsvvs.php"] [unique_id "aaLSyRCf4HvhVePw3LbTEQAAAAw"]
[Sat Feb 28 19:34:33.647160 2026] [:error] [pid 49763:tid 49777] [client 20.216.146.160:2673] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aaLSybTHSOG_yf2PpqHMwgAAAcs"]
[Sat Feb 28 19:34:34.117476 2026] [:error] [pid 39183:tid 39194] [client 20.216.146.160:20495] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aaLSyhCf4HvhVePw3LbTFQAAAAI"]
[Sat Feb 28 19:34:34.588668 2026] [:error] [pid 39184:tid 39220] [client 20.216.146.160:12626] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aaLSyltZF9Zd_U7easCJsgAAAEE"]
[Sat Feb 28 19:34:35.056981 2026] [:error] [pid 11791:tid 11795] [client 20.216.146.160:8724] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aaLSy2uX5e1Q32gqxH2psAAAAQI"]
[Sat Feb 28 19:34:35.526437 2026] [:error] [pid 49763:tid 49778] [client 20.216.146.160:20532] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aaLSy7THSOG_yf2PpqHM1QAAAcw"]
[Sat Feb 28 19:34:35.997639 2026] [:error] [pid 39184:tid 39241] [client 20.216.146.160:24480] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aaLSy1tZF9Zd_U7easCJtAAAAFY"]
[Sat Feb 28 19:34:36.467724 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:24489] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aaLSzLTHSOG_yf2PpqHM4gAAAdE"]
[Sat Feb 28 19:34:36.946139 2026] [:error] [pid 39183:tid 39215] [client 20.216.146.160:20489] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aaLSzBCf4HvhVePw3LbTKwAAABc"]
[Sat Feb 28 19:34:37.416170 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:3089] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLSzbTHSOG_yf2PpqHM6AAAAdY"]
[Sat Feb 28 19:34:37.886083 2026] [:error] [pid 52460:tid 52487] [client 20.216.146.160:44832] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLSzbLWOogAgHGh62Q1QQAAAZg"]
[Sat Feb 28 19:34:38.355980 2026] [:error] [pid 39184:tid 39221] [client 20.216.146.160:18058] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLSzltZF9Zd_U7easCJuwAAAEI"]
[Sat Feb 28 19:34:38.825039 2026] [:error] [pid 49763:tid 49775] [client 20.216.146.160:12731] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLSzrTHSOG_yf2PpqHM8wAAAck"]
[Sat Feb 28 19:34:39.295956 2026] [:error] [pid 49763:tid 49773] [client 20.216.146.160:20514] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLSz7THSOG_yf2PpqHM_AAAAcc"]
[Sat Feb 28 19:34:39.765182 2026] [:error] [pid 49763:tid 49768] [client 20.216.146.160:20494] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLSz7THSOG_yf2PpqHNBAAAAcI"]
[Sat Feb 28 19:34:40.236070 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:24472] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLS0BCf4HvhVePw3LbTPwAAABU"]
[Sat Feb 28 19:34:40.705303 2026] [:error] [pid 39183:tid 39196] [client 20.216.146.160:44855] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLS0BCf4HvhVePw3LbTRAAAAAQ"]
[Sat Feb 28 19:34:41.176018 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:20517] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aaLS0RCf4HvhVePw3LbTTQAAABU"]
[Sat Feb 28 19:34:41.646280 2026] [:error] [pid 39184:tid 39229] [client 20.216.146.160:2643] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aaLS0VtZF9Zd_U7easCJwwAAAEo"]
[Sat Feb 28 19:34:42.116901 2026] [:error] [pid 39292:tid 39299] [client 20.216.146.160:8722] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aaLS0qIAO5fN7BxyqcFZxAAAAMU"]
[Sat Feb 28 19:34:42.586463 2026] [:error] [pid 39184:tid 39235] [client 20.216.146.160:44816] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aaLS0ltZF9Zd_U7easCJxwAAAFA"]
[Sat Feb 28 19:34:43.064432 2026] [:error] [pid 49763:tid 49774] [client 20.216.146.160:2659] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLS07THSOG_yf2PpqHNDQAAAcg"]
[Sat Feb 28 19:34:43.539692 2026] [:error] [pid 22194:tid 22220] [client 20.216.146.160:20508] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLS036mbajs3bzQGyuQewAAAVg"]
[Sat Feb 28 19:34:44.021090 2026] [:error] [pid 49763:tid 49790] [client 20.216.146.160:24478] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLS1LTHSOG_yf2PpqHNEQAAAdg"]
[Sat Feb 28 19:34:44.494954 2026] [:error] [pid 52460:tid 52477] [client 20.216.146.160:8738] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLS1LLWOogAgHGh62Q1XAAAAY4"]
[Sat Feb 28 19:34:44.969475 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:12721] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aaLS1LTHSOG_yf2PpqHNGwAAAco"]
[Sat Feb 28 19:34:45.438027 2026] [:error] [pid 52460:tid 52475] [client 20.216.146.160:18051] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aaLS1bLWOogAgHGh62Q1YAAAAYw"]
[Sat Feb 28 19:34:45.912963 2026] [:error] [pid 22194:tid 22203] [client 20.216.146.160:44810] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aaLS1X6mbajs3bzQGyuQfgAAAUc"]
[Sat Feb 28 19:34:46.385158 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:18089] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "aaLS1rTHSOG_yf2PpqHNLwAAAcA"]
[Sat Feb 28 19:34:46.855045 2026] [:error] [pid 49763:tid 49774] [client 20.216.146.160:18083] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLS1rTHSOG_yf2PpqHNNQAAAcg"]
[Sat Feb 28 19:34:47.325076 2026] [:error] [pid 49763:tid 49790] [client 20.216.146.160:20542] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLS17THSOG_yf2PpqHNNwAAAdg"]
[Sat Feb 28 19:34:47.794775 2026] [:error] [pid 49763:tid 49778] [client 20.216.146.160:2685] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLS17THSOG_yf2PpqHNPwAAAcw"]
[Sat Feb 28 19:34:48.263326 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:12719] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLS2LTHSOG_yf2PpqHNRgAAAdI"]
[Sat Feb 28 19:34:48.736359 2026] [:error] [pid 52460:tid 52466] [client 20.216.146.160:24494] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLS2LLWOogAgHGh62Q1ZwAAAYM"]
[Sat Feb 28 19:34:49.214169 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:12682] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLS2bTHSOG_yf2PpqHNUAAAAcA"]
[Sat Feb 28 19:34:49.682989 2026] [:error] [pid 39184:tid 39233] [client 20.216.146.160:7675] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLS2VtZF9Zd_U7easCJ9gAAAE4"]
[Sat Feb 28 19:34:50.152699 2026] [:error] [pid 49763:tid 49780] [client 20.216.146.160:13506] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLS2rTHSOG_yf2PpqHNWQAAAc4"]
[Sat Feb 28 19:34:50.622499 2026] [:error] [pid 52460:tid 52472] [client 20.216.146.160:24493] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLS2rLWOogAgHGh62Q1agAAAYk"]
[Sat Feb 28 19:34:51.094016 2026] [:error] [pid 49763:tid 49777] [client 20.216.146.160:55485] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLS27THSOG_yf2PpqHNYQAAAcs"]
[Sat Feb 28 19:34:51.565405 2026] [:error] [pid 39183:tid 39193] [client 20.216.146.160:13525] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLS2xCf4HvhVePw3LbTcAAAAAE"]
[Sat Feb 28 19:34:52.035717 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:55447] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLS3LTHSOG_yf2PpqHNZgAAAdY"]
[Sat Feb 28 19:34:52.506194 2026] [:error] [pid 39183:tid 39198] [client 20.216.146.160:13560] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sc.php"] [unique_id "aaLS3BCf4HvhVePw3LbTeQAAAAY"]
[Sat Feb 28 19:34:52.975294 2026] [:error] [pid 39183:tid 39200] [client 20.216.146.160:55460] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sc.php"] [unique_id "aaLS3BCf4HvhVePw3LbTfQAAAAg"]
[Sat Feb 28 19:34:53.446160 2026] [:error] [pid 52460:tid 52487] [client 20.216.146.160:7627] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sc.php"] [unique_id "aaLS3bLWOogAgHGh62Q1dQAAAZg"]
[Sat Feb 28 19:34:53.920732 2026] [:error] [pid 39183:tid 39203] [client 20.216.146.160:16322] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sc.php"] [unique_id "aaLS3RCf4HvhVePw3LbTjAAAAAs"]
[Sat Feb 28 19:34:54.392965 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:16353] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLS3rLWOogAgHGh62Q1eQAAAYA"]
[Sat Feb 28 19:34:54.860833 2026] [:error] [pid 49763:tid 49787] [client 20.216.146.160:24480] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLS3rTHSOG_yf2PpqHNawAAAdU"]
[Sat Feb 28 19:34:55.330189 2026] [:error] [pid 49763:tid 49769] [client 20.216.146.160:13166] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLS37THSOG_yf2PpqHNcAAAAcM"]
[Sat Feb 28 19:34:55.801245 2026] [:error] [pid 39184:tid 39226] [client 20.216.146.160:18095] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLS31tZF9Zd_U7easCKKAAAAEc"]
[Sat Feb 28 19:34:56.277193 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:13510] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aaLS4BCf4HvhVePw3LbTngAAABU"]
[Sat Feb 28 19:34:56.746733 2026] [:error] [pid 39183:tid 39194] [client 20.216.146.160:55430] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aaLS4BCf4HvhVePw3LbTpgAAAAI"]
[Sat Feb 28 19:34:57.222108 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:7663] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aaLS4bTHSOG_yf2PpqHNgAAAAc0"]
[Sat Feb 28 19:34:57.691011 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:7651] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aaLS4bTHSOG_yf2PpqHNiAAAAdY"]
[Sat Feb 28 19:34:58.160076 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:55471] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aaLS4rTHSOG_yf2PpqHNkgAAAco"]
[Sat Feb 28 19:34:58.628897 2026] [:error] [pid 49763:tid 49781] [client 20.216.146.160:20482] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aaLS4rTHSOG_yf2PpqHNnQAAAc8"]
[Sat Feb 28 19:34:59.097008 2026] [:error] [pid 39184:tid 39236] [client 20.216.146.160:55470] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aaLS41tZF9Zd_U7easCKOAAAAFE"]
[Sat Feb 28 19:34:59.573479 2026] [:error] [pid 39184:tid 39241] [client 20.216.146.160:16361] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aaLS41tZF9Zd_U7easCKQQAAAFY"]
[Sat Feb 28 19:35:00.042546 2026] [:error] [pid 39184:tid 39219] [client 20.216.146.160:12708] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aaLS5FtZF9Zd_U7easCKSgAAAEA"]
[Sat Feb 28 19:35:00.519634 2026] [:error] [pid 39185:tid 39261] [client 20.216.146.160:16357] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aaLS5BVE-FfM89u7BQaK8wAAAI8"]
[Sat Feb 28 19:35:00.988980 2026] [:error] [pid 39184:tid 39224] [client 20.216.146.160:44807] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aaLS5FtZF9Zd_U7easCKUgAAAEU"]
[Sat Feb 28 19:35:01.466056 2026] [:error] [pid 39183:tid 39200] [client 20.216.146.160:20504] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aaLS5RCf4HvhVePw3LbTvgAAAAg"]
[Sat Feb 28 19:35:01.935487 2026] [:error] [pid 39184:tid 39239] [client 20.216.146.160:48893] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aaLS5VtZF9Zd_U7easCKWQAAAFQ"]
[Sat Feb 28 19:35:02.404152 2026] [:error] [pid 49763:tid 49782] [client 20.216.146.160:13523] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aaLS5rTHSOG_yf2PpqHNugAAAdA"]
[Sat Feb 28 19:35:02.874153 2026] [:error] [pid 52460:tid 52470] [client 20.216.146.160:7659] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aaLS5rLWOogAgHGh62Q1hwAAAYc"]
[Sat Feb 28 19:35:03.343934 2026] [:error] [pid 52460:tid 52474] [client 20.216.146.160:7637] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aaLS57LWOogAgHGh62Q1jgAAAYs"]
[Sat Feb 28 19:35:03.816309 2026] [:error] [pid 22194:tid 22214] [client 20.216.146.160:20509] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aaLS536mbajs3bzQGyuQgAAAAVI"]
[Sat Feb 28 19:35:04.290237 2026] [:error] [pid 39292:tid 39315] [client 20.216.146.160:55462] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aaLS6KIAO5fN7BxyqcFZ1gAAANU"]
[Sat Feb 28 19:35:04.761933 2026] [:error] [pid 39184:tid 39219] [client 20.216.146.160:4279] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aaLS6FtZF9Zd_U7easCKaAAAAEA"]
[Sat Feb 28 19:35:05.232205 2026] [:error] [pid 39184:tid 39241] [client 20.216.146.160:18105] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aaLS6VtZF9Zd_U7easCKcQAAAFY"]
[Sat Feb 28 19:35:05.702637 2026] [:error] [pid 52460:tid 52479] [client 20.216.146.160:13509] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aa.php"] [unique_id "aaLS6bLWOogAgHGh62Q1lQAAAZA"]
[Sat Feb 28 19:35:41.469402 2026] [:error] [pid 39183:tid 39192] [client 20.216.146.160:21484] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xqq.php"] [unique_id "aaLTDRCf4HvhVePw3LbUwQAAAAA"]
[Sat Feb 28 19:35:41.937854 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:54134] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xqq.php"] [unique_id "aaLTDbTHSOG_yf2PpqHO2gAAAdE"]
[Sat Feb 28 19:35:42.407588 2026] [:error] [pid 49763:tid 49770] [client 20.216.146.160:24445] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xqq.php"] [unique_id "aaLTDrTHSOG_yf2PpqHO4gAAAcQ"]
[Sat Feb 28 19:35:42.877758 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:12957] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xqq.php"] [unique_id "aaLTDrTHSOG_yf2PpqHO6QAAAdc"]
[Sat Feb 28 19:35:43.347496 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:7930] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLTD7THSOG_yf2PpqHO9QAAAdI"]
[Sat Feb 28 19:35:43.819324 2026] [:error] [pid 39184:tid 39222] [client 20.216.146.160:14733] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLTD1tZF9Zd_U7easCK1gAAAEM"]
[Sat Feb 28 19:35:44.288670 2026] [:error] [pid 39183:tid 39210] [client 20.216.146.160:7916] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLTEBCf4HvhVePw3LbUwwAAABI"]
[Sat Feb 28 19:35:44.759826 2026] [:error] [pid 39292:tid 39307] [client 20.216.146.160:7892] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLTEKIAO5fN7BxyqcFZ-QAAAM0"]
[Sat Feb 28 19:35:45.230340 2026] [:error] [pid 39184:tid 39241] [client 20.216.146.160:55385] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a.php"] [unique_id "aaLTEVtZF9Zd_U7easCK3QAAAFY"]
[Sat Feb 28 19:35:45.699625 2026] [:error] [pid 52460:tid 52487] [client 20.216.146.160:12940] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a.php"] [unique_id "aaLTEbLWOogAgHGh62Q2eQAAAZg"]
[Sat Feb 28 19:35:46.168013 2026] [:error] [pid 39292:tid 39315] [client 20.216.146.160:14740] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a.php"] [unique_id "aaLTEqIAO5fN7BxyqcFZ-gAAANU"]
[Sat Feb 28 19:35:46.636570 2026] [:error] [pid 39184:tid 39225] [client 20.216.146.160:35146] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a.php"] [unique_id "aaLTEltZF9Zd_U7easCK4QAAAEY"]
[Sat Feb 28 19:35:47.106373 2026] [:error] [pid 49763:tid 49787] [client 20.216.146.160:24411] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/06.php"] [unique_id "aaLTE7THSOG_yf2PpqHPGAAAAdU"]
[Sat Feb 28 19:35:47.574552 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:54111] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/06.php"] [unique_id "aaLTE7THSOG_yf2PpqHPHgAAAcA"]
[Sat Feb 28 19:35:48.044310 2026] [:error] [pid 52460:tid 52487] [client 20.216.146.160:35193] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/06.php"] [unique_id "aaLTFLLWOogAgHGh62Q2iQAAAZg"]
[Sat Feb 28 19:35:48.513710 2026] [:error] [pid 39183:tid 39198] [client 20.216.146.160:13375] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/06.php"] [unique_id "aaLTFBCf4HvhVePw3LbU0wAAAAY"]
[Sat Feb 28 19:35:48.983399 2026] [:error] [pid 49763:tid 49769] [client 20.216.146.160:32350] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "aaLTFLTHSOG_yf2PpqHPKwAAAcM"]
[Sat Feb 28 19:35:49.452331 2026] [:error] [pid 39183:tid 39193] [client 20.216.146.160:46554] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "aaLTFRCf4HvhVePw3LbU3QAAAAE"]
[Sat Feb 28 19:35:49.925354 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:12982] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "aaLTFbTHSOG_yf2PpqHPLwAAAdI"]
[Sat Feb 28 19:35:50.394657 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:32331] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "aaLTFhCf4HvhVePw3LbU5QAAABU"]
[Sat Feb 28 19:35:50.866184 2026] [:error] [pid 49763:tid 49767] [client 20.216.146.160:14764] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aaLTFrTHSOG_yf2PpqHPNQAAAcE"]
[Sat Feb 28 19:35:51.335313 2026] [:error] [pid 39183:tid 39201] [client 20.216.146.160:12944] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aaLTFxCf4HvhVePw3LbU7AAAAAk"]
[Sat Feb 28 19:35:51.804843 2026] [:error] [pid 39292:tid 39309] [client 20.216.146.160:7663] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aaLTF6IAO5fN7BxyqcFZ_wAAAM8"]
[Sat Feb 28 19:35:52.274785 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:24416] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aaLTGLLWOogAgHGh62Q2pQAAAYA"]
[Sat Feb 28 19:35:52.747877 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:35166] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLTGLTHSOG_yf2PpqHPQAAAAcY"]
[Sat Feb 28 19:35:53.219793 2026] [:error] [pid 39292:tid 39310] [client 20.216.146.160:32377] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLTGaIAO5fN7BxyqcFaBwAAANA"]
[Sat Feb 28 19:35:53.689240 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:12974] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLTGbTHSOG_yf2PpqHPRwAAAdE"]
[Sat Feb 28 19:35:54.158551 2026] [:error] [pid 49763:tid 49773] [client 20.216.146.160:12934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLTGrTHSOG_yf2PpqHPSwAAAcc"]
[Sat Feb 28 19:35:54.636095 2026] [:error] [pid 49763:tid 49786] [client 20.216.146.160:25162] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLTGrTHSOG_yf2PpqHPUQAAAdQ"]
[Sat Feb 28 19:35:55.106627 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:46560] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLTG7THSOG_yf2PpqHPVgAAAcA"]
[Sat Feb 28 19:35:55.587357 2026] [:error] [pid 39184:tid 39220] [client 20.216.146.160:46569] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLTG1tZF9Zd_U7easCK6QAAAEE"]
[Sat Feb 28 19:35:56.057145 2026] [:error] [pid 39183:tid 39206] [client 20.216.146.160:12945] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLTHBCf4HvhVePw3LbU9QAAAA4"]
[Sat Feb 28 19:35:56.527794 2026] [:error] [pid 39184:tid 39241] [client 20.216.146.160:25152] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLTHFtZF9Zd_U7easCK7QAAAFY"]
[Sat Feb 28 19:35:57.003342 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:24414] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLTHbTHSOG_yf2PpqHPYAAAAc0"]
[Sat Feb 28 19:35:57.475002 2026] [:error] [pid 39183:tid 39205] [client 20.216.146.160:13334] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLTHRCf4HvhVePw3LbU_QAAAA0"]
[Sat Feb 28 19:35:57.944404 2026] [:error] [pid 11791:tid 11808] [client 20.216.146.160:54081] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLTHWuX5e1Q32gqxH2qAAAAAQ8"]
[Sat Feb 28 19:35:58.414968 2026] [:error] [pid 52460:tid 52469] [client 20.216.146.160:54080] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aaLTHrLWOogAgHGh62Q2ygAAAYY"]
[Sat Feb 28 19:35:58.883109 2026] [:error] [pid 39183:tid 39194] [client 20.216.146.160:24401] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aaLTHhCf4HvhVePw3LbVAwAAAAI"]
[Sat Feb 28 19:35:59.355338 2026] [:error] [pid 39292:tid 39299] [client 20.216.146.160:35178] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aaLTH6IAO5fN7BxyqcFaDAAAAMU"]
[Sat Feb 28 19:35:59.824436 2026] [:error] [pid 52460:tid 52472] [client 20.216.146.160:25194] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x.php"] [unique_id "aaLTH7LWOogAgHGh62Q21AAAAYk"]
[Sat Feb 28 19:36:00.294473 2026] [:error] [pid 52460:tid 52466] [client 20.216.146.160:12731] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms.php"] [unique_id "aaLTILLWOogAgHGh62Q22QAAAYM"]
[Sat Feb 28 19:36:00.764134 2026] [:error] [pid 52460:tid 52486] [client 20.216.146.160:12987] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms.php"] [unique_id "aaLTILLWOogAgHGh62Q23QAAAZc"]
[Sat Feb 28 19:36:01.233839 2026] [:error] [pid 49763:tid 49777] [client 20.216.146.160:32341] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms.php"] [unique_id "aaLTIbTHSOG_yf2PpqHPdgAAAcs"]
[Sat Feb 28 19:36:01.704384 2026] [:error] [pid 49763:tid 49775] [client 20.216.146.160:4900] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms.php"] [unique_id "aaLTIbTHSOG_yf2PpqHPfQAAAck"]
[Sat Feb 28 19:36:02.174466 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:12956] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLTIrTHSOG_yf2PpqHPiAAAAco"]
[Sat Feb 28 19:36:02.646542 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:10064] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLTIrTHSOG_yf2PpqHPjQAAAdI"]
[Sat Feb 28 19:36:03.116622 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:25174] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLTI7THSOG_yf2PpqHPjwAAAcA"]
[Sat Feb 28 19:36:03.585766 2026] [:error] [pid 39183:tid 39197] [client 20.216.146.160:13368] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLTIxCf4HvhVePw3LbVCAAAAAU"]
[Sat Feb 28 19:36:04.054748 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:25159] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLTJLTHSOG_yf2PpqHPlwAAAdI"]
[Sat Feb 28 19:36:04.523637 2026] [:error] [pid 39183:tid 39193] [client 20.216.146.160:13343] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLTJBCf4HvhVePw3LbVEgAAAAE"]
[Sat Feb 28 19:36:04.992926 2026] [:error] [pid 39183:tid 39212] [client 20.216.146.160:10061] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLTJBCf4HvhVePw3LbVGwAAABQ"]
[Sat Feb 28 19:36:05.462027 2026] [:error] [pid 39183:tid 39216] [client 20.216.146.160:10052] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wdf.php"] [unique_id "aaLTJRCf4HvhVePw3LbVHgAAABg"]
[Sat Feb 28 19:36:05.931918 2026] [:error] [pid 39183:tid 39194] [client 20.216.146.160:12936] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "aaLTJRCf4HvhVePw3LbVIAAAAAI"]
[Sat Feb 28 19:36:06.401348 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:13347] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "aaLTJrTHSOG_yf2PpqHPuAAAAdI"]
[Sat Feb 28 19:36:06.871320 2026] [:error] [pid 49763:tid 49787] [client 20.216.146.160:12988] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "aaLTJrTHSOG_yf2PpqHPwQAAAdU"]
[Sat Feb 28 19:36:07.342233 2026] [:error] [pid 52460:tid 52470] [client 20.216.146.160:10108] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "aaLTJ7LWOogAgHGh62Q28AAAAYc"]
[Sat Feb 28 19:36:07.815274 2026] [:error] [pid 52460:tid 52472] [client 20.216.146.160:25194] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aaLTJ7LWOogAgHGh62Q2-AAAAYk"]
[Sat Feb 28 19:36:08.288205 2026] [:error] [pid 39184:tid 39233] [client 20.216.146.160:55412] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aaLTKFtZF9Zd_U7easCLBwAAAE4"]
[Sat Feb 28 19:36:08.756938 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:12942] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aaLTKLTHSOG_yf2PpqHP1QAAAdE"]
[Sat Feb 28 19:36:09.231017 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:32375] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aaLTKbLWOogAgHGh62Q3AwAAAYA"]
[Sat Feb 28 19:36:09.700323 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:25163] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x/"] [unique_id "aaLTKbTHSOG_yf2PpqHP4QAAAdY"]
[Sat Feb 28 19:36:10.170731 2026] [:error] [pid 39183:tid 39214] [client 20.216.146.160:12189] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x/"] [unique_id "aaLTKhCf4HvhVePw3LbVKAAAABY"]
[Sat Feb 28 19:36:10.649644 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:12211] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x/"] [unique_id "aaLTKrLWOogAgHGh62Q3EQAAAYA"]
[Sat Feb 28 19:36:11.120409 2026] [:error] [pid 39184:tid 39226] [client 20.216.146.160:33212] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x/"] [unique_id "aaLTK1tZF9Zd_U7easCLDgAAAEc"]
[Sat Feb 28 19:36:11.589468 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:25170] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aaLTK7THSOG_yf2PpqHP8wAAAcA"]
[Sat Feb 28 19:36:12.068154 2026] [:error] [pid 39183:tid 39212] [client 20.216.146.160:33156] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aaLTLBCf4HvhVePw3LbVNAAAABQ"]
[Sat Feb 28 19:36:12.538677 2026] [:error] [pid 39292:tid 39297] [client 20.216.146.160:12961] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aaLTLKIAO5fN7BxyqcFaFgAAAMM"]
[Sat Feb 28 19:36:13.008428 2026] [:error] [pid 39183:tid 39210] [client 20.216.146.160:14727] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aaLTLRCf4HvhVePw3LbVNQAAABI"]
[Sat Feb 28 19:36:13.477032 2026] [:error] [pid 11791:tid 11800] [client 20.216.146.160:24389] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "aaLTLWuX5e1Q32gqxH2qBwAAAQc"]
[Sat Feb 28 19:36:13.946478 2026] [:error] [pid 52460:tid 52465] [client 20.216.146.160:33179] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "aaLTLbLWOogAgHGh62Q3GAAAAYI"]
[Sat Feb 28 19:36:14.415699 2026] [:error] [pid 52460:tid 52482] [client 20.216.146.160:46574] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "aaLTLrLWOogAgHGh62Q3GwAAAZM"]
[Sat Feb 28 19:36:14.885408 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:14720] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "aaLTLrTHSOG_yf2PpqHQFwAAAdE"]
[Sat Feb 28 19:36:15.363321 2026] [:error] [pid 39183:tid 39207] [client 20.216.146.160:12962] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLTLxCf4HvhVePw3LbVPAAAAA8"]
[Sat Feb 28 19:36:15.838812 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:46531] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLTLxCf4HvhVePw3LbVPgAAABU"]
[Sat Feb 28 19:36:16.309512 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:10057] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLTMLTHSOG_yf2PpqHQKwAAAdI"]
[Sat Feb 28 19:36:16.778888 2026] [:error] [pid 39183:tid 39196] [client 20.216.146.160:12964] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLTMBCf4HvhVePw3LbVQQAAAAQ"]
[Sat Feb 28 19:36:17.247842 2026] [:error] [pid 52460:tid 52471] [client 20.216.146.160:4890] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aaLTMbLWOogAgHGh62Q3JAAAAYg"]
[Sat Feb 28 19:36:17.717045 2026] [:error] [pid 52460:tid 52481] [client 20.216.146.160:12202] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aaLTMbLWOogAgHGh62Q3JQAAAZI"]
[Sat Feb 28 19:36:18.186125 2026] [:error] [pid 49763:tid 49790] [client 20.216.146.160:32327] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aaLTMrTHSOG_yf2PpqHQPQAAAdg"]
[Sat Feb 28 19:36:18.655494 2026] [:error] [pid 49763:tid 49778] [client 20.216.146.160:10058] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/166.php"] [unique_id "aaLTMrTHSOG_yf2PpqHQQQAAAcw"]
[Sat Feb 28 19:36:19.124979 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:4876] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLTM7THSOG_yf2PpqHQRwAAAc0"]
[Sat Feb 28 19:36:19.594308 2026] [:error] [pid 39185:tid 39266] [client 20.216.146.160:33194] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLTMxVE-FfM89u7BQaLMwAAAJQ"]
[Sat Feb 28 19:36:20.063132 2026] [:error] [pid 39183:tid 39205] [client 20.216.146.160:42344] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLTNBCf4HvhVePw3LbVUgAAAA0"]
[Sat Feb 28 19:36:20.531427 2026] [:error] [pid 39183:tid 39204] [client 20.216.146.160:10688] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fleen.php"] [unique_id "aaLTNBCf4HvhVePw3LbVVQAAAAw"]
[Sat Feb 28 19:36:20.999933 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:4920] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLTNLTHSOG_yf2PpqHQWQAAAcY"]
[Sat Feb 28 19:36:21.482289 2026] [:error] [pid 49763:tid 49780] [client 20.216.146.160:4894] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLTNbTHSOG_yf2PpqHQXwAAAc4"]
[Sat Feb 28 19:36:21.955130 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:10073] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLTNbTHSOG_yf2PpqHQZwAAAdc"]
[Sat Feb 28 19:36:22.423624 2026] [:error] [pid 11791:tid 11810] [client 20.216.146.160:12180] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLTNmuX5e1Q32gqxH2qCQAAARE"]
[Sat Feb 28 19:36:22.897471 2026] [:error] [pid 39292:tid 39299] [client 20.216.146.160:12191] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTNqIAO5fN7BxyqcFaHgAAAMU"]
[Sat Feb 28 19:36:23.371686 2026] [:error] [pid 49763:tid 49767] [client 20.216.146.160:12223] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTN7THSOG_yf2PpqHQdAAAAcE"]
[Sat Feb 28 19:36:23.841381 2026] [:error] [pid 39183:tid 39202] [client 20.216.146.160:12176] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTNxCf4HvhVePw3LbVagAAAAo"]
[Sat Feb 28 19:36:24.310565 2026] [:error] [pid 39183:tid 39198] [client 20.216.146.160:42341] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTOBCf4HvhVePw3LbVbQAAAAY"]
[Sat Feb 28 19:36:24.779893 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:33163] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aaLTOLTHSOG_yf2PpqHQhwAAAdc"]
[Sat Feb 28 19:36:25.248779 2026] [:error] [pid 52460:tid 52480] [client 20.216.146.160:33180] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aaLTObLWOogAgHGh62Q3LwAAAZE"]
[Sat Feb 28 19:36:25.716613 2026] [:error] [pid 39185:tid 39268] [client 20.216.146.160:25184] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aaLTORVE-FfM89u7BQaLPAAAAJY"]
[Sat Feb 28 19:36:26.186517 2026] [:error] [pid 52460:tid 52469] [client 20.216.146.160:13323] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aaLTOrLWOogAgHGh62Q3MAAAAYY"]
[Sat Feb 28 19:36:26.656987 2026] [:error] [pid 39184:tid 39231] [client 20.216.146.160:7879] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aaLTOltZF9Zd_U7easCLJQAAAEw"]
[Sat Feb 28 19:36:27.126064 2026] [:error] [pid 11791:tid 11809] [client 20.216.146.160:33173] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aaLTO2uX5e1Q32gqxH2qDQAAARA"]
[Sat Feb 28 19:36:27.593737 2026] [:error] [pid 49763:tid 49782] [client 20.216.146.160:42311] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aaLTO7THSOG_yf2PpqHQowAAAdA"]
[Sat Feb 28 19:36:28.062859 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:33215] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aaLTPLTHSOG_yf2PpqHQqwAAAdc"]
[Sat Feb 28 19:36:28.532767 2026] [:error] [pid 49763:tid 49781] [client 20.216.146.160:25161] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTPLTHSOG_yf2PpqHQsAAAAc8"]
[Sat Feb 28 19:36:29.001265 2026] [:error] [pid 49763:tid 49775] [client 20.216.146.160:12188] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTPbTHSOG_yf2PpqHQuQAAAck"]
[Sat Feb 28 19:36:29.480475 2026] [:error] [pid 49763:tid 49774] [client 20.216.146.160:6550] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTPbTHSOG_yf2PpqHQwAAAAcg"]
[Sat Feb 28 19:36:29.949809 2026] [:error] [pid 49763:tid 49767] [client 20.216.146.160:6570] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aaLTPbTHSOG_yf2PpqHQygAAAcE"]
[Sat Feb 28 19:36:30.419606 2026] [:error] [pid 52460:tid 52475] [client 20.216.146.160:12203] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aaLTPrLWOogAgHGh62Q3OAAAAYw"]
[Sat Feb 28 19:36:30.889417 2026] [:error] [pid 39183:tid 39196] [client 20.216.146.160:10074] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aaLTPhCf4HvhVePw3LbVlgAAAAQ"]
[Sat Feb 28 19:36:31.358452 2026] [:error] [pid 39183:tid 39215] [client 20.216.146.160:33163] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aaLTPxCf4HvhVePw3LbVlwAAABc"]
[Sat Feb 28 19:36:31.827197 2026] [:error] [pid 52460:tid 52470] [client 20.216.146.160:25198] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aaLTP7LWOogAgHGh62Q3PwAAAYc"]
[Sat Feb 28 19:36:32.297256 2026] [:error] [pid 49763:tid 49781] [client 20.216.146.160:10066] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plugins.php"] [unique_id "aaLTQLTHSOG_yf2PpqHQ4wAAAc8"]
[Sat Feb 28 19:36:32.766813 2026] [:error] [pid 49763:tid 49790] [client 20.216.146.160:12969] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plugins.php"] [unique_id "aaLTQLTHSOG_yf2PpqHQ6wAAAdg"]
[Sat Feb 28 19:36:33.238473 2026] [:error] [pid 49763:tid 49780] [client 20.216.146.160:10696] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plugins.php"] [unique_id "aaLTQbTHSOG_yf2PpqHQ8AAAAc4"]
[Sat Feb 28 19:36:33.708312 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:4921] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/plugins.php"] [unique_id "aaLTQbTHSOG_yf2PpqHQ-QAAAdc"]
[Sat Feb 28 19:36:34.177706 2026] [:error] [pid 49763:tid 49768] [client 20.216.146.160:6569] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLTQrTHSOG_yf2PpqHRAAAAAcI"]
[Sat Feb 28 19:36:34.646852 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:24123] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLTQrTHSOG_yf2PpqHRBgAAAdI"]
[Sat Feb 28 19:36:35.117439 2026] [:error] [pid 39184:tid 39223] [client 20.216.146.160:6575] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLTQ1tZF9Zd_U7easCLLAAAAEQ"]
[Sat Feb 28 19:36:35.587674 2026] [:error] [pid 49763:tid 49781] [client 20.216.146.160:2434] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLTQ7THSOG_yf2PpqHRDgAAAc8"]
[Sat Feb 28 19:36:36.061252 2026] [:error] [pid 39184:tid 39237] [client 20.216.146.160:42360] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLTRFtZF9Zd_U7easCLMAAAAFI"]
[Sat Feb 28 19:36:36.531004 2026] [:error] [pid 11791:tid 11795] [client 20.216.146.160:33158] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLTRGuX5e1Q32gqxH2qFwAAAQI"]
[Sat Feb 28 19:36:37.003158 2026] [:error] [pid 11791:tid 11810] [client 20.216.146.160:10743] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLTRWuX5e1Q32gqxH2qGQAAARE"]
[Sat Feb 28 19:36:37.472812 2026] [:error] [pid 39183:tid 39208] [client 20.216.146.160:4865] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLTRRCf4HvhVePw3LbVrgAAABA"]
[Sat Feb 28 19:36:37.942919 2026] [:error] [pid 39292:tid 39312] [client 20.216.146.160:33202] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "aaLTRaIAO5fN7BxyqcFaIwAAANI"]
[Sat Feb 28 19:37:11.864073 2026] [autoindex:error] [pid 49763:tid 49773] [client 20.216.146.160:10736] AH01276: Cannot serve directory /home/end2endh/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Feb 28 19:37:14.883684 2026] [:error] [pid 49763:tid 49773] [client 20.216.146.160:32343] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLTarTHSOG_yf2PpqHSTAAAAcc"]
[Sat Feb 28 19:37:15.357278 2026] [:error] [pid 52460:tid 52478] [client 20.216.146.160:10746] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLTa7LWOogAgHGh62Q3mwAAAY8"]
[Sat Feb 28 19:37:15.827043 2026] [:error] [pid 39184:tid 39226] [client 20.216.146.160:17024] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLTa1tZF9Zd_U7easCLmAAAAEc"]
[Sat Feb 28 19:37:16.298051 2026] [:error] [pid 39183:tid 39197] [client 20.216.146.160:10081] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLTbBCf4HvhVePw3LbWPAAAAAU"]
[Sat Feb 28 19:37:16.768918 2026] [:error] [pid 39183:tid 39202] [client 20.216.146.160:6586] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aaLTbBCf4HvhVePw3LbWQgAAAAo"]
[Sat Feb 28 19:37:17.237664 2026] [:error] [pid 49763:tid 49778] [client 20.216.146.160:12205] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aaLTbbTHSOG_yf2PpqHSXgAAAcw"]
[Sat Feb 28 19:37:17.707013 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:25202] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aaLTbbTHSOG_yf2PpqHSZAAAAdI"]
[Sat Feb 28 19:37:18.175932 2026] [:error] [pid 49763:tid 49768] [client 20.216.146.160:32952] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aaLTbrTHSOG_yf2PpqHSaAAAAcI"]
[Sat Feb 28 19:37:18.656619 2026] [:error] [pid 39183:tid 39197] [client 20.216.146.160:6540] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLTbhCf4HvhVePw3LbWTAAAAAU"]
[Sat Feb 28 19:37:19.127507 2026] [:error] [pid 39185:tid 39270] [client 20.216.146.160:32908] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLTbxVE-FfM89u7BQaLbwAAAJg"]
[Sat Feb 28 19:37:19.604656 2026] [:error] [pid 39292:tid 39314] [client 20.216.146.160:21160] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLTb6IAO5fN7BxyqcFaRgAAANQ"]
[Sat Feb 28 19:37:20.073828 2026] [:error] [pid 39184:tid 39231] [client 20.216.146.160:10731] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLTcFtZF9Zd_U7easCLngAAAEw"]
[Sat Feb 28 19:37:20.543547 2026] [:error] [pid 52460:tid 52487] [client 20.216.146.160:10691] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w4.php"] [unique_id "aaLTcLLWOogAgHGh62Q3pgAAAZg"]
[Sat Feb 28 19:37:21.015517 2026] [:error] [pid 52460:tid 52475] [client 20.216.146.160:33193] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w4.php"] [unique_id "aaLTcbLWOogAgHGh62Q3qQAAAYw"]
[Sat Feb 28 19:37:21.486034 2026] [:error] [pid 52460:tid 52471] [client 20.216.146.160:42331] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w4.php"] [unique_id "aaLTcbLWOogAgHGh62Q3rgAAAYg"]
[Sat Feb 28 19:37:21.957350 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:25206] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w4.php"] [unique_id "aaLTcRCf4HvhVePw3LbWWgAAABU"]
[Sat Feb 28 19:37:22.426906 2026] [:error] [pid 39183:tid 39214] [client 20.216.146.160:32942] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLTchCf4HvhVePw3LbWXgAAABY"]
[Sat Feb 28 19:37:22.895504 2026] [:error] [pid 49763:tid 49769] [client 20.216.146.160:32916] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLTcrTHSOG_yf2PpqHSdQAAAcM"]
[Sat Feb 28 19:37:23.364985 2026] [:error] [pid 39183:tid 39205] [client 20.216.146.160:32924] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLTcxCf4HvhVePw3LbWZQAAAA0"]
[Sat Feb 28 19:37:23.833369 2026] [:error] [pid 49763:tid 49780] [client 20.216.146.160:42323] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLTc7THSOG_yf2PpqHSegAAAc4"]
[Sat Feb 28 19:37:24.302525 2026] [:error] [pid 39183:tid 39194] [client 20.216.146.160:13343] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "aaLTdBCf4HvhVePw3LbWaQAAAAI"]
[Sat Feb 28 19:37:24.773284 2026] [:error] [pid 52460:tid 52486] [client 20.216.146.160:32902] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "aaLTdLLWOogAgHGh62Q3vAAAAZc"]
[Sat Feb 28 19:37:25.241922 2026] [:error] [pid 52460:tid 52471] [client 20.216.146.160:32912] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "aaLTdbLWOogAgHGh62Q3vwAAAYg"]
[Sat Feb 28 19:37:25.712145 2026] [:error] [pid 39185:tid 39246] [client 20.216.146.160:55351] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "aaLTdRVE-FfM89u7BQaLdgAAAIA"]
[Sat Feb 28 19:37:26.181563 2026] [:error] [pid 39292:tid 39310] [client 20.216.146.160:10751] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aaLTdqIAO5fN7BxyqcFaSgAAANA"]
[Sat Feb 28 19:37:26.649794 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:10703] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aaLTdrTHSOG_yf2PpqHSiAAAAdc"]
[Sat Feb 28 19:37:27.119778 2026] [:error] [pid 39292:tid 39304] [client 20.216.146.160:55306] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aaLTd6IAO5fN7BxyqcFaTAAAAMo"]
[Sat Feb 28 19:37:27.589922 2026] [:error] [pid 11791:tid 11805] [client 20.216.146.160:21125] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aaLTd2uX5e1Q32gqxH2qQAAAAQw"]
[Sat Feb 28 19:37:28.059580 2026] [:error] [pid 49763:tid 49768] [client 20.216.146.160:42365] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tymn.php"] [unique_id "aaLTeLTHSOG_yf2PpqHSjwAAAcI"]
[Sat Feb 28 19:37:28.536114 2026] [:error] [pid 49763:tid 49779] [client 20.216.146.160:12217] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tymn.php"] [unique_id "aaLTeLTHSOG_yf2PpqHSkQAAAc0"]
[Sat Feb 28 19:37:29.007921 2026] [:error] [pid 49763:tid 49775] [client 20.216.146.160:10727] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tymn.php"] [unique_id "aaLTebTHSOG_yf2PpqHSlgAAAck"]
[Sat Feb 28 19:37:29.485104 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:6562] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tymn.php"] [unique_id "aaLTebTHSOG_yf2PpqHSnAAAAco"]
[Sat Feb 28 19:37:29.954468 2026] [:error] [pid 52460:tid 52470] [client 20.216.146.160:10086] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bak.php"] [unique_id "aaLTebLWOogAgHGh62Q31QAAAYc"]
[Sat Feb 28 19:37:30.425121 2026] [:error] [pid 49763:tid 49788] [client 20.216.146.160:4870] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bak.php"] [unique_id "aaLTerTHSOG_yf2PpqHSqwAAAdY"]
[Sat Feb 28 19:37:30.894625 2026] [:error] [pid 52460:tid 52487] [client 20.216.146.160:32942] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bak.php"] [unique_id "aaLTerLWOogAgHGh62Q31gAAAZg"]
[Sat Feb 28 19:37:31.363299 2026] [:error] [pid 39184:tid 39240] [client 20.216.146.160:12179] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bak.php"] [unique_id "aaLTe1tZF9Zd_U7easCLrAAAAFU"]
[Sat Feb 28 19:37:31.831879 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:25189] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLTe7THSOG_yf2PpqHSvwAAAdM"]
[Sat Feb 28 19:37:32.301997 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:12199] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLTfLTHSOG_yf2PpqHSxQAAAcA"]
[Sat Feb 28 19:37:32.772409 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:10726] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLTfLTHSOG_yf2PpqHSzQAAAdM"]
[Sat Feb 28 19:37:33.241460 2026] [:error] [pid 49763:tid 49786] [client 20.216.146.160:10722] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLTfbTHSOG_yf2PpqHS0wAAAdQ"]
[Sat Feb 28 19:37:33.710014 2026] [:error] [pid 39185:tid 39259] [client 20.216.146.160:32325] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aaLTfRVE-FfM89u7BQaLggAAAI0"]
[Sat Feb 28 19:37:34.184369 2026] [:error] [pid 22194:tid 22216] [client 20.216.146.160:10100] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aaLTfn6mbajs3bzQGyuQngAAAVQ"]
[Sat Feb 28 19:37:34.655005 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:4883] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aaLTfrTHSOG_yf2PpqHS2gAAAco"]
[Sat Feb 28 19:37:35.123863 2026] [:error] [pid 39183:tid 39204] [client 20.216.146.160:33195] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aaLTfxCf4HvhVePw3LbWcwAAAAw"]
[Sat Feb 28 19:37:35.594513 2026] [:error] [pid 39185:tid 39262] [client 20.216.146.160:25209] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aaLTfxVE-FfM89u7BQaLhwAAAJA"]
[Sat Feb 28 19:37:36.065330 2026] [:error] [pid 52460:tid 52479] [client 20.216.146.160:14728] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aaLTgLLWOogAgHGh62Q34QAAAZA"]
[Sat Feb 28 19:37:36.534277 2026] [:error] [pid 39183:tid 39207] [client 20.216.146.160:13509] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aaLTgBCf4HvhVePw3LbWegAAAA8"]
[Sat Feb 28 19:37:37.004574 2026] [:error] [pid 39292:tid 39318] [client 20.216.146.160:13361] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aaLTgaIAO5fN7BxyqcFaTwAAANg"]
[Sat Feb 28 19:37:37.475159 2026] [:error] [pid 39292:tid 39307] [client 20.216.146.160:35169] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLTgaIAO5fN7BxyqcFaUAAAAM0"]
[Sat Feb 28 19:37:37.945024 2026] [:error] [pid 39292:tid 39315] [client 20.216.146.160:46568] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLTgaIAO5fN7BxyqcFaUQAAANU"]
[Sat Feb 28 19:37:38.413073 2026] [:error] [pid 49763:tid 49783] [client 20.216.146.160:12967] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLTgrTHSOG_yf2PpqHS4QAAAdE"]
[Sat Feb 28 19:37:38.882660 2026] [:error] [pid 22194:tid 22215] [client 20.216.146.160:32321] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLTgn6mbajs3bzQGyuQpwAAAVM"]
[Sat Feb 28 19:37:39.352035 2026] [:error] [pid 22194:tid 22205] [client 20.216.146.160:35168] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aaLTg36mbajs3bzQGyuQqAAAAUk"]
[Sat Feb 28 19:37:39.825676 2026] [:error] [pid 52460:tid 52483] [client 20.216.146.160:46586] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aaLTg7LWOogAgHGh62Q35gAAAZQ"]
[Sat Feb 28 19:37:40.294268 2026] [:error] [pid 11791:tid 11802] [client 20.216.146.160:14916] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aaLThGuX5e1Q32gqxH2qSgAAAQk"]
[Sat Feb 28 19:37:40.765332 2026] [:error] [pid 52460:tid 52474] [client 20.216.146.160:25167] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aaLThLLWOogAgHGh62Q36gAAAYs"]
[Sat Feb 28 19:37:41.235985 2026] [:error] [pid 11791:tid 11816] [client 20.216.146.160:32359] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aaLThWuX5e1Q32gqxH2qTQAAARc"]
[Sat Feb 28 19:37:41.705329 2026] [:error] [pid 39183:tid 39204] [client 20.216.146.160:32358] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aaLThRCf4HvhVePw3LbWkQAAAAw"]
[Sat Feb 28 19:37:42.174316 2026] [:error] [pid 52460:tid 52464] [client 20.216.146.160:46556] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aaLThrLWOogAgHGh62Q39gAAAYE"]
[Sat Feb 28 19:37:42.643403 2026] [:error] [pid 39292:tid 39309] [client 20.216.146.160:46549] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aaLThqIAO5fN7BxyqcFaVwAAAM8"]
[Sat Feb 28 19:37:43.114379 2026] [:error] [pid 39183:tid 39202] [client 20.216.146.160:13339] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aaLThxCf4HvhVePw3LbWmwAAAAo"]
[Sat Feb 28 19:37:43.584202 2026] [:error] [pid 39184:tid 39232] [client 20.216.146.160:55387] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aaLTh1tZF9Zd_U7easCLvgAAAE0"]
[Sat Feb 28 19:37:44.053659 2026] [:error] [pid 39183:tid 39197] [client 20.216.146.160:14756] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aaLTiBCf4HvhVePw3LbWngAAAAU"]
[Sat Feb 28 19:37:44.523639 2026] [:error] [pid 39183:tid 39215] [client 20.216.146.160:55403] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/init.php"] [unique_id "aaLTiBCf4HvhVePw3LbWoQAAABc"]
[Sat Feb 28 19:37:44.993747 2026] [:error] [pid 39183:tid 39203] [client 20.216.146.160:55406] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aaLTiBCf4HvhVePw3LbWpAAAAAs"]
[Sat Feb 28 19:37:45.463034 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:24440] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aaLTibTHSOG_yf2PpqHS6QAAAdM"]
[Sat Feb 28 19:37:45.932693 2026] [:error] [pid 49763:tid 49786] [client 20.216.146.160:14737] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aaLTibTHSOG_yf2PpqHS6wAAAdQ"]
[Sat Feb 28 19:37:46.404315 2026] [:error] [pid 49763:tid 49781] [client 20.216.146.160:54112] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aaLTirTHSOG_yf2PpqHS7QAAAc8"]
[Sat Feb 28 19:37:46.874512 2026] [:error] [pid 39183:tid 39208] [client 20.216.146.160:55423] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aaLTihCf4HvhVePw3LbWtQAAABA"]
[Sat Feb 28 19:37:47.346220 2026] [:error] [pid 39184:tid 39243] [client 20.216.146.160:54109] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aaLTi1tZF9Zd_U7easCLwwAAAFg"]
[Sat Feb 28 19:37:47.817121 2026] [:error] [pid 49763:tid 49787] [client 20.216.146.160:24387] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aaLTi7THSOG_yf2PpqHS8QAAAdU"]
[Sat Feb 28 19:37:48.286466 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:14724] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aaLTjLTHSOG_yf2PpqHS-AAAAcY"]
[Sat Feb 28 19:37:48.755565 2026] [:error] [pid 39183:tid 39210] [client 20.216.146.160:35181] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aaLTjBCf4HvhVePw3LbWvQAAABI"]
[Sat Feb 28 19:37:49.226465 2026] [:error] [pid 39292:tid 39296] [client 20.216.146.160:24385] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aaLTjaIAO5fN7BxyqcFaXAAAAMI"]
[Sat Feb 28 19:37:49.694643 2026] [:error] [pid 39183:tid 39215] [client 20.216.146.160:35175] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aaLTjRCf4HvhVePw3LbWwQAAABc"]
[Sat Feb 28 19:37:50.166158 2026] [:error] [pid 49763:tid 49784] [client 20.216.146.160:14735] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aaLTjrTHSOG_yf2PpqHTAAAAAdI"]
[Sat Feb 28 19:37:50.635122 2026] [:error] [pid 39183:tid 39204] [client 20.216.146.160:35173] [client 20.216.146.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLTjhCf4HvhVePw3LbWxgAAAAw"]
[Sat Feb 28 19:37:51.105696 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:35171] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aaLTj7THSOG_yf2PpqHTBwAAAco"]
[Sat Feb 28 19:37:51.578799 2026] [:error] [pid 49763:tid 49768] [client 20.216.146.160:7907] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aaLTj7THSOG_yf2PpqHTDAAAAcI"]
[Sat Feb 28 19:37:52.047296 2026] [:error] [pid 39184:tid 39221] [client 20.216.146.160:13337] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aaLTkFtZF9Zd_U7easCL0wAAAEI"]
[Sat Feb 28 19:37:52.516660 2026] [:error] [pid 39183:tid 39192] [client 20.216.146.160:54099] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hi.php"] [unique_id "aaLTkBCf4HvhVePw3LbWzAAAAAA"]
[Sat Feb 28 19:37:52.989229 2026] [:error] [pid 39292:tid 39304] [client 20.216.146.160:13354] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hi.php"] [unique_id "aaLTkKIAO5fN7BxyqcFaXwAAAMo"]
[Sat Feb 28 19:37:53.462200 2026] [:error] [pid 49763:tid 49770] [client 20.216.146.160:35143] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hi.php"] [unique_id "aaLTkbTHSOG_yf2PpqHTIgAAAcQ"]
[Sat Feb 28 19:37:53.931224 2026] [:error] [pid 39183:tid 39209] [client 20.216.146.160:54091] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hi.php"] [unique_id "aaLTkRCf4HvhVePw3LbW1AAAABE"]
[Sat Feb 28 19:37:54.405079 2026] [:error] [pid 49763:tid 49774] [client 20.216.146.160:14726] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "aaLTkrTHSOG_yf2PpqHTLAAAAcg"]
[Sat Feb 28 19:37:54.874833 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:30414] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "aaLTkrTHSOG_yf2PpqHTMwAAAdM"]
[Sat Feb 28 19:37:55.342984 2026] [:error] [pid 49763:tid 49769] [client 20.216.146.160:7627] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "aaLTk7THSOG_yf2PpqHTOwAAAcM"]
[Sat Feb 28 19:37:55.812101 2026] [:error] [pid 39183:tid 39205] [client 20.216.146.160:2469] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "aaLTkxCf4HvhVePw3LbW2gAAAA0"]
[Sat Feb 28 19:37:56.284782 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:12446] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "aaLTlBCf4HvhVePw3LbW3wAAABU"]
[Sat Feb 28 19:37:56.754222 2026] [:error] [pid 39183:tid 39201] [client 20.216.146.160:2488] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "aaLTlBCf4HvhVePw3LbW4AAAAAk"]
[Sat Feb 28 19:37:57.223924 2026] [:error] [pid 39184:tid 39227] [client 20.216.146.160:30463] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "aaLTlVtZF9Zd_U7easCL2gAAAEg"]
[Sat Feb 28 19:37:57.693802 2026] [:error] [pid 39183:tid 39205] [client 20.216.146.160:12466] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "aaLTlRCf4HvhVePw3LbW5gAAAA0"]
[Sat Feb 28 19:37:58.164079 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:12465] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLTlhCf4HvhVePw3LbW6QAAABU"]
[Sat Feb 28 19:37:58.634492 2026] [:error] [pid 39183:tid 39194] [client 20.216.146.160:14954] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLTlhCf4HvhVePw3LbW8AAAAAI"]
[Sat Feb 28 19:37:59.103300 2026] [:error] [pid 39292:tid 39318] [client 20.216.146.160:9934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLTl6IAO5fN7BxyqcFaYgAAANg"]
[Sat Feb 28 19:37:59.571692 2026] [:error] [pid 39292:tid 39307] [client 20.216.146.160:2471] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLTl6IAO5fN7BxyqcFaYwAAAM0"]
[Sat Feb 28 19:38:00.041433 2026] [:error] [pid 39184:tid 39238] [client 20.216.146.160:7675] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0.php"] [unique_id "aaLTmFtZF9Zd_U7easCL4gAAAFM"]
[Sat Feb 28 19:38:00.512884 2026] [:error] [pid 11791:tid 11800] [client 20.216.146.160:3421] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0.php"] [unique_id "aaLTmGuX5e1Q32gqxH2qWQAAAQc"]
[Sat Feb 28 19:38:00.983322 2026] [:error] [pid 22194:tid 22214] [client 20.216.146.160:14921] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0.php"] [unique_id "aaLTmH6mbajs3bzQGyuQrgAAAVI"]
[Sat Feb 28 19:38:01.456496 2026] [:error] [pid 22194:tid 22210] [client 20.216.146.160:2444] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/0.php"] [unique_id "aaLTmX6mbajs3bzQGyuQsAAAAU4"]
[Sat Feb 28 19:38:01.925937 2026] [:error] [pid 52460:tid 52477] [client 20.216.146.160:14943] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaLTmbLWOogAgHGh62Q4JQAAAY4"]
[Sat Feb 28 19:38:02.396089 2026] [:error] [pid 11791:tid 11795] [client 20.216.146.160:12460] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaLTmmuX5e1Q32gqxH2qYAAAAQI"]
[Sat Feb 28 19:38:02.866154 2026] [:error] [pid 39183:tid 39193] [client 20.216.146.160:2479] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaLTmhCf4HvhVePw3LbW_gAAAAE"]
[Sat Feb 28 19:38:03.341736 2026] [:error] [pid 39184:tid 39221] [client 20.216.146.160:14960] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/core.php"] [unique_id "aaLTm1tZF9Zd_U7easCL9AAAAEI"]
[Sat Feb 28 19:38:03.810695 2026] [:error] [pid 39183:tid 39209] [client 20.216.146.160:5353] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLTmxCf4HvhVePw3LbXAwAAABE"]
[Sat Feb 28 19:38:04.279525 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:2459] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLTnLLWOogAgHGh62Q4LgAAAYA"]
[Sat Feb 28 19:38:04.748147 2026] [:error] [pid 39184:tid 39224] [client 20.216.146.160:46601] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLTnFtZF9Zd_U7easCL-wAAAEU"]
[Sat Feb 28 19:38:05.218025 2026] [:error] [pid 39183:tid 39209] [client 20.216.146.160:2467] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/autogooey.php"] [unique_id "aaLTnRCf4HvhVePw3LbXDwAAABE"]
[Sat Feb 28 19:38:05.687003 2026] [:error] [pid 39183:tid 39211] [client 20.216.146.160:30406] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLTnRCf4HvhVePw3LbXGgAAABM"]
[Sat Feb 28 19:38:06.156159 2026] [:error] [pid 39183:tid 39192] [client 20.216.146.160:3397] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLTnhCf4HvhVePw3LbXIAAAAAA"]
[Sat Feb 28 19:38:06.634159 2026] [:error] [pid 52460:tid 52482] [client 20.216.146.160:4230] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLTnrLWOogAgHGh62Q4PAAAAZM"]
[Sat Feb 28 19:38:07.104418 2026] [:error] [pid 22194:tid 22213] [client 20.216.146.160:30449] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLTn36mbajs3bzQGyuQsgAAAVE"]
[Sat Feb 28 19:38:07.573421 2026] [:error] [pid 22194:tid 22197] [client 20.216.146.160:12463] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/prv8.php"] [unique_id "aaLTn36mbajs3bzQGyuQswAAAUE"]
[Sat Feb 28 19:38:08.043520 2026] [:error] [pid 22194:tid 22199] [client 20.216.146.160:12438] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/prv8.php"] [unique_id "aaLToH6mbajs3bzQGyuQtAAAAUM"]
[Sat Feb 28 19:38:08.512858 2026] [:error] [pid 39184:tid 39227] [client 20.216.146.160:14936] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/prv8.php"] [unique_id "aaLToFtZF9Zd_U7easCL_QAAAEg"]
[Sat Feb 28 19:38:08.981990 2026] [:error] [pid 39183:tid 39216] [client 20.216.146.160:46646] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/prv8.php"] [unique_id "aaLToBCf4HvhVePw3LbXMAAAABg"]
[Sat Feb 28 19:38:09.451808 2026] [:error] [pid 39183:tid 39204] [client 20.216.146.160:21498] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aaLToRCf4HvhVePw3LbXMwAAAAw"]
[Sat Feb 28 19:38:09.921428 2026] [:error] [pid 52460:tid 52479] [client 20.216.146.160:2447] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aaLTobLWOogAgHGh62Q4RwAAAZA"]
[Sat Feb 28 19:38:10.390283 2026] [:error] [pid 52460:tid 52476] [client 20.216.146.160:2445] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aaLTorLWOogAgHGh62Q4SQAAAY0"]
[Sat Feb 28 19:38:10.858854 2026] [:error] [pid 52460:tid 52482] [client 20.216.146.160:14926] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aaLTorLWOogAgHGh62Q4SwAAAZM"]
[Sat Feb 28 19:38:11.329613 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:9974] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "aaLTo7LWOogAgHGh62Q4TwAAAYA"]
[Sat Feb 28 19:38:11.799209 2026] [:error] [pid 49763:tid 49766] [client 20.216.146.160:2451] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "aaLTo7THSOG_yf2PpqHTeAAAAcA"]
[Sat Feb 28 19:38:42.189546 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:5312] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLTwrTHSOG_yf2PpqHUUQAAAcY"]
[Sat Feb 28 19:38:42.658160 2026] [:error] [pid 52460:tid 52472] [client 20.216.146.160:30450] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLTwrLWOogAgHGh62Q4nwAAAYk"]
[Sat Feb 28 19:38:43.129680 2026] [:error] [pid 39184:tid 39232] [client 20.216.146.160:3410] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLTw1tZF9Zd_U7easCMGwAAAE0"]
[Sat Feb 28 19:38:43.599202 2026] [:error] [pid 52460:tid 52466] [client 20.216.146.160:30431] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLTw7LWOogAgHGh62Q4oQAAAYM"]
[Sat Feb 28 19:38:44.067449 2026] [:error] [pid 52460:tid 52463] [client 20.216.146.160:12477] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/X57.php"] [unique_id "aaLTxLLWOogAgHGh62Q4pAAAAYA"]
[Sat Feb 28 19:38:44.536109 2026] [:error] [pid 52460:tid 52471] [client 20.216.146.160:5337] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/X57.php"] [unique_id "aaLTxLLWOogAgHGh62Q4pwAAAYg"]
[Sat Feb 28 19:38:45.005642 2026] [:error] [pid 52460:tid 52479] [client 20.216.146.160:2483] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/X57.php"] [unique_id "aaLTxbLWOogAgHGh62Q4rAAAAZA"]
[Sat Feb 28 19:38:45.475133 2026] [:error] [pid 39184:tid 39231] [client 20.216.146.160:9943] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/X57.php"] [unique_id "aaLTxVtZF9Zd_U7easCMIAAAAEw"]
[Sat Feb 28 19:38:45.944757 2026] [:error] [pid 39184:tid 39222] [client 20.216.146.160:9926] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aaLTxVtZF9Zd_U7easCMIwAAAEM"]
[Sat Feb 28 19:38:46.414273 2026] [:error] [pid 39184:tid 39236] [client 20.216.146.160:2453] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aaLTxltZF9Zd_U7easCMJgAAAFE"]
[Sat Feb 28 19:38:46.884183 2026] [:error] [pid 39183:tid 39213] [client 20.216.146.160:14946] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aaLTxhCf4HvhVePw3LbXvAAAABU"]
[Sat Feb 28 19:38:47.356586 2026] [:error] [pid 49763:tid 49776] [client 20.216.146.160:14934] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aaLTx7THSOG_yf2PpqHUZQAAAco"]
[Sat Feb 28 19:38:47.825829 2026] [:error] [pid 11791:tid 11801] [client 20.216.146.160:3399] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aaLTx2uX5e1Q32gqxH2qgQAAAQg"]
[Sat Feb 28 19:38:48.296160 2026] [:error] [pid 52460:tid 52485] [client 20.216.146.160:12461] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aaLTyLLWOogAgHGh62Q4tQAAAZY"]
[Sat Feb 28 19:38:48.765248 2026] [:error] [pid 49763:tid 49782] [client 20.216.146.160:9941] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aaLTyLTHSOG_yf2PpqHUcQAAAdA"]
[Sat Feb 28 19:38:49.235808 2026] [:error] [pid 39183:tid 39209] [client 20.216.146.160:3426] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aaLTyRCf4HvhVePw3LbXwQAAABE"]
[Sat Feb 28 19:38:49.705337 2026] [:error] [pid 49763:tid 49789] [client 20.216.146.160:30444] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/myfile.php"] [unique_id "aaLTybTHSOG_yf2PpqHUeQAAAdc"]
[Sat Feb 28 19:38:50.174706 2026] [:error] [pid 39183:tid 39200] [client 20.216.146.160:46629] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/myfile.php"] [unique_id "aaLTyhCf4HvhVePw3LbXxgAAAAg"]
[Sat Feb 28 19:38:50.643947 2026] [:error] [pid 39183:tid 39203] [client 20.216.146.160:2439] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/myfile.php"] [unique_id "aaLTyhCf4HvhVePw3LbXzQAAAAs"]
[Sat Feb 28 19:38:51.113206 2026] [:error] [pid 39183:tid 39209] [client 20.216.146.160:14958] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/myfile.php"] [unique_id "aaLTyxCf4HvhVePw3LbX1QAAABE"]
[Sat Feb 28 19:38:51.581805 2026] [:error] [pid 49763:tid 49767] [client 20.216.146.160:30454] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/re.php"] [unique_id "aaLTy7THSOG_yf2PpqHUfwAAAcE"]
[Sat Feb 28 19:38:52.050354 2026] [:error] [pid 39184:tid 39220] [client 20.216.146.160:3403] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/re.php"] [unique_id "aaLTzFtZF9Zd_U7easCMMAAAAEE"]
[Sat Feb 28 19:38:52.519991 2026] [:error] [pid 52460:tid 52477] [client 20.216.146.160:5366] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/re.php"] [unique_id "aaLTzLLWOogAgHGh62Q4vgAAAY4"]
[Sat Feb 28 19:38:52.990527 2026] [:error] [pid 39185:tid 39260] [client 20.216.146.160:3412] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/re.php"] [unique_id "aaLTzBVE-FfM89u7BQaLuQAAAI4"]
[Sat Feb 28 19:38:53.462635 2026] [:error] [pid 39184:tid 39239] [client 20.216.146.160:14962] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/styll.php"] [unique_id "aaLTzVtZF9Zd_U7easCMOgAAAFQ"]
[Sat Feb 28 19:38:53.931275 2026] [:error] [pid 39292:tid 39309] [client 20.216.146.160:12462] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/styll.php"] [unique_id "aaLTzaIAO5fN7BxyqcFaqgAAAM8"]
[Sat Feb 28 19:38:54.400815 2026] [:error] [pid 11791:tid 11812] [client 20.216.146.160:30413] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/styll.php"] [unique_id "aaLTzmuX5e1Q32gqxH2qgwAAARM"]
[Sat Feb 28 19:38:54.869142 2026] [:error] [pid 52460:tid 52474] [client 20.216.146.160:3431] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/styll.php"] [unique_id "aaLTzrLWOogAgHGh62Q4xgAAAYs"]
[Sat Feb 28 19:38:55.341482 2026] [:error] [pid 49763:tid 49777] [client 20.216.146.160:5325] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aaLTz7THSOG_yf2PpqHUiwAAAcs"]
[Sat Feb 28 19:38:55.818862 2026] [:error] [pid 49763:tid 49767] [client 20.216.146.160:14927] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aaLTz7THSOG_yf2PpqHUkQAAAcE"]
[Sat Feb 28 19:38:56.292230 2026] [:error] [pid 49763:tid 49772] [client 20.216.146.160:24414] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aaLT0LTHSOG_yf2PpqHUlwAAAcY"]
[Sat Feb 28 19:38:56.769376 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:5340] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower.php"] [unique_id "aaLT0LTHSOG_yf2PpqHUnwAAAdM"]
[Sat Feb 28 19:38:57.243407 2026] [:error] [pid 49763:tid 49786] [client 20.216.146.160:9939] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aaLT0bTHSOG_yf2PpqHUqAAAAdQ"]
[Sat Feb 28 19:38:57.720047 2026] [:error] [pid 39183:tid 39198] [client 20.216.146.160:5355] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aaLT0RCf4HvhVePw3LbX8QAAAAY"]
[Sat Feb 28 19:38:58.207170 2026] [:error] [pid 39183:tid 39210] [client 20.216.146.160:30428] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aaLT0hCf4HvhVePw3LbX9AAAABI"]
[Sat Feb 28 19:38:58.679411 2026] [:error] [pid 52460:tid 52483] [client 20.216.146.160:3415] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/flower2.php"] [unique_id "aaLT0rLWOogAgHGh62Q40QAAAZQ"]
[Sat Feb 28 19:38:59.150177 2026] [:error] [pid 39184:tid 39236] [client 20.216.146.160:30432] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4h.php"] [unique_id "aaLT01tZF9Zd_U7easCMSgAAAFE"]
[Sat Feb 28 19:38:59.618801 2026] [:error] [pid 39183:tid 39203] [client 20.216.146.160:12431] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4h.php"] [unique_id "aaLT0xCf4HvhVePw3LbYAAAAAAs"]
[Sat Feb 28 19:39:00.091181 2026] [:error] [pid 49763:tid 49768] [client 20.216.146.160:9956] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4h.php"] [unique_id "aaLT1LTHSOG_yf2PpqHUuQAAAcI"]
[Sat Feb 28 19:39:00.563384 2026] [:error] [pid 49763:tid 49785] [client 20.216.146.160:42732] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4h.php"] [unique_id "aaLT1LTHSOG_yf2PpqHUvAAAAdM"]
[Sat Feb 28 19:39:01.038606 2026] [:error] [pid 52460:tid 52472] [client 20.216.146.160:3436] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aaLT1bLWOogAgHGh62Q42QAAAYk"]
[Sat Feb 28 19:39:01.509927 2026] [:error] [pid 52460:tid 52483] [client 20.216.146.160:2456] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aaLT1bLWOogAgHGh62Q45AAAAZQ"]
[Sat Feb 28 19:39:01.982637 2026] [:error] [pid 52460:tid 52478] [client 20.216.146.160:12464] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aaLT1bLWOogAgHGh62Q46QAAAY8"]
[Sat Feb 28 19:39:02.458994 2026] [:error] [pid 39184:tid 39230] [client 20.216.146.160:3430] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aaLT1ltZF9Zd_U7easCMTgAAAEs"]
[Sat Feb 28 19:39:02.934836 2026] [:error] [pid 11791:tid 11814] [client 20.216.146.160:5347] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aaLT1muX5e1Q32gqxH2qigAAARU"]
[Sat Feb 28 19:39:03.412866 2026] [:error] [pid 39184:tid 39223] [client 20.216.146.160:2454] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aaLT11tZF9Zd_U7easCMUwAAAEQ"]
[Sat Feb 28 19:39:03.882595 2026] [:error] [pid 39184:tid 39233] [client 20.216.146.160:9933] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aaLT11tZF9Zd_U7easCMWQAAAE4"]
[Sat Feb 28 19:39:04.362000 2026] [:error] [pid 49763:tid 49780] [client 20.216.146.160:14935] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aaLT2LTHSOG_yf2PpqHUyQAAAc4"]
[Sat Feb 28 19:39:04.831712 2026] [:error] [pid 52460:tid 52485] [client 20.216.146.160:5352] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aaLT2LLWOogAgHGh62Q48QAAAZY"]
[Sat Feb 28 19:39:05.300361 2026] [:error] [pid 39183:tid 39207] [client 20.216.146.160:2457] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aaLT2RCf4HvhVePw3LbYEQAAAA8"]
[Sat Feb 28 19:39:05.770819 2026] [:error] [pid 39292:tid 39300] [client 20.216.146.160:2443] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aaLT2aIAO5fN7BxyqcFawgAAAMY"]
[Sat Feb 28 19:39:06.240138 2026] [:error] [pid 52460:tid 52478] [client 20.216.146.160:14923] [client 20.216.146.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aaLT2rLWOogAgHGh62Q49QAAAY8"]
[Sun Mar 01 17:06:25.124698 2026] [:error] [pid 40750:tid 40764] [client 91.224.92.99:63861] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBkQfBuk03yQKDyqsNrAAAAcs"]
[Sun Mar 01 17:06:28.666400 2026] [:error] [pid 40750:tid 40756] [client 91.224.92.99:63861] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaQBlAfBuk03yQKDyqsNtwAAAcM"]
[Sun Mar 01 17:06:30.657766 2026] [:error] [pid 40750:tid 40754] [client 91.224.92.99:63861] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBlgfBuk03yQKDyqsNwAAAAcE"]
[Sun Mar 01 17:06:33.418222 2026] [:error] [pid 7165:tid 7184] [client 91.224.92.99:65030] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBmRRjCrA8qWBjgG9oIQAAAlE"]
[Sun Mar 01 17:06:36.218720 2026] [:error] [pid 40750:tid 40753] [client 91.224.92.99:53706] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBnAfBuk03yQKDyqsN3wAAAcA"]
[Sun Mar 01 17:06:38.944599 2026] [:error] [pid 7165:tid 7174] [client 91.224.92.99:55988] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBnhRjCrA8qWBjgG9oOwAAAkc"]
[Sun Mar 01 17:06:41.626373 2026] [:error] [pid 40750:tid 40763] [client 91.224.92.99:51145] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.224.92.99, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBoQfBuk03yQKDyqsN-AAAAco"]
[Sun Mar 01 17:06:41.626530 2026] [:error] [pid 40750:tid 40763] [client 91.224.92.99:51145] [client 91.224.92.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 91.224.92.99, counter = 6"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQBoQfBuk03yQKDyqsN-AAAAco"]
[Mon Mar 02 02:06:29.403643 2026] [:error] [pid 53585:tid 53595] [client 91.224.92.99:54828] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAJXbCvYsvu6kKhM23IQAAAAc"]
[Mon Mar 02 02:06:31.517664 2026] [:error] [pid 53585:tid 53611] [client 91.224.92.99:54828] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAJ3bCvYsvu6kKhM23JgAAABc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:06:44.557255 2026] [:error] [pid 53585:tid 53593] [client 91.224.92.99:60731] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSANHbCvYsvu6kKhM23XAAAAAU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:06:55.174665 2026] [:error] [pid 53585:tid 53612] [client 91.224.92.99:60731] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAP3bCvYsvu6kKhM23gQAAABg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:07:06.906411 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:60731] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSASnbCvYsvu6kKhM23owAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:07:17.988673 2026] [:error] [pid 53585:tid 53598] [client 91.224.92.99:60731] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAVXbCvYsvu6kKhM23yQAAAAo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:07:29.530941 2026] [:error] [pid 53585:tid 53600] [client 91.224.92.99:60731] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAYXbCvYsvu6kKhM235wAAAAw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:07:40.929505 2026] [:error] [pid 53585:tid 53598] [client 91.224.92.99:60731] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAbHbCvYsvu6kKhM24CgAAAAo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:07:56.022626 2026] [:error] [pid 26940:tid 26966] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAfBrUg-j5GLDtRFnOtgAAAFY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:08:05.552098 2026] [:error] [pid 26940:tid 26953] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAhRrUg-j5GLDtRFnO4AAAAEk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:08:14.907215 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAjhrUg-j5GLDtRFnPIQAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:08:24.546120 2026] [:error] [pid 26940:tid 26960] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAmBrUg-j5GLDtRFnPWQAAAFA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:08:34.882547 2026] [:error] [pid 26940:tid 26956] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAohrUg-j5GLDtRFnPigAAAEw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:08:44.630705 2026] [:error] [pid 26940:tid 26953] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSArBrUg-j5GLDtRFnPvgAAAEk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:08:53.607376 2026] [:error] [pid 26940:tid 26961] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAtRrUg-j5GLDtRFnP0QAAAFE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:09:03.109573 2026] [:error] [pid 26940:tid 26946] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAvxrUg-j5GLDtRFnQNAAAAEI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:09:11.900933 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSAxxrUg-j5GLDtRFnQigAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:09:22.345867 2026] [:error] [pid 26940:tid 26946] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSA0hrUg-j5GLDtRFnQyQAAAEI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:09:34.332338 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSA3hrUg-j5GLDtRFnRGgAAAEY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:09:47.228250 2026] [:error] [pid 26940:tid 26949] [client 91.224.92.99:64924] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSA6xrUg-j5GLDtRFnRnAAAAEU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:10:09.597604 2026] [:error] [pid 26940:tid 26952] [client 91.224.92.99:57372] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBARrUg-j5GLDtRFnSLwAAAEg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:10:30.463190 2026] [:error] [pid 53585:tid 53612] [client 91.224.92.99:51552] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBFnbCvYsvu6kKhM26cgAAABg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:10:39.937892 2026] [:error] [pid 53585:tid 53589] [client 91.224.92.99:51552] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBH3bCvYsvu6kKhM26igAAAAE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:10:56.652208 2026] [:error] [pid 53181:tid 53522] [client 91.224.92.99:52866] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBMIr_0T1SazTrJOBLkwAAAQc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:11:13.190322 2026] [:error] [pid 53585:tid 53608] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBQXbCvYsvu6kKhM26zwAAABQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:11:22.414165 2026] [:error] [pid 53585:tid 53595] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBSnbCvYsvu6kKhM269gAAAAc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:11:34.340586 2026] [:error] [pid 53585:tid 53590] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBVnbCvYsvu6kKhM27GAAAAAI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:11:45.584580 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBYXbCvYsvu6kKhM27QQAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:11:56.157289 2026] [:error] [pid 53585:tid 53588] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBbHbCvYsvu6kKhM27YQAAAAA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:12:07.656929 2026] [:error] [pid 53585:tid 53604] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBd3bCvYsvu6kKhM27jgAAABA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:12:17.219186 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBgXbCvYsvu6kKhM27yQAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:12:30.143714 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBjnbCvYsvu6kKhM28AwAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:12:42.070230 2026] [:error] [pid 53585:tid 53597] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBmnbCvYsvu6kKhM28GgAAAAk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:12:55.470960 2026] [:error] [pid 53585:tid 53603] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBp3bCvYsvu6kKhM28QgAAAA8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:13:04.751628 2026] [:error] [pid 53585:tid 53610] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBsHbCvYsvu6kKhM28XgAAABY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:13:14.200145 2026] [:error] [pid 53585:tid 53611] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBunbCvYsvu6kKhM28hAAAABc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:13:24.687676 2026] [:error] [pid 53585:tid 53597] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSBxHbCvYsvu6kKhM28hwAAAAk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:13:36.194958 2026] [:error] [pid 53585:tid 53599] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSB0HbCvYsvu6kKhM285gAAAAs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:13:44.626129 2026] [:error] [pid 53585:tid 53590] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSB2HbCvYsvu6kKhM28-wAAAAI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:13:53.471432 2026] [:error] [pid 53585:tid 53593] [client 91.224.92.99:61321] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSB4XbCvYsvu6kKhM29IAAAAAU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:14:16.837636 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:62806] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSB-BrUg-j5GLDtRFnXugAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:14:30.585663 2026] [:error] [pid 26940:tid 26963] [client 91.224.92.99:55938] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCBhrUg-j5GLDtRFnYLwAAAFM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:14:39.674527 2026] [:error] [pid 26940:tid 26960] [client 91.224.92.99:55938] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCDxrUg-j5GLDtRFnYuwAAAFA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:14:50.146503 2026] [:error] [pid 26940:tid 26961] [client 91.224.92.99:55938] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCGhrUg-j5GLDtRFnY5AAAAFE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:15:01.226669 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:55938] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCJRrUg-j5GLDtRFnZGwAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:15:19.953801 2026] [:error] [pid 53585:tid 53608] [client 91.224.92.99:51809] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCN3bCvYsvu6kKhM2_RQAAABQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:15:31.625441 2026] [:error] [pid 53585:tid 53606] [client 91.224.92.99:51809] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCQ3bCvYsvu6kKhM2_lgAAABI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:15:45.120483 2026] [:error] [pid 53585:tid 53610] [client 91.224.92.99:51809] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCUXbCvYsvu6kKhM2_xwAAABY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:15:59.793424 2026] [:error] [pid 26940:tid 26968] [client 91.224.92.99:59245] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCXxrUg-j5GLDtRFna3AAAAFg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:16:12.371995 2026] [:error] [pid 53182:tid 53557] [client 91.224.92.99:62229] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCbPv073cA6eM1YCTmMgAAAM0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:16:22.458830 2026] [:error] [pid 53182:tid 53563] [client 91.224.92.99:62229] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCdvv073cA6eM1YCTmegAAANM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:16:33.395997 2026] [:error] [pid 53182:tid 53547] [client 91.224.92.99:62229] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCgfv073cA6eM1YCTmmQAAAMQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:16:46.883591 2026] [:error] [pid 53182:tid 53556] [client 91.224.92.99:62229] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCjvv073cA6eM1YCTm0wAAAMw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:16:46.883666 2026] [:error] [pid 53182:tid 53556] [client 91.224.92.99:62229] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCjvv073cA6eM1YCTm0wAAAMw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:16:55.765215 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCl3bCvYsvu6kKhM3BAgAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:17:07.052792 2026] [:error] [pid 53585:tid 53599] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCo3bCvYsvu6kKhM3BLAAAAAs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:17:16.114342 2026] [:error] [pid 53585:tid 53594] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCrHbCvYsvu6kKhM3BZgAAAAY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:17:27.380299 2026] [:error] [pid 53585:tid 53594] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCt3bCvYsvu6kKhM3BkAAAAAY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:17:40.142935 2026] [:error] [pid 53585:tid 53606] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCxHbCvYsvu6kKhM3B5QAAABI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:17:48.743718 2026] [:error] [pid 53585:tid 53596] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSCzHbCvYsvu6kKhM3CLAAAAAg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:17:58.486603 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSC1nbCvYsvu6kKhM3CdwAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:18:09.861354 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:49527] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSC4XbCvYsvu6kKhM3CswAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:18:26.602202 2026] [:error] [pid 26940:tid 26958] [client 91.224.92.99:51650] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSC8hrUg-j5GLDtRFneKwAAAE4"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:18:35.083665 2026] [:error] [pid 26940:tid 26967] [client 91.224.92.99:51650] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSC-xrUg-j5GLDtRFnegQAAAFc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:18:43.489832 2026] [:error] [pid 26940:tid 26951] [client 91.224.92.99:51650] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDAxrUg-j5GLDtRFnezQAAAEc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:18:52.552041 2026] [:error] [pid 26940:tid 26956] [client 91.224.92.99:51650] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDDBrUg-j5GLDtRFnfFQAAAEw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:03.450922 2026] [:error] [pid 26940:tid 26966] [client 91.224.92.99:51650] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDFxrUg-j5GLDtRFnfcgAAAFY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:05.126874 2026] [:error] [pid 26940:tid 26968] [client 91.224.92.99:51650] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSDGRrUg-j5GLDtRFnfeAAAAFg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:06.434140 2026] [:error] [pid 53182:tid 53568] [client 91.224.92.99:54126] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSDGvv073cA6eM1YCTo0AAAANg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:07.771690 2026] [:error] [pid 26940:tid 26948] [client 91.224.92.99:51829] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDGxrUg-j5GLDtRFnflwAAAEQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:07.771754 2026] [:error] [pid 26940:tid 26948] [client 91.224.92.99:51829] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDGxrUg-j5GLDtRFnflwAAAEQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:17.650513 2026] [:error] [pid 53180:tid 53448] [client 91.224.92.99:49795] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDJTPPJpDOBvYnaa1mzgAAAYQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:27.080182 2026] [:error] [pid 53180:tid 53449] [client 91.224.92.99:49795] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDLzPPJpDOBvYnaa1m3AAAAYU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:36.082561 2026] [:error] [pid 53180:tid 53459] [client 91.224.92.99:49795] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDODPPJpDOBvYnaa1m8AAAAY8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:19:45.607595 2026] [:error] [pid 53180:tid 53467] [client 91.224.92.99:49795] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDQTPPJpDOBvYnaa1nBgAAAZc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:01.581402 2026] [:error] [pid 53182:tid 53544] [client 91.224.92.99:57069] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDUfv073cA6eM1YCTpYgAAAME"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:10.883920 2026] [:error] [pid 53182:tid 53560] [client 91.224.92.99:57069] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDWvv073cA6eM1YCTpfwAAANA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:12.610788 2026] [:error] [pid 53182:tid 53556] [client 91.224.92.99:57069] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSDXPv073cA6eM1YCTpgwAAAMw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:15.874109 2026] [:error] [pid 53181:tid 53534] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDX4r_0T1SazTrJOBQagAAARM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:28.071018 2026] [:error] [pid 53181:tid 53530] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDbIr_0T1SazTrJOBQgwAAAQ8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:39.887062 2026] [:error] [pid 53181:tid 53538] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDd4r_0T1SazTrJOBQvgAAARc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:49.116027 2026] [:error] [pid 53181:tid 53539] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDgYr_0T1SazTrJOBQ3wAAARg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:20:59.075380 2026] [:error] [pid 53181:tid 53516] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDi4r_0T1SazTrJOBQ8gAAAQI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:21:10.477691 2026] [:error] [pid 53181:tid 53538] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDlor_0T1SazTrJOBRBAAAARc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:21:21.945159 2026] [:error] [pid 53181:tid 53532] [client 91.224.92.99:49265] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDoYr_0T1SazTrJOBRJAAAARE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:21:36.184833 2026] [:error] [pid 53180:tid 53462] [client 91.224.92.99:60735] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDsDPPJpDOBvYnaa1nxwAAAZI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:21:48.636283 2026] [:error] [pid 53180:tid 53449] [client 91.224.92.99:60735] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSDvDPPJpDOBvYnaa1n1wAAAYU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:22:13.390120 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSD1XbCvYsvu6kKhM3HcQAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:22:25.563053 2026] [:error] [pid 53585:tid 53606] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSD4XbCvYsvu6kKhM3HngAAABI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:22:38.683708 2026] [:error] [pid 53585:tid 53589] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSD7nbCvYsvu6kKhM3HzgAAAAE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:22:47.981248 2026] [:error] [pid 53585:tid 53603] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSD93bCvYsvu6kKhM3H6gAAAA8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:23:00.764062 2026] [:error] [pid 53585:tid 53603] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEBHbCvYsvu6kKhM3IJgAAAA8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:23:09.778253 2026] [:error] [pid 53585:tid 53591] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEDXbCvYsvu6kKhM3ISQAAAAM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:23:22.586700 2026] [:error] [pid 53585:tid 53612] [client 91.224.92.99:55959] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEGnbCvYsvu6kKhM3IfwAAABg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:23:41.818279 2026] [:error] [pid 53585:tid 53606] [client 91.224.92.99:51887] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSELXbCvYsvu6kKhM3JAwAAABI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:23:41.818444 2026] [:error] [pid 53585:tid 53606] [client 91.224.92.99:51887] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSELXbCvYsvu6kKhM3JAwAAABI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:23:58.346977 2026] [:error] [pid 53585:tid 53604] [client 91.224.92.99:64082] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEPnbCvYsvu6kKhM3JXAAAABA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:24:10.435873 2026] [:error] [pid 53585:tid 53606] [client 91.224.92.99:50174] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSESnbCvYsvu6kKhM3JqAAAABI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:24:45.329854 2026] [:error] [pid 53181:tid 53517] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEbYr_0T1SazTrJOBS_AAAAQM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:24:58.081725 2026] [:error] [pid 53181:tid 53537] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEeor_0T1SazTrJOBTQwAAARY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:25:08.719013 2026] [:error] [pid 53181:tid 53539] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEhIr_0T1SazTrJOBTkQAAARg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:25:20.834088 2026] [:error] [pid 53181:tid 53537] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEkIr_0T1SazTrJOBTzAAAARY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:25:30.454792 2026] [:error] [pid 53181:tid 53538] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEmor_0T1SazTrJOBT1gAAARc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:25:39.803960 2026] [:error] [pid 53181:tid 53518] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEo4r_0T1SazTrJOBT5wAAAQQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:25:39.804020 2026] [:error] [pid 53181:tid 53518] [client 91.224.92.99:63500] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEo4r_0T1SazTrJOBT5wAAAQQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:25:56.208751 2026] [:error] [pid 53182:tid 53553] [client 91.224.92.99:50128] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEtPv073cA6eM1YCTuNQAAAMo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:26:11.017786 2026] [:error] [pid 53182:tid 53563] [client 91.224.92.99:50128] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEw_v073cA6eM1YCTubQAAANM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:26:22.489514 2026] [:error] [pid 53182:tid 53553] [client 91.224.92.99:50128] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSEzvv073cA6eM1YCTuiAAAAMo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:26:32.892704 2026] [:error] [pid 53182:tid 53547] [client 91.224.92.99:50128] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSE2Pv073cA6eM1YCTuwgAAAMQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:26:37.569962 2026] [:error] [pid 53182:tid 53550] [client 91.224.92.99:50128] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSE3fv073cA6eM1YCTu4AAAAMc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:26:39.353069 2026] [:error] [pid 26940:tid 26947] [client 91.224.92.99:59735] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSE3xrUg-j5GLDtRFntzAAAAEM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:26:53.200220 2026] [:error] [pid 53182:tid 53566] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSE7fv073cA6eM1YCTvDwAAANY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:27:06.065663 2026] [:error] [pid 53182:tid 53567] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSE-vv073cA6eM1YCTvTwAAANc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:27:14.822442 2026] [:error] [pid 53182:tid 53553] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFAvv073cA6eM1YCTveAAAAMo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:27:24.296423 2026] [:error] [pid 53182:tid 53545] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFDPv073cA6eM1YCTvmAAAAMI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:27:33.242082 2026] [:error] [pid 53182:tid 53543] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFFfv073cA6eM1YCTvpgAAAMA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:27:42.930358 2026] [:error] [pid 53182:tid 53545] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFHvv073cA6eM1YCTvywAAAMI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:27:54.164497 2026] [:error] [pid 53182:tid 53547] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFKvv073cA6eM1YCTv6AAAAMQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:28:04.600067 2026] [:error] [pid 53182:tid 53550] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFNPv073cA6eM1YCTwEwAAAMc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:28:13.891302 2026] [:error] [pid 53182:tid 53563] [client 91.224.92.99:62277] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFPfv073cA6eM1YCTwNwAAANM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:28:30.858808 2026] [:error] [pid 53182:tid 53567] [client 91.224.92.99:56065] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFTvv073cA6eM1YCTwYwAAANc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:28:41.633473 2026] [:error] [pid 53182:tid 53555] [client 91.224.92.99:56065] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFWfv073cA6eM1YCTwhgAAAMs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:28:53.154039 2026] [:error] [pid 53182:tid 53562] [client 91.224.92.99:56065] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFZfv073cA6eM1YCTwrgAAANI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:29:05.631981 2026] [:error] [pid 26940:tid 26946] [client 91.224.92.99:61326] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFcRrUg-j5GLDtRFnxkQAAAEI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:29:15.271809 2026] [:error] [pid 26940:tid 26954] [client 91.224.92.99:61326] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFexrUg-j5GLDtRFnxuQAAAEo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:29:15.271896 2026] [:error] [pid 26940:tid 26954] [client 91.224.92.99:61326] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFexrUg-j5GLDtRFnxuQAAAEo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:29:25.308446 2026] [:error] [pid 53585:tid 53596] [client 91.224.92.99:61452] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFhXbCvYsvu6kKhM3PXwAAAAg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:29:36.946980 2026] [:error] [pid 53585:tid 53590] [client 91.224.92.99:61452] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFkHbCvYsvu6kKhM3PnQAAAAI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:29:47.662710 2026] [:error] [pid 53182:tid 53553] [client 91.224.92.99:62282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFm_v073cA6eM1YCTxWwAAAMo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:30:05.716495 2026] [:error] [pid 53585:tid 53608] [client 91.224.92.99:65168] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFrXbCvYsvu6kKhM3QMAAAABQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:30:14.575254 2026] [:error] [pid 53585:tid 53605] [client 91.224.92.99:65168] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFtnbCvYsvu6kKhM3QcAAAABE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:30:25.479386 2026] [:error] [pid 53585:tid 53591] [client 91.224.92.99:65168] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFwXbCvYsvu6kKhM3QzAAAAAM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:30:33.892483 2026] [:error] [pid 53585:tid 53604] [client 91.224.92.99:65168] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSFyXbCvYsvu6kKhM3Q6QAAABA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:30:45.169400 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:65168] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSF1XbCvYsvu6kKhM3RDQAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:30:55.089287 2026] [:error] [pid 53585:tid 53593] [client 91.224.92.99:65168] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSF33bCvYsvu6kKhM3RRwAAAAU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:31:07.206748 2026] [:error] [pid 53180:tid 53468] [client 91.224.92.99:49632] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSF6zPPJpDOBvYnaa1sZQAAAZg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:31:18.922880 2026] [:error] [pid 53180:tid 53466] [client 91.224.92.99:49632] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSF9jPPJpDOBvYnaa1shQAAAZY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:31:31.257938 2026] [:error] [pid 53181:tid 53522] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGA4r_0T1SazTrJOBWxQAAAQc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:31:41.713693 2026] [:error] [pid 53181:tid 53525] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGDYr_0T1SazTrJOBW4gAAAQo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:31:53.222176 2026] [:error] [pid 53181:tid 53514] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGGYr_0T1SazTrJOBW_QAAAQA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:32:03.959234 2026] [:error] [pid 53181:tid 53522] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGI4r_0T1SazTrJOBXHQAAAQc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:32:13.112986 2026] [:error] [pid 53181:tid 53534] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGLYr_0T1SazTrJOBXPQAAARM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:32:23.375402 2026] [:error] [pid 53181:tid 53533] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGN4r_0T1SazTrJOBXWgAAARI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:32:33.200054 2026] [:error] [pid 53181:tid 53516] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGQYr_0T1SazTrJOBXeAAAAQI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:32:43.253735 2026] [:error] [pid 53181:tid 53528] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGS4r_0T1SazTrJOBXigAAAQ0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:32:54.928551 2026] [:error] [pid 53181:tid 53533] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGVor_0T1SazTrJOBXpAAAARI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:04.073331 2026] [:error] [pid 53181:tid 53521] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGYIr_0T1SazTrJOBXwQAAAQY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:14.042364 2026] [:error] [pid 53181:tid 53516] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGaor_0T1SazTrJOBX7QAAAQI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:23.934894 2026] [:error] [pid 53181:tid 53530] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGc4r_0T1SazTrJOBYDwAAAQ8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:33.741686 2026] [:error] [pid 53181:tid 53531] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGfYr_0T1SazTrJOBYJQAAARA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:43.258681 2026] [:error] [pid 53181:tid 53539] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGh4r_0T1SazTrJOBYMwAAARg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:54.562666 2026] [:error] [pid 53181:tid 53517] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGkor_0T1SazTrJOBYPAAAAQM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:33:56.675175 2026] [:error] [pid 53181:tid 53515] [client 91.224.92.99:51164] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSGlIr_0T1SazTrJOBYPgAAAQE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:34:03.713109 2026] [:error] [pid 26940:tid 26956] [client 91.224.92.99:60116] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGmxrUg-j5GLDtRFn7IAAAAEw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:34:17.159263 2026] [:error] [pid 53585:tid 53603] [client 91.224.92.99:51755] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGqXbCvYsvu6kKhM3VPgAAAA8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:34:26.280551 2026] [:error] [pid 53585:tid 53592] [client 91.224.92.99:51755] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGsnbCvYsvu6kKhM3VagAAAAQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:34:35.458786 2026] [:error] [pid 53585:tid 53605] [client 91.224.92.99:51755] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGu3bCvYsvu6kKhM3VhAAAABE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:34:44.181566 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:51755] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGxHbCvYsvu6kKhM3VlgAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:34:55.653934 2026] [:error] [pid 53182:tid 53543] [client 91.224.92.99:53831] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSGz_v073cA6eM1YCT1WAAAAMA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:35:07.960126 2026] [:error] [pid 53182:tid 53561] [client 91.224.92.99:53831] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSG2_v073cA6eM1YCT1dAAAANE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:35:21.246048 2026] [:error] [pid 26940:tid 26966] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSG6RrUg-j5GLDtRFn9CwAAAFY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:35:31.924463 2026] [:error] [pid 26940:tid 26966] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSG8xrUg-j5GLDtRFn9SgAAAFY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:35:40.713133 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSG_BrUg-j5GLDtRFn9awAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:35:51.091822 2026] [:error] [pid 26940:tid 26952] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHBxrUg-j5GLDtRFn9rQAAAEg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:00.812173 2026] [:error] [pid 26940:tid 26961] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHEBrUg-j5GLDtRFn9xQAAAFE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:10.338432 2026] [:error] [pid 26940:tid 26967] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHGhrUg-j5GLDtRFn95gAAAFc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:18.818576 2026] [:error] [pid 26940:tid 26951] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHIhrUg-j5GLDtRFn-EgAAAEc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:28.592515 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHLBrUg-j5GLDtRFn-OgAAAEY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:28.592595 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:62881] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHLBrUg-j5GLDtRFn-OgAAAEY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:37.903687 2026] [:error] [pid 53585:tid 53588] [client 91.224.92.99:50552] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHNXbCvYsvu6kKhM3WpwAAAAA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:47.338976 2026] [:error] [pid 53585:tid 53608] [client 91.224.92.99:50552] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHP3bCvYsvu6kKhM3WqgAAABQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:55.620370 2026] [:error] [pid 53585:tid 53598] [client 91.224.92.99:50552] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHR3bCvYsvu6kKhM3WtgAAAAo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:36:55.620475 2026] [:error] [pid 53585:tid 53598] [client 91.224.92.99:50552] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 13"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHR3bCvYsvu6kKhM3WtgAAAAo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:02.672539 2026] [:error] [pid 26940:tid 26963] [client 91.224.92.99:50564] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHThrUg-j5GLDtRFn_KAAAAFM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:12.673195 2026] [:error] [pid 26940:tid 26953] [client 91.224.92.99:50564] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHWBrUg-j5GLDtRFn_PwAAAEk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:27.578788 2026] [:error] [pid 26940:tid 26951] [client 91.224.92.99:50737] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHZxrUg-j5GLDtRFn_lwAAAEc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:29.154709 2026] [:error] [pid 26940:tid 26967] [client 91.224.92.99:50737] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSHaRrUg-j5GLDtRFn_nAAAAFc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:33.305640 2026] [:error] [pid 26940:tid 26958] [client 91.224.92.99:50611] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSHbRrUg-j5GLDtRFn_qgAAAE4"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:35.610943 2026] [:error] [pid 53180:tid 53447] [client 91.224.92.99:54100] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHbzPPJpDOBvYnaa1vYgAAAYM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:44.831735 2026] [:error] [pid 53180:tid 53459] [client 91.224.92.99:54100] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHeDPPJpDOBvYnaa1vdwAAAY8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:37:53.414450 2026] [:error] [pid 53180:tid 53465] [client 91.224.92.99:54100] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHgTPPJpDOBvYnaa1vfwAAAZU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:08.582273 2026] [:error] [pid 53181:tid 53517] [client 91.224.92.99:63929] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHkIr_0T1SazTrJOBaYQAAAQM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:10.180579 2026] [:error] [pid 53181:tid 53519] [client 91.224.92.99:63929] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 13"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSHkor_0T1SazTrJOBaZAAAAQU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:13.545163 2026] [:error] [pid 53182:tid 53551] [client 91.224.92.99:62555] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHlfv073cA6eM1YCT3RwAAAMg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:15.172433 2026] [:error] [pid 53182:tid 53566] [client 91.224.92.99:62555] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSHl_v073cA6eM1YCT3SQAAANY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:17.477078 2026] [:error] [pid 53585:tid 53595] [client 91.224.92.99:60960] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSHmXbCvYsvu6kKhM3XxgAAAAc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:19.784483 2026] [:error] [pid 53585:tid 53602] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHm3bCvYsvu6kKhM3X1gAAAA4"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:30.645901 2026] [:error] [pid 53585:tid 53609] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHpnbCvYsvu6kKhM3YCAAAABU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:39.488403 2026] [:error] [pid 53585:tid 53607] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHr3bCvYsvu6kKhM3YHwAAABM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:49.591695 2026] [:error] [pid 53585:tid 53603] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHuXbCvYsvu6kKhM3YLQAAAA8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:38:58.195939 2026] [:error] [pid 53585:tid 53595] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHwnbCvYsvu6kKhM3YSwAAAAc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:39:08.472046 2026] [:error] [pid 53585:tid 53603] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSHzHbCvYsvu6kKhM3YYQAAAA8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:39:16.705892 2026] [:error] [pid 53585:tid 53610] [client 91.224.92.99:60961] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSH1HbCvYsvu6kKhM3YkAAAABY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:39:30.243105 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:64815] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSH4hrUg-j5GLDtRFkCAQAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:39:42.434078 2026] [:error] [pid 53585:tid 53594] [client 91.224.92.99:61313] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSH7nbCvYsvu6kKhM3Y1AAAAAY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:39:54.203117 2026] [:error] [pid 53585:tid 53604] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSH-nbCvYsvu6kKhM3ZAwAAABA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:40:04.353627 2026] [:error] [pid 53585:tid 53600] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIBHbCvYsvu6kKhM3ZMwAAAAw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:40:13.113450 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIDXbCvYsvu6kKhM3ZUQAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:40:22.687503 2026] [:error] [pid 53585:tid 53595] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIFnbCvYsvu6kKhM3ZaQAAAAc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:40:31.706229 2026] [:error] [pid 53585:tid 53599] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIH3bCvYsvu6kKhM3ZlgAAAAs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:40:40.875202 2026] [:error] [pid 53585:tid 53590] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIKHbCvYsvu6kKhM3ZwgAAAAI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:40:50.256195 2026] [:error] [pid 53585:tid 53591] [client 91.224.92.99:63673] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIMnbCvYsvu6kKhM3Z-AAAAAM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:41:02.726513 2026] [:error] [pid 26940:tid 26952] [client 91.224.92.99:51310] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIPhrUg-j5GLDtRFkDnAAAAEg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:41:27.964405 2026] [:error] [pid 53180:tid 53451] [client 91.224.92.99:52024] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIVzPPJpDOBvYnaa1wjwAAAYc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:41:38.040093 2026] [:error] [pid 53180:tid 53448] [client 91.224.92.99:52024] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIYjPPJpDOBvYnaa1wnQAAAYQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:41:45.552658 2026] [:error] [pid 53180:tid 53452] [client 91.224.92.99:52024] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIaTPPJpDOBvYnaa1wsAAAAYg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:41:45.552792 2026] [:error] [pid 53180:tid 53452] [client 91.224.92.99:52024] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 14"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIaTPPJpDOBvYnaa1wsAAAAYg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:41:53.541816 2026] [:error] [pid 53182:tid 53568] [client 91.224.92.99:50709] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIcfv073cA6eM1YCT5rAAAANg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:04.584550 2026] [:error] [pid 53182:tid 53560] [client 91.224.92.99:50709] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIfPv073cA6eM1YCT51gAAANA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:14.171477 2026] [:error] [pid 53182:tid 53545] [client 91.224.92.99:50709] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIhvv073cA6eM1YCT5-AAAAMI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:14.171551 2026] [:error] [pid 53182:tid 53545] [client 91.224.92.99:50709] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIhvv073cA6eM1YCT5-AAAAMI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:23.346179 2026] [:error] [pid 26940:tid 26948] [client 91.224.92.99:60657] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIjxrUg-j5GLDtRFkFnwAAAEQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:32.346077 2026] [:error] [pid 26940:tid 26956] [client 91.224.92.99:60657] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSImBrUg-j5GLDtRFkGAAAAAEw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:32.346119 2026] [:error] [pid 26940:tid 26956] [client 91.224.92.99:60657] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSImBrUg-j5GLDtRFkGAAAAAEw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:40.244185 2026] [:error] [pid 53585:tid 53612] [client 91.224.92.99:52855] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIoHbCvYsvu6kKhM3bkQAAABg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:40.244260 2026] [:error] [pid 53585:tid 53612] [client 91.224.92.99:52855] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 13"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIoHbCvYsvu6kKhM3bkQAAABg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:49.640028 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:64882] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIqRrUg-j5GLDtRFkGRAAAAEY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:42:59.324278 2026] [:error] [pid 26940:tid 26951] [client 91.224.92.99:64882] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIsxrUg-j5GLDtRFkGdQAAAEc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:43:10.223924 2026] [:error] [pid 26940:tid 26968] [client 91.224.92.99:64882] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIvhrUg-j5GLDtRFkGkAAAAFg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:43:25.137748 2026] [:error] [pid 53180:tid 53460] [client 91.224.92.99:60028] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSIzTPPJpDOBvYnaa1w_wAAAZA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:43:39.965740 2026] [:error] [pid 53180:tid 53468] [client 91.224.92.99:54764] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSI2zPPJpDOBvYnaa1xCgAAAZg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:43:53.264902 2026] [:error] [pid 53181:tid 53516] [client 91.224.92.99:57755] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSI6Yr_0T1SazTrJOBdvAAAAQI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:44:07.157219 2026] [:error] [pid 53181:tid 53527] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSI94r_0T1SazTrJOBd1QAAAQw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:44:14.801406 2026] [:error] [pid 53181:tid 53533] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSI_or_0T1SazTrJOBd4QAAARI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:44:25.630456 2026] [:error] [pid 53181:tid 53539] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJCYr_0T1SazTrJOBeAwAAARg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:44:34.380806 2026] [:error] [pid 53181:tid 53535] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJEor_0T1SazTrJOBeFQAAARQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:44:44.384807 2026] [:error] [pid 53181:tid 53515] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJHIr_0T1SazTrJOBeMgAAAQE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:44:54.524969 2026] [:error] [pid 53181:tid 53525] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJJor_0T1SazTrJOBeQQAAAQo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:04.448913 2026] [:error] [pid 53181:tid 53522] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJMIr_0T1SazTrJOBeUgAAAQc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:15.117097 2026] [:error] [pid 53181:tid 53527] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJO4r_0T1SazTrJOBebAAAAQw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:15.117184 2026] [:error] [pid 53181:tid 53527] [client 91.224.92.99:50282] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 14"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJO4r_0T1SazTrJOBebAAAAQw"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:23.549004 2026] [:error] [pid 53181:tid 53519] [client 91.224.92.99:56272] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJQ4r_0T1SazTrJOBefQAAAQU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:33.376126 2026] [:error] [pid 53181:tid 53528] [client 91.224.92.99:56272] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJTYr_0T1SazTrJOBemAAAAQ0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:35.633809 2026] [:error] [pid 53181:tid 53529] [client 91.224.92.99:56272] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 14"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSJT4r_0T1SazTrJOBemwAAAQ4"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:37.409549 2026] [:error] [pid 53182:tid 53550] [client 91.224.92.99:57200] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 14"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSJUfv073cA6eM1YCT8EQAAAMc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:38.837884 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:59328] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 14"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aaSJUhrUg-j5GLDtRFkKQQAAAEY"]
[Mon Mar 02 02:45:48.933629 2026] [:error] [pid 53182:tid 53560] [client 91.224.92.99:63406] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aaSJXPv073cA6eM1YCT8MQAAANA"]
[Mon Mar 02 02:45:49.281809 2026] [:error] [pid 53182:tid 53545] [client 91.224.92.99:63406] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJXfv073cA6eM1YCT8MwAAAMI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:45:58.747877 2026] [:error] [pid 53182:tid 53545] [client 91.224.92.99:63406] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJZvv073cA6eM1YCT8TAAAAMI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:08.085960 2026] [:error] [pid 53182:tid 53560] [client 91.224.92.99:63406] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJcPv073cA6eM1YCT8aQAAANA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:18.756593 2026] [:error] [pid 53182:tid 53551] [client 91.224.92.99:63406] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJevv073cA6eM1YCT8hwAAAMg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:18.756649 2026] [:error] [pid 53182:tid 53551] [client 91.224.92.99:63406] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJevv073cA6eM1YCT8hwAAAMg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:32.205305 2026] [:error] [pid 53180:tid 53460] [client 91.224.92.99:51581] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJiDPPJpDOBvYnaa1yZAAAAZA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:42.298302 2026] [:error] [pid 53180:tid 53453] [client 91.224.92.99:51581] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJkjPPJpDOBvYnaa1ydQAAAYk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:51.453596 2026] [:error] [pid 53180:tid 53465] [client 91.224.92.99:51581] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJmzPPJpDOBvYnaa1yjgAAAZU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:51.453682 2026] [:error] [pid 53180:tid 53465] [client 91.224.92.99:51581] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 15"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJmzPPJpDOBvYnaa1yjgAAAZU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:46:59.387729 2026] [:error] [pid 26940:tid 26949] [client 91.224.92.99:59210] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJoxrUg-j5GLDtRFkL9AAAAEU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:10.108176 2026] [:error] [pid 26940:tid 26958] [client 91.224.92.99:59210] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJrhrUg-j5GLDtRFkMHAAAAE4"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:11.669071 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:59210] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 15"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSJrxrUg-j5GLDtRFkMJwAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:13.055847 2026] [:error] [pid 53182:tid 53553] [client 91.224.92.99:52987] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 15"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSJsfv073cA6eM1YCT9IQAAAMo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:14.443453 2026] [:error] [pid 26940:tid 26958] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJshrUg-j5GLDtRFkMNQAAAE4"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:26.380580 2026] [:error] [pid 26940:tid 26948] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJvhrUg-j5GLDtRFkMrAAAAEQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:36.004368 2026] [:error] [pid 26940:tid 26961] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJyBrUg-j5GLDtRFkM6QAAAFE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:46.867475 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJ0hrUg-j5GLDtRFkNZwAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:47:58.233539 2026] [:error] [pid 26940:tid 26953] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJ3hrUg-j5GLDtRFkNigAAAEk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:48:08.199214 2026] [:error] [pid 26940:tid 26953] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJ6BrUg-j5GLDtRFkNuQAAAEk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:48:17.220740 2026] [:error] [pid 26940:tid 26955] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJ8RrUg-j5GLDtRFkNzgAAAEs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:48:25.437552 2026] [:error] [pid 26940:tid 26955] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSJ-RrUg-j5GLDtRFkN3AAAAEs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:48:36.672069 2026] [:error] [pid 26940:tid 26952] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKBBrUg-j5GLDtRFkOEQAAAEg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:48:45.476785 2026] [:error] [pid 26940:tid 26959] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKDRrUg-j5GLDtRFkOPQAAAE8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:48:56.182272 2026] [:error] [pid 26940:tid 26967] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKGBrUg-j5GLDtRFkOXgAAAFc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:08.123070 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKJBrUg-j5GLDtRFkOfgAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:08.123146 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:60171] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKJBrUg-j5GLDtRFkOfgAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:16.285233 2026] [:error] [pid 26940:tid 26952] [client 91.224.92.99:50471] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKLBrUg-j5GLDtRFkOqAAAAEg"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:24.527174 2026] [:error] [pid 26940:tid 26964] [client 91.224.92.99:50471] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKNBrUg-j5GLDtRFkOwwAAAFQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:32.455546 2026] [:error] [pid 26940:tid 26945] [client 91.224.92.99:50471] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKPBrUg-j5GLDtRFkO5QAAAEE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:34.038364 2026] [:error] [pid 26940:tid 26955] [client 91.224.92.99:50471] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKPhrUg-j5GLDtRFkO7AAAAEs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:35.435764 2026] [:error] [pid 53180:tid 53466] [client 91.224.92.99:49460] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKPzPPJpDOBvYnaa1ziQAAAZY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:36.836529 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:49478] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKQBrUg-j5GLDtRFkO-AAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:49:50.915456 2026] [:error] [pid 53182:tid 53562] [client 91.224.92.99:64962] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKTvv073cA6eM1YCT_RwAAANI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:00.606283 2026] [:error] [pid 53182:tid 53565] [client 91.224.92.99:64962] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKWPv073cA6eM1YCT_TQAAANU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:02.532328 2026] [:error] [pid 53182:tid 53557] [client 91.224.92.99:64962] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKWvv073cA6eM1YCT_TgAAAM0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:04.385005 2026] [:error] [pid 26940:tid 26945] [client 91.224.92.99:49580] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKXBrUg-j5GLDtRFkPWwAAAEE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:10.107060 2026] [:error] [pid 53180:tid 53465] [client 91.224.92.99:52473] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKYjPPJpDOBvYnaa1zrQAAAZU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:12.273668 2026] [:error] [pid 53180:tid 53445] [client 91.224.92.99:52473] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKZDPPJpDOBvYnaa1zsgAAAYE"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:16.219267 2026] [:error] [pid 26940:tid 26960] [client 91.224.92.99:56725] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKaBrUg-j5GLDtRFkPggAAAFA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:17.843520 2026] [:error] [pid 26940:tid 26944] [client 91.224.92.99:56725] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKaRrUg-j5GLDtRFkPhgAAAEA"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:19.241442 2026] [:error] [pid 53182:tid 53548] [client 91.224.92.99:50071] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKa_v073cA6eM1YCT_dAAAAMU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:20.583668 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:63698] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKbBrUg-j5GLDtRFkPkAAAAEY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:29.948082 2026] [:error] [pid 26940:tid 26951] [client 91.224.92.99:63698] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKdRrUg-j5GLDtRFkPtAAAAEc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:40.048875 2026] [:error] [pid 26940:tid 26950] [client 91.224.92.99:63698] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKgBrUg-j5GLDtRFkP0AAAAEY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:48.688348 2026] [:error] [pid 26940:tid 26948] [client 91.224.92.99:63698] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKiBrUg-j5GLDtRFkP6gAAAEQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:50.210689 2026] [:error] [pid 26940:tid 26962] [client 91.224.92.99:63698] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 15"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKihrUg-j5GLDtRFkP9gAAAFI"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:52.676219 2026] [:error] [pid 53181:tid 53537] [client 91.224.92.99:59444] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 15"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSKjIr_0T1SazTrJOBheAAAARY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:57.117304 2026] [:error] [pid 53182:tid 53555] [client 91.224.92.99:61556] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKkfv073cA6eM1YCT_sAAAAMs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:50:57.117457 2026] [:error] [pid 53182:tid 53555] [client 91.224.92.99:61556] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKkfv073cA6eM1YCT_sAAAAMs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:09.640290 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:62483] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKnXbCvYsvu6kKhM3iiQAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:18.915641 2026] [:error] [pid 53585:tid 53597] [client 91.224.92.99:62483] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKpnbCvYsvu6kKhM3ipQAAAAk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:27.500883 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:62483] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKr3bCvYsvu6kKhM3iqwAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:27.500986 2026] [:error] [pid 53585:tid 53601] [client 91.224.92.99:62483] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 12"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKr3bCvYsvu6kKhM3iqwAAAA0"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:40.398729 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:65443] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKvBrUg-j5GLDtRFkQlAAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:40.398812 2026] [:error] [pid 26940:tid 26965] [client 91.224.92.99:65443] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 16"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKvBrUg-j5GLDtRFkQlAAAAFU"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:51.584475 2026] [:error] [pid 53181:tid 53530] [client 91.224.92.99:55391] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKx4r_0T1SazTrJOBhqwAAAQ8"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:51:59.674827 2026] [:error] [pid 53181:tid 53524] [client 91.224.92.99:55391] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSKz4r_0T1SazTrJOBhugAAAQk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:08.307110 2026] [:error] [pid 53181:tid 53526] [client 91.224.92.99:55391] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK2Ir_0T1SazTrJOBhyQAAAQs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:08.307175 2026] [:error] [pid 53181:tid 53526] [client 91.224.92.99:55391] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 17"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK2Ir_0T1SazTrJOBhyQAAAQs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:17.397364 2026] [:error] [pid 53181:tid 53526] [client 91.224.92.99:60422] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK4Yr_0T1SazTrJOBh1AAAAQs"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:19.003136 2026] [:error] [pid 53181:tid 53522] [client 91.224.92.99:60422] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSK44r_0T1SazTrJOBh3AAAAQc"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:21.243893 2026] [:error] [pid 53181:tid 53525] [client 91.224.92.99:55184] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSK5Yr_0T1SazTrJOBh5AAAAQo"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:22.681570 2026] [:error] [pid 53181:tid 53518] [client 91.224.92.99:61846] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK5or_0T1SazTrJOBh6AAAAQQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:22.681616 2026] [:error] [pid 53181:tid 53518] [client 91.224.92.99:61846] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 13"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK5or_0T1SazTrJOBh6AAAAQQ"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:27.257998 2026] [:error] [pid 26940:tid 26963] [client 91.224.92.99:56823] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSK6xrUg-j5GLDtRFkRewAAAFM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:28.688180 2026] [:error] [pid 53180:tid 53463] [client 91.224.92.99:55418] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK7DPPJpDOBvYnaa10iQAAAZM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:39.026150 2026] [:error] [pid 53180:tid 53453] [client 91.224.92.99:55418] [client 91.224.92.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.224.92.99, incrementing brute counter"] [hostname "end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "aaSK9zPPJpDOBvYnaa10lwAAAYk"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:40.995431 2026] [:error] [pid 53180:tid 53466] [client 91.224.92.99:55418] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSK-DPPJpDOBvYnaa10mwAAAZY"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 02:52:42.413402 2026] [:error] [pid 53585:tid 53607] [client 91.224.92.99:54724] [client 91.224.92.99] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 91.224.92.99 on wp-login.php, counter = 11"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaSK-nbCvYsvu6kKhM3j_QAAABM"], referer: https://end2end.hostone.com.au/wp-login.php
[Mon Mar 02 05:41:04.745988 2026] [:error] [pid 28795:tid 28874] [client 20.111.28.66:14531] [client 20.111.28.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaSycLROd53wZBkdI_caYQAAAIs"]
[Mon Mar 02 05:41:07.472249 2026] [:error] [pid 28793:tid 28808] [client 20.111.28.66:17027] [client 20.111.28.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaSycw2_fxBANaHo1f4EtAAAAAE"]
[Mon Mar 02 05:41:09.477345 2026] [:error] [pid 28908:tid 28934] [client 20.111.28.66:33537] [client 20.111.28.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaSydYqJmC8ih_lQQnD2sgAAANg"]
[Mon Mar 02 05:41:12.748797 2026] [:error] [pid 28793:tid 28812] [client 20.111.28.66:28265] [client 20.111.28.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaSyeA2_fxBANaHo1f4EvAAAAAU"]
[Wed Mar 04 13:01:35.930645 2026] [:error] [pid 18681:tid 18705] [client 43.228.157.73:52144] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aae8r6E_TuZYUBveWkUowAAAANY"]
[Wed Mar 04 13:01:36.491810 2026] [:error] [pid 45947:tid 46047] [client 43.228.157.73:52340] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aae8sEQXEtszYKy6sasUoQAAAU8"]
[Wed Mar 04 13:01:37.129744 2026] [:error] [pid 18554:tid 18602] [client 43.228.157.73:52561] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aae8sZ0fKmKeTIK7QS3LYAAAAEo"]
[Wed Mar 04 13:01:37.744374 2026] [:error] [pid 45947:tid 46044] [client 43.228.157.73:52796] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aae8sUQXEtszYKy6sasUzgAAAUw"]
[Wed Mar 04 13:01:38.306335 2026] [:error] [pid 54487:tid 54508] [client 43.228.157.73:53014] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aae8svN8030QMpFXddteJwAAARM"]
[Tue Mar 10 04:00:45.830037 2026] [:error] [pid 61803:tid 61849] [client 104.28.159.135:25744] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aa8m7fIk-IG8h3wtrt7DKgAAAEk"]
[Tue Mar 10 07:04:17.137138 2026] [:error] [pid 31977:tid 32113] [client 185.94.34.52:14341] [client 185.94.34.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-config.php.1"] [unique_id "aa9R8S_lkX6-Mo89SmHmIQAAAEg"]
[Tue Mar 10 07:04:17.169120 2026] [:error] [pid 37324:tid 37344] [client 185.212.115.115:30029] [client 185.212.115.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-config.php.old"] [unique_id "aa9R8WVvKYS3ogzUMPdI1wAAAQM"]
[Tue Mar 10 07:04:17.249639 2026] [:error] [pid 37324:tid 37361] [client 199.96.165.136:59233] [client 199.96.165.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-config.php.3"] [unique_id "aa9R8WVvKYS3ogzUMPdI2AAAARQ"]
[Tue Mar 10 07:04:17.363909 2026] [:error] [pid 37324:tid 37349] [client 167.253.49.118:62795] [client 167.253.49.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-config.bak"] [unique_id "aa9R8WVvKYS3ogzUMPdI2QAAAQg"]
[Tue Mar 10 07:04:17.507807 2026] [:error] [pid 37324:tid 37363] [client 45.148.233.218:10075] [client 45.148.233.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-config.php.original"] [unique_id "aa9R8WVvKYS3ogzUMPdI2wAAARY"]
[Tue Mar 10 07:04:17.735493 2026] [:error] [pid 37324:tid 37356] [client 45.88.13.151:13681] [client 45.88.13.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.88.13.151, incrementing ddos counter"] [hostname "www.end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "aa9R8WVvKYS3ogzUMPdI3AAAAQ8"]
[Tue Mar 10 07:04:18.029148 2026] [:error] [pid 37324:tid 37342] [client 122.8.92.192:53517] [client 122.8.92.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-config.php.copy"] [unique_id "aa9R8mVvKYS3ogzUMPdI4AAAAQE"]
[Thu Mar 12 16:17:05.220043 2026] [:error] [pid 8249:tid 8252] [client 194.180.48.253:46844] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "abJ2gSK5dL3-8Jdf0M3PcAAAAQE"]
[Wed Mar 18 14:49:46.788131 2026] [:error] [pid 31232:tid 31243] [client 85.11.167.108:58662] [client 85.11.167.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.11.167.108, incrementing brute counter"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-login.php"] [unique_id "abpLCmX6HV7dqh3BQD0OrQAAAEg"]
[Sat Mar 21 01:02:59.751068 2026] [:error] [pid 62754:tid 62827] [client 216.45.61.243:55090] [client 216.45.61.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.end2end.hostone.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "ab19wxwXN_jHGJ5L7yFS3wAAAAw"], referer: https://www.google.com
[Tue Mar 24 22:17:09.009667 2026] [:error] [pid 38767:tid 38777] [client 45.94.31.99:54973] [client 45.94.31.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "acKc5fwkUqN4GJAI5oVpLwAAAQc"]
[Tue Mar 24 22:17:10.016192 2026] [:error] [pid 64198:tid 64204] [client 45.94.31.99:58235] [client 45.94.31.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "acKc5nVzJqf6OS_oSZ3bawAAAUQ"]
[Tue Mar 24 22:17:11.041779 2026] [:error] [pid 38767:tid 38786] [client 45.94.31.99:61647] [client 45.94.31.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "acKc5_wkUqN4GJAI5oVpPgAAARA"]
[Tue Mar 24 22:17:12.027410 2026] [:error] [pid 64198:tid 64213] [client 45.94.31.99:49529] [client 45.94.31.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "acKc6HVzJqf6OS_oSZ3bdQAAAU0"]
[Tue Mar 24 22:17:13.021326 2026] [:error] [pid 48128:tid 48165] [client 45.94.31.99:52381] [client 45.94.31.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "acKc6cvR4LIMFLbM5VlDJgAAAY0"]
[Fri Mar 27 08:07:48.852364 2026] [:error] [pid 4293:tid 4309] [client 216.81.200.75:55026] [client 216.81.200.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "acXKVJLjeJUC3OKtEx-t8AAAAU4"]
[Fri Apr 03 13:04:09.406340 2026] [:error] [pid 33542:tid 33561] [client 185.220.101.22:46220] [client 185.220.101.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "ac9KSXwb6uB1LaGtepahoQAAANA"]
[Fri Apr 03 13:04:11.486465 2026] [:error] [pid 35469:tid 35477] [client 124.198.131.133:42100] [client 124.198.131.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "ac9KS6GvTIc8-wY3jUSImQAAAQY"]
[Fri Apr 03 13:04:19.852104 2026] [:error] [pid 33446:tid 33489] [client 185.220.101.139:50013] [client 185.220.101.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "ac9KU9g3dCqFYIIdw0qF3gAAAEw"]
[Fri Apr 03 13:04:22.785031 2026] [:error] [pid 35469:tid 35484] [client 194.32.107.14:48402] [client 194.32.107.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "ac9KVqGvTIc8-wY3jUSIwwAAAQ0"]
[Fri Apr 03 13:04:50.119802 2026] [:error] [pid 33542:tid 33564] [client 185.246.188.149:59822] [client 185.246.188.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/.DS_Store"] [unique_id "ac9Kcnwb6uB1LaGtepahuwAAANM"]
[Sun Apr 05 06:25:46.160515 2026] [:error] [pid 45409:tid 45421] [client 216.73.216.161:25293] [client 216.73.216.161] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||end2end.hostone.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "end2end.hostone.com.au"] [uri "/robots.txt"] [unique_id "adGP6tHt_Oyw03gjCNjiYwAAAMo"]
[Mon Apr 06 22:40:25.027325 2026] [:error] [pid 10280:tid 10288] [client 178.128.105.125:49672] [client 178.128.105.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "adPF2V8QUJkf8g-BFfM1MgAAAcU"]
[Sat Apr 11 18:11:26.399845 2026] [proxy_fcgi:error] [pid 54519:tid 54557] [client 43.165.1.59:51895] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 3933'
[Sun Apr 12 10:57:19.400757 2026] [proxy_fcgi:error] [pid 25327:tid 25348] [client 161.35.229.10:59118] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 3933'
[Sun Apr 12 10:57:21.512587 2026] [proxy_fcgi:error] [pid 25327:tid 25353] [client 161.35.229.10:44228] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 3933'
[Sun Apr 12 18:58:49.712061 2026] [proxy_fcgi:error] [pid 26599:tid 26614] [client 207.46.13.168:63793] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 12 23:28:43.374016 2026] [:error] [pid 26567:tid 26585] [client 118.107.44.76:2647] [client 118.107.44.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||end2end.hostone.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "adu6K3hRpg6ptWFyFx3ergAAARA"]
[Sun Apr 12 23:28:45.251732 2026] [proxy_fcgi:error] [pid 26567:tid 26585] [client 118.107.44.76:2647] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 12 23:56:12.807103 2026] [proxy_fcgi:error] [pid 26599:tid 26624] [client 157.55.39.204:54941] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Mon Apr 13 14:20:16.777271 2026] [proxy_fcgi:error] [pid 63406:tid 63424] [client 34.187.164.100:33074] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Mon Apr 13 14:20:16.803845 2026] [proxy_fcgi:error] [pid 63406:tid 63431] [client 34.187.164.100:33266] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Mon Apr 13 14:20:18.418232 2026] [proxy_fcgi:error] [pid 63311:tid 63394] [client 34.187.164.100:33272] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Mon Apr 13 14:20:18.845791 2026] [proxy_fcgi:error] [pid 57183:tid 57188] [client 34.187.164.100:33082] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 14 03:59:40.829751 2026] [proxy_fcgi:error] [pid 19687:tid 19717] [client 65.87.7.61:57148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 14 03:59:51.023554 2026] [proxy_fcgi:error] [pid 19688:tid 19738] [client 65.87.7.61:24234] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 14 04:07:29.723188 2026] [proxy_fcgi:error] [pid 19688:tid 19729] [client 216.73.216.181:43723] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 14 04:07:29.934673 2026] [:error] [pid 19688:tid 19728] [client 216.73.216.181:43723] [client 216.73.216.181] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||end2end.hostone.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "end2end.hostone.com.au"] [uri "/robots.txt"] [unique_id "ad1NAYHoi57o76xPstKqdAAAAEA"]
[Tue Apr 14 04:07:31.232669 2026] [proxy_fcgi:error] [pid 19688:tid 19728] [client 216.73.216.181:43723] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 14 04:07:32.716540 2026] [proxy_fcgi:error] [pid 19688:tid 19731] [client 216.73.216.181:43723] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 14 11:03:03.238588 2026] [proxy_fcgi:error] [pid 37226:tid 37252] [client 45.153.34.235:6900] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:36.160441 2026] [proxy_fcgi:error] [pid 17734:tid 17747] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:39.042454 2026] [proxy_fcgi:error] [pid 17734:tid 17757] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:40.764256 2026] [proxy_fcgi:error] [pid 17734:tid 17750] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:42.842295 2026] [proxy_fcgi:error] [pid 17734:tid 17743] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:45.071213 2026] [proxy_fcgi:error] [pid 17734:tid 17739] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:48.137741 2026] [proxy_fcgi:error] [pid 17734:tid 17749] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:50.173771 2026] [proxy_fcgi:error] [pid 17734:tid 17763] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:52.246222 2026] [proxy_fcgi:error] [pid 17734:tid 17739] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:53.684858 2026] [proxy_fcgi:error] [pid 17734:tid 17751] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:55.721919 2026] [proxy_fcgi:error] [pid 17734:tid 17746] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:57.748004 2026] [proxy_fcgi:error] [pid 17734:tid 17744] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:07:59.830587 2026] [proxy_fcgi:error] [pid 17734:tid 17758] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:08:01.336830 2026] [proxy_fcgi:error] [pid 17734:tid 17741] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:08:03.405890 2026] [proxy_fcgi:error] [pid 17734:tid 17755] [client 20.107.203.74:25386] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:08:03.666558 2026] [:error] [pid 17734:tid 17752] [client 20.107.203.74:25386] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "ad50c9N3xsztF3DFLWz98QAAAI0"]
[Wed Apr 15 01:08:04.395982 2026] [:error] [pid 17866:tid 17892] [client 20.107.203.74:61613] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "ad50dLx_17kv70EUVIlDeAAAAZg"]
[Wed Apr 15 01:08:05.064686 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:43136] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "ad50davogcWlrafOEaG-jgAAAQM"]
[Wed Apr 15 01:08:05.642932 2026] [:error] [pid 17804:tid 17813] [client 20.107.203.74:23547] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "ad50dQAZKYxfpamecKd9BQAAAMM"]
[Wed Apr 15 01:08:06.295380 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:23529] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ad50dhng-JDNFCa0BnhqzAAAAAE"]
[Wed Apr 15 01:08:06.833662 2026] [:error] [pid 62432:tid 62448] [client 20.107.203.74:23497] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ad50drPtNET7V_vfTPfQlAAAAU0"]
[Wed Apr 15 01:08:07.438503 2026] [:error] [pid 17866:tid 17880] [client 20.107.203.74:33918] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ad50d7x_17kv70EUVIlDewAAAYw"]
[Wed Apr 15 01:08:07.978156 2026] [:error] [pid 17804:tid 17815] [client 20.107.203.74:43160] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ad50dwAZKYxfpamecKd9BwAAAMU"]
[Wed Apr 15 01:08:08.567964 2026] [:error] [pid 62296:tid 62329] [client 20.107.203.74:30243] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "ad50eMTNd04nWM2DK4SDWAAAAEI"]
[Wed Apr 15 01:08:09.124694 2026] [:error] [pid 17866:tid 17877] [client 20.107.203.74:30241] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "ad50ebx_17kv70EUVIlDfgAAAYk"]
[Wed Apr 15 01:08:09.650250 2026] [:error] [pid 17866:tid 17882] [client 20.107.203.74:23536] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "ad50ebx_17kv70EUVIlDfwAAAY4"]
[Wed Apr 15 01:08:10.362737 2026] [:error] [pid 62295:tid 62303] [client 20.107.203.74:22395] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "ad50ehng-JDNFCa0Bnhq2AAAAAQ"]
[Wed Apr 15 01:08:10.873581 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:33868] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "ad50eqvogcWlrafOEaG-ogAAARY"]
[Wed Apr 15 01:08:11.372948 2026] [:error] [pid 62297:tid 62369] [client 20.107.203.74:22380] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "ad50e6vogcWlrafOEaG-pAAAAQ8"]
[Wed Apr 15 01:08:11.946499 2026] [:error] [pid 62432:tid 62457] [client 20.107.203.74:23549] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "ad50e7PtNET7V_vfTPfQlwAAAVY"]
[Wed Apr 15 01:08:12.468663 2026] [:error] [pid 62297:tid 62366] [client 20.107.203.74:29977] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "ad50fKvogcWlrafOEaG-qQAAAQw"]
[Wed Apr 15 01:08:13.057622 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:33870] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "ad50favogcWlrafOEaG-rAAAARc"]
[Wed Apr 15 01:08:13.631097 2026] [:error] [pid 62297:tid 62374] [client 20.107.203.74:59928] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "ad50favogcWlrafOEaG-rwAAARQ"]
[Wed Apr 15 01:08:14.263279 2026] [:error] [pid 17734:tid 17752] [client 20.107.203.74:22372] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "ad50ftN3xsztF3DFLWz-HQAAAI0"]
[Wed Apr 15 01:08:14.782302 2026] [:error] [pid 62432:tid 62439] [client 20.107.203.74:24649] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "ad50frPtNET7V_vfTPfQmQAAAUQ"]
[Wed Apr 15 01:08:15.553249 2026] [:error] [pid 17804:tid 17818] [client 20.107.203.74:59295] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/water.php"] [unique_id "ad50fwAZKYxfpamecKd9FwAAAMg"]
[Wed Apr 15 01:08:16.120070 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:25426] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/water.php"] [unique_id "ad50gKvogcWlrafOEaG-ugAAAQE"]
[Wed Apr 15 01:08:16.816534 2026] [:error] [pid 17866:tid 17876] [client 20.107.203.74:24669] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/water.php"] [unique_id "ad50gLx_17kv70EUVIlDhQAAAYg"]
[Wed Apr 15 01:08:17.397394 2026] [:error] [pid 17734:tid 17741] [client 20.107.203.74:30268] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/water.php"] [unique_id "ad50gdN3xsztF3DFLWz-LgAAAII"]
[Wed Apr 15 01:08:18.037679 2026] [:error] [pid 62297:tid 62363] [client 20.107.203.74:45155] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad50gqvogcWlrafOEaG-vwAAAQk"]
[Wed Apr 15 01:08:18.669068 2026] [:error] [pid 17804:tid 17817] [client 20.107.203.74:45146] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad50ggAZKYxfpamecKd9GQAAAMc"]
[Wed Apr 15 01:08:19.220129 2026] [:error] [pid 62297:tid 62367] [client 20.107.203.74:49665] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad50g6vogcWlrafOEaG-wwAAAQ0"]
[Wed Apr 15 01:08:19.830410 2026] [:error] [pid 17866:tid 17882] [client 20.107.203.74:29964] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/red.php"] [unique_id "ad50g7x_17kv70EUVIlDhwAAAY4"]
[Wed Apr 15 01:08:20.340772 2026] [:error] [pid 17866:tid 17885] [client 20.107.203.74:48624] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "ad50hLx_17kv70EUVIlDigAAAZE"]
[Wed Apr 15 01:08:21.012204 2026] [:error] [pid 17866:tid 17868] [client 20.107.203.74:33899] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "ad50hbx_17kv70EUVIlDjAAAAYA"]
[Wed Apr 15 01:08:21.569794 2026] [:error] [pid 62296:tid 62327] [client 20.107.203.74:23534] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "ad50hcTNd04nWM2DK4SDZgAAAEA"]
[Wed Apr 15 01:08:22.170609 2026] [:error] [pid 17734:tid 17739] [client 20.107.203.74:22390] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "ad50htN3xsztF3DFLWz-RQAAAIA"]
[Wed Apr 15 01:08:22.700473 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:54990] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "ad50hhng-JDNFCa0Bnhq7AAAAAY"]
[Wed Apr 15 01:08:23.343644 2026] [:error] [pid 17926:tid 17951] [client 20.107.203.74:48626] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "ad50h_KxFvgDwMI04zBSZAAAAdI"]
[Wed Apr 15 01:08:23.974323 2026] [:error] [pid 17926:tid 17938] [client 20.107.203.74:54994] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "ad50h_KxFvgDwMI04zBSZgAAAcU"]
[Wed Apr 15 01:08:24.497944 2026] [:error] [pid 17866:tid 17870] [client 20.107.203.74:30329] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "ad50iLx_17kv70EUVIlDjwAAAYI"]
[Wed Apr 15 01:08:25.046103 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:33902] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ad50idN3xsztF3DFLWz-TQAAAJA"]
[Wed Apr 15 01:08:25.646494 2026] [:error] [pid 62432:tid 62446] [client 20.107.203.74:58507] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ad50ibPtNET7V_vfTPfQoQAAAUs"]
[Wed Apr 15 01:08:26.370569 2026] [:error] [pid 62296:tid 62345] [client 20.107.203.74:49684] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ad50isTNd04nWM2DK4SDagAAAFI"]
[Wed Apr 15 01:08:26.895913 2026] [:error] [pid 17734:tid 17748] [client 20.107.203.74:22392] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ad50itN3xsztF3DFLWz-UwAAAIk"]
[Wed Apr 15 01:08:27.562503 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:48629] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "ad50ixng-JDNFCa0Bnhq_gAAAAY"]
[Wed Apr 15 01:08:28.164782 2026] [:error] [pid 62295:tid 62318] [client 20.107.203.74:54986] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "ad50jBng-JDNFCa0BnhrAQAAABM"]
[Wed Apr 15 01:08:28.737704 2026] [:error] [pid 17926:tid 17934] [client 20.107.203.74:58529] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "ad50jPKxFvgDwMI04zBSawAAAcE"]
[Wed Apr 15 01:08:29.389428 2026] [:error] [pid 17926:tid 17948] [client 20.107.203.74:29972] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "ad50jfKxFvgDwMI04zBSbAAAAc8"]
[Wed Apr 15 01:08:30.173912 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:22779] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad50jqvogcWlrafOEaG-0gAAAQE"]
[Wed Apr 15 01:08:30.899582 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:49716] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad50jqvogcWlrafOEaG-1AAAARM"]
[Wed Apr 15 01:08:31.487212 2026] [:error] [pid 17734:tid 17752] [client 20.107.203.74:30225] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad50j9N3xsztF3DFLWz-agAAAI0"]
[Wed Apr 15 01:08:32.191114 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:22345] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ad50kNN3xsztF3DFLWz-bwAAAJY"]
[Wed Apr 15 01:08:32.759173 2026] [:error] [pid 62295:tid 62318] [client 20.107.203.74:26674] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ad50kBng-JDNFCa0BnhrEQAAABM"]
[Wed Apr 15 01:08:33.478961 2026] [:error] [pid 62297:tid 62369] [client 20.107.203.74:8825] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ad50kavogcWlrafOEaG-4AAAAQ8"]
[Wed Apr 15 01:08:34.321406 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:22388] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ad50khng-JDNFCa0BnhrFgAAABY"]
[Wed Apr 15 01:08:35.046437 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:30300] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ad50kxng-JDNFCa0BnhrGwAAAA0"]
[Wed Apr 15 01:08:35.785433 2026] [:error] [pid 62295:tid 62314] [client 20.107.203.74:49690] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad50kxng-JDNFCa0BnhrIQAAAA8"]
[Wed Apr 15 01:08:36.396441 2026] [:error] [pid 62296:tid 62327] [client 20.107.203.74:22385] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad50lMTNd04nWM2DK4SDgQAAAEA"]
[Wed Apr 15 01:08:37.047759 2026] [:error] [pid 17926:tid 17956] [client 20.107.203.74:45120] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad50lfKxFvgDwMI04zBSbgAAAdc"]
[Wed Apr 15 01:08:37.830056 2026] [:error] [pid 62432:tid 62454] [client 20.107.203.74:45155] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad50lbPtNET7V_vfTPfQpwAAAVM"]
[Wed Apr 15 01:08:38.641816 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:30289] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "ad50lhng-JDNFCa0BnhrLQAAAAE"]
[Wed Apr 15 01:08:39.650323 2026] [:error] [pid 17926:tid 17940] [client 20.107.203.74:49726] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "ad50l_KxFvgDwMI04zBSbwAAAcc"]
[Wed Apr 15 01:08:40.787867 2026] [:error] [pid 17734:tid 17762] [client 20.107.203.74:30315] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "ad50mNN3xsztF3DFLWz-mwAAAJc"]
[Wed Apr 15 01:08:41.388005 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:48619] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "ad50mRng-JDNFCa0BnhrPAAAAA0"]
[Wed Apr 15 01:08:42.002137 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:33878] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "ad50mhng-JDNFCa0BnhrQQAAAAI"]
[Wed Apr 15 01:08:42.821806 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:48634] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "ad50mhng-JDNFCa0BnhrRwAAAAM"]
[Wed Apr 15 01:08:43.658823 2026] [:error] [pid 62432:tid 62441] [client 20.107.203.74:33862] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "ad50m7PtNET7V_vfTPfQqAAAAUY"]
[Wed Apr 15 01:08:44.346611 2026] [:error] [pid 17734:tid 17759] [client 20.107.203.74:26637] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "ad50nNN3xsztF3DFLWz-rwAAAJQ"]
[Wed Apr 15 01:08:45.225742 2026] [:error] [pid 17734:tid 17757] [client 20.107.203.74:29961] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ad50ndN3xsztF3DFLWz-tQAAAJI"]
[Wed Apr 15 01:08:45.925001 2026] [:error] [pid 62296:tid 62334] [client 20.107.203.74:26666] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ad50ncTNd04nWM2DK4SDiQAAAEc"]
[Wed Apr 15 01:08:46.563957 2026] [:error] [pid 62297:tid 62370] [client 20.107.203.74:58534] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ad50nqvogcWlrafOEaG-7QAAARA"]
[Wed Apr 15 01:08:47.167805 2026] [:error] [pid 62297:tid 62373] [client 20.107.203.74:58514] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ad50n6vogcWlrafOEaG-7gAAARM"]
[Wed Apr 15 01:08:47.810493 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:48610] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ad50n6vogcWlrafOEaG-8AAAARE"]
[Wed Apr 15 01:08:48.640023 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:30281] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ad50oBng-JDNFCa0BnhrfQAAAAc"]
[Wed Apr 15 01:08:49.898791 2026] [:error] [pid 62297:tid 62365] [client 20.107.203.74:8781] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ad50oavogcWlrafOEaG-8QAAAQs"]
[Wed Apr 15 01:08:50.968188 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:45153] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ad50ohng-JDNFCa0BnhrmgAAAAo"]
[Wed Apr 15 01:08:51.620605 2026] [:error] [pid 62297:tid 62362] [client 20.107.203.74:59275] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad50o6vogcWlrafOEaG-8wAAAQg"]
[Wed Apr 15 01:08:52.253369 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:8782] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad50pBng-JDNFCa0BnhrowAAABI"]
[Wed Apr 15 01:08:53.320788 2026] [:error] [pid 62295:tid 62314] [client 20.107.203.74:30056] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad50pRng-JDNFCa0BnhrsgAAAA8"]
[Wed Apr 15 01:08:54.174905 2026] [:error] [pid 62295:tid 62323] [client 20.107.203.74:49706] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad50phng-JDNFCa0BnhruQAAABg"]
[Wed Apr 15 01:08:54.833196 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:58608] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ad50phng-JDNFCa0BnhrvAAAAAY"]
[Wed Apr 15 01:08:56.117545 2026] [:error] [pid 62295:tid 62320] [client 20.107.203.74:49688] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ad50qBng-JDNFCa0BnhryAAAABU"]
[Wed Apr 15 01:08:56.910221 2026] [:error] [pid 17926:tid 17953] [client 20.107.203.74:49711] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ad50qPKxFvgDwMI04zBSdQAAAdQ"]
[Wed Apr 15 01:08:57.551721 2026] [:error] [pid 17804:tid 17811] [client 20.107.203.74:48618] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ad50qQAZKYxfpamecKd9KgAAAME"]
[Wed Apr 15 01:08:58.247047 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:43143] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "ad50qhng-JDNFCa0BnhrzQAAAAs"]
[Wed Apr 15 01:08:58.945000 2026] [:error] [pid 17734:tid 17744] [client 20.107.203.74:58617] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "ad50qtN3xsztF3DFLWz--QAAAIU"]
[Wed Apr 15 01:08:59.520911 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:22777] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "ad50q9N3xsztF3DFLWz-_wAAAIo"]
[Wed Apr 15 01:09:00.262685 2026] [:error] [pid 17866:tid 17868] [client 20.107.203.74:45128] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "ad50rLx_17kv70EUVIlEBwAAAYA"]
[Wed Apr 15 01:09:00.861973 2026] [:error] [pid 17926:tid 17956] [client 20.107.203.74:58499] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "ad50rPKxFvgDwMI04zBSfAAAAdc"]
[Wed Apr 15 01:09:03.980660 2026] [proxy_fcgi:error] [pid 62295:tid 62311] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:06.885088 2026] [proxy_fcgi:error] [pid 62295:tid 62315] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:09.419713 2026] [proxy_fcgi:error] [pid 62295:tid 62300] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:11.595247 2026] [proxy_fcgi:error] [pid 62295:tid 62314] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:13.693952 2026] [proxy_fcgi:error] [pid 62295:tid 62299] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:15.834725 2026] [proxy_fcgi:error] [pid 62295:tid 62307] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:18.153127 2026] [proxy_fcgi:error] [pid 62295:tid 62302] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:20.293707 2026] [proxy_fcgi:error] [pid 62295:tid 62311] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:23.531153 2026] [proxy_fcgi:error] [pid 62295:tid 62309] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:25.668949 2026] [proxy_fcgi:error] [pid 62295:tid 62323] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:27.991706 2026] [proxy_fcgi:error] [pid 62295:tid 62322] [client 20.107.203.74:45148] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:09:28.253469 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:45148] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ad50yBng-JDNFCa0BnhsPQAAAAI"]
[Wed Apr 15 01:09:29.168566 2026] [:error] [pid 62297:tid 62367] [client 20.107.203.74:22748] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ad50yavogcWlrafOEaG_OwAAAQ0"]
[Wed Apr 15 01:09:29.748810 2026] [:error] [pid 17926:tid 17953] [client 20.107.203.74:58597] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ad50yfKxFvgDwMI04zBSkQAAAdQ"]
[Wed Apr 15 01:09:30.574384 2026] [:error] [pid 17866:tid 17880] [client 20.107.203.74:55481] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ad50yrx_17kv70EUVIlEDgAAAYw"]
[Wed Apr 15 01:09:31.187358 2026] [:error] [pid 17926:tid 17950] [client 20.107.203.74:19767] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "ad50y_KxFvgDwMI04zBSkgAAAdE"]
[Wed Apr 15 01:09:32.122954 2026] [:error] [pid 62296:tid 62343] [client 20.107.203.74:26682] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "ad50zMTNd04nWM2DK4SDugAAAFA"]
[Wed Apr 15 01:09:32.679878 2026] [:error] [pid 62296:tid 62341] [client 20.107.203.74:26739] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "ad50zMTNd04nWM2DK4SDvQAAAE4"]
[Wed Apr 15 01:09:33.458549 2026] [:error] [pid 62297:tid 62376] [client 20.107.203.74:55438] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "ad50zavogcWlrafOEaG_RQAAARY"]
[Wed Apr 15 01:09:34.272505 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:55475] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "ad50zhng-JDNFCa0BnhsQAAAAAY"]
[Wed Apr 15 01:09:34.854109 2026] [:error] [pid 62295:tid 62303] [client 20.107.203.74:22307] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "ad50zhng-JDNFCa0BnhsRAAAAAQ"]
[Wed Apr 15 01:09:35.551164 2026] [:error] [pid 17926:tid 17942] [client 20.107.203.74:44530] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "ad50z_KxFvgDwMI04zBSmwAAAck"]
[Wed Apr 15 01:09:36.143935 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:55436] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "ad500KvogcWlrafOEaG_YgAAARg"]
[Wed Apr 15 01:09:36.927870 2026] [:error] [pid 17734:tid 17739] [client 20.107.203.74:55433] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "ad500NN3xsztF3DFLWz_VQAAAIA"]
[Wed Apr 15 01:09:37.475975 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:19752] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "ad500Rng-JDNFCa0BnhsUgAAAAA"]
[Wed Apr 15 01:09:38.180500 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:55426] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "ad500tN3xsztF3DFLWz_WQAAAIo"]
[Wed Apr 15 01:09:38.790677 2026] [:error] [pid 62296:tid 62341] [client 20.107.203.74:44486] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "ad500sTNd04nWM2DK4SDywAAAE4"]
[Wed Apr 15 01:09:39.401150 2026] [:error] [pid 17734:tid 17753] [client 20.107.203.74:33830] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "ad5009N3xsztF3DFLWz_XQAAAI4"]
[Wed Apr 15 01:09:40.111609 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:20209] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "ad501Bng-JDNFCa0BnhsYwAAABI"]
[Wed Apr 15 01:09:40.738449 2026] [:error] [pid 17804:tid 17813] [client 20.107.203.74:19747] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "ad501AAZKYxfpamecKd9bwAAAMM"]
[Wed Apr 15 01:09:41.284162 2026] [:error] [pid 17926:tid 17953] [client 20.107.203.74:8210] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "ad501fKxFvgDwMI04zBSnwAAAdQ"]
[Wed Apr 15 01:09:42.059000 2026] [:error] [pid 17734:tid 17745] [client 20.107.203.74:26693] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ad501tN3xsztF3DFLWz_ZQAAAIY"]
[Wed Apr 15 01:09:42.638087 2026] [:error] [pid 62432:tid 62441] [client 20.107.203.74:55455] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ad501rPtNET7V_vfTPfQ_wAAAUY"]
[Wed Apr 15 01:09:43.226252 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:8245] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ad501xng-JDNFCa0BnhsawAAAAU"]
[Wed Apr 15 01:09:43.797465 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:26694] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ad5016vogcWlrafOEaG_aQAAARU"]
[Wed Apr 15 01:09:44.400415 2026] [:error] [pid 17926:tid 17934] [client 20.107.203.74:60002] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "ad502PKxFvgDwMI04zBSpQAAAcE"]
[Wed Apr 15 01:09:44.913114 2026] [:error] [pid 17926:tid 17952] [client 20.107.203.74:33832] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "ad502PKxFvgDwMI04zBSqQAAAdM"]
[Wed Apr 15 01:09:45.436791 2026] [:error] [pid 62297:tid 62378] [client 20.107.203.74:19760] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "ad502avogcWlrafOEaG_bgAAARg"]
[Wed Apr 15 01:09:46.002671 2026] [:error] [pid 62432:tid 62458] [client 20.107.203.74:59973] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "ad502rPtNET7V_vfTPfRAAAAAVc"]
[Wed Apr 15 01:09:46.530116 2026] [:error] [pid 62297:tid 62372] [client 20.107.203.74:59989] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "ad502qvogcWlrafOEaG_eAAAARI"]
[Wed Apr 15 01:09:47.236125 2026] [:error] [pid 17926:tid 17935] [client 20.107.203.74:33834] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "ad502_KxFvgDwMI04zBStQAAAcI"]
[Wed Apr 15 01:09:47.775432 2026] [:error] [pid 62297:tid 62368] [client 20.107.203.74:20144] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "ad5026vogcWlrafOEaG_fgAAAQ4"]
[Wed Apr 15 01:09:48.525174 2026] [:error] [pid 17734:tid 17751] [client 20.107.203.74:22331] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "ad503NN3xsztF3DFLWz_agAAAIw"]
[Wed Apr 15 01:09:49.069870 2026] [:error] [pid 62295:tid 62312] [client 20.107.203.74:26724] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zample.php"] [unique_id "ad503Rng-JDNFCa0BnhseAAAAA0"]
[Wed Apr 15 01:09:49.612708 2026] [:error] [pid 62295:tid 62316] [client 20.107.203.74:55420] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zample.php"] [unique_id "ad503Rng-JDNFCa0BnhsewAAABE"]
[Wed Apr 15 01:09:50.192924 2026] [:error] [pid 17926:tid 17944] [client 20.107.203.74:32537] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zample.php"] [unique_id "ad503vKxFvgDwMI04zBSvQAAAcs"]
[Wed Apr 15 01:09:50.794140 2026] [:error] [pid 62297:tid 62366] [client 20.107.203.74:44508] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zample.php"] [unique_id "ad503qvogcWlrafOEaG_iwAAAQw"]
[Wed Apr 15 01:09:51.362352 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:53071] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad503xng-JDNFCa0BnhsgAAAAAc"]
[Wed Apr 15 01:09:51.918500 2026] [:error] [pid 62295:tid 62318] [client 20.107.203.74:55366] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad503xng-JDNFCa0BnhshgAAABM"]
[Wed Apr 15 01:09:52.495025 2026] [:error] [pid 62296:tid 62333] [client 20.107.203.74:49706] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad504MTNd04nWM2DK4SD2AAAAEY"]
[Wed Apr 15 01:09:53.106778 2026] [:error] [pid 62297:tid 62363] [client 20.107.203.74:42567] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad504avogcWlrafOEaG_lAAAAQk"]
[Wed Apr 15 01:09:53.720154 2026] [:error] [pid 62296:tid 62340] [client 20.107.203.74:19735] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "ad504cTNd04nWM2DK4SD2wAAAE0"]
[Wed Apr 15 01:09:54.277422 2026] [:error] [pid 62296:tid 62348] [client 20.107.203.74:20187] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "ad504sTNd04nWM2DK4SD3wAAAFU"]
[Wed Apr 15 01:09:54.906217 2026] [:error] [pid 62432:tid 62459] [client 20.107.203.74:23082] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "ad504rPtNET7V_vfTPfRBQAAAVg"]
[Wed Apr 15 01:09:55.469297 2026] [:error] [pid 62297:tid 62354] [client 20.107.203.74:33841] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "ad5046vogcWlrafOEaG_qQAAAQA"]
[Wed Apr 15 01:09:55.983867 2026] [:error] [pid 62297:tid 62365] [client 20.107.203.74:32521] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "ad5046vogcWlrafOEaG_rgAAAQs"]
[Wed Apr 15 01:09:56.631161 2026] [:error] [pid 17866:tid 17871] [client 20.107.203.74:23069] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "ad505Lx_17kv70EUVIlEIgAAAYM"]
[Wed Apr 15 01:09:57.175546 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:8706] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "ad505Rng-JDNFCa0BnhspAAAAAE"]
[Wed Apr 15 01:09:57.909737 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:23077] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "ad505avogcWlrafOEaG_swAAARU"]
[Wed Apr 15 01:09:58.493785 2026] [:error] [pid 17734:tid 17754] [client 20.107.203.74:44542] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "ad505tN3xsztF3DFLWz_fgAAAI8"]
[Wed Apr 15 01:09:59.020305 2026] [:error] [pid 62297:tid 62370] [client 20.107.203.74:59980] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "ad5056vogcWlrafOEaG_vQAAARA"]
[Wed Apr 15 01:09:59.570937 2026] [:error] [pid 62432:tid 62442] [client 20.107.203.74:59987] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "ad5057PtNET7V_vfTPfRBwAAAUc"]
[Wed Apr 15 01:10:00.109830 2026] [:error] [pid 62432:tid 62440] [client 20.107.203.74:26198] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "ad506LPtNET7V_vfTPfRCgAAAUU"]
[Wed Apr 15 01:10:00.627637 2026] [:error] [pid 62296:tid 62331] [client 20.107.203.74:44504] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "ad506MTNd04nWM2DK4SD6wAAAEQ"]
[Wed Apr 15 01:10:01.174276 2026] [:error] [pid 17804:tid 17813] [client 20.107.203.74:60024] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "ad506QAZKYxfpamecKd9ggAAAMM"]
[Wed Apr 15 01:10:01.719693 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:59984] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "ad506avogcWlrafOEaG_xwAAAQM"]
[Wed Apr 15 01:10:02.303306 2026] [:error] [pid 17804:tid 17834] [client 20.107.203.74:55369] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "ad506gAZKYxfpamecKd9hQAAANg"]
[Wed Apr 15 01:10:02.876163 2026] [:error] [pid 17734:tid 17751] [client 20.107.203.74:31254] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "ad506tN3xsztF3DFLWz_gwAAAIw"]
[Wed Apr 15 01:10:03.461473 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:55381] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "ad506xng-JDNFCa0BnhsrQAAAAM"]
[Wed Apr 15 01:10:04.141296 2026] [:error] [pid 17866:tid 17887] [client 20.107.203.74:62300] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "ad507Lx_17kv70EUVIlEKAAAAZM"]
[Wed Apr 15 01:10:04.916525 2026] [:error] [pid 62295:tid 62322] [client 20.107.203.74:59976] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "ad507Bng-JDNFCa0BnhstgAAABc"]
[Wed Apr 15 01:10:05.539266 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:8711] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad507Rng-JDNFCa0BnhsvAAAAAo"]
[Wed Apr 15 01:10:06.183299 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:8708] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad507hng-JDNFCa0BnhswQAAAAY"]
[Wed Apr 15 01:10:06.767152 2026] [:error] [pid 62432:tid 62438] [client 20.107.203.74:26747] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad507rPtNET7V_vfTPfRFQAAAUM"]
[Wed Apr 15 01:10:07.356563 2026] [:error] [pid 62297:tid 62354] [client 20.107.203.74:42593] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/maint/x6.php"] [unique_id "ad5076vogcWlrafOEaG_zQAAAQA"]
[Wed Apr 15 01:10:08.002141 2026] [:error] [pid 62295:tid 62311] [client 20.107.203.74:55387] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "ad508Bng-JDNFCa0BnhszQAAAAw"]
[Wed Apr 15 01:10:08.556425 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:8652] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "ad508Bng-JDNFCa0Bnhs0QAAABY"]
[Wed Apr 15 01:10:09.088692 2026] [:error] [pid 17926:tid 17953] [client 20.107.203.74:8727] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "ad508fKxFvgDwMI04zBS0wAAAdQ"]
[Wed Apr 15 01:10:09.734730 2026] [:error] [pid 62297:tid 62358] [client 20.107.203.74:31295] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "ad508avogcWlrafOEaG_0wAAAQQ"]
[Wed Apr 15 01:10:10.340464 2026] [:error] [pid 17926:tid 17950] [client 20.107.203.74:60009] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "ad508vKxFvgDwMI04zBS1AAAAdE"]
[Wed Apr 15 01:10:10.873118 2026] [:error] [pid 62295:tid 62323] [client 20.107.203.74:44541] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "ad508hng-JDNFCa0Bnhs6gAAABg"]
[Wed Apr 15 01:10:11.405775 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:32529] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "ad508xng-JDNFCa0Bnhs7QAAAAc"]
[Wed Apr 15 01:10:11.935194 2026] [:error] [pid 17866:tid 17888] [client 20.107.203.74:62308] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "ad5087x_17kv70EUVIlEKwAAAZQ"]
[Wed Apr 15 01:10:12.451858 2026] [:error] [pid 17926:tid 17949] [client 20.107.203.74:42533] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "ad509PKxFvgDwMI04zBS1wAAAdA"]
[Wed Apr 15 01:10:13.008478 2026] [:error] [pid 62432:tid 62453] [client 20.107.203.74:26219] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "ad509bPtNET7V_vfTPfRGgAAAVI"]
[Wed Apr 15 01:10:13.554410 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:31236] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "ad509avogcWlrafOEaG_3wAAARc"]
[Wed Apr 15 01:10:14.208069 2026] [:error] [pid 17926:tid 17948] [client 20.107.203.74:62278] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "ad509vKxFvgDwMI04zBS2wAAAc8"]
[Wed Apr 15 01:10:14.771681 2026] [:error] [pid 62297:tid 62367] [client 20.107.203.74:31285] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "ad509qvogcWlrafOEaG_5AAAAQ0"]
[Wed Apr 15 01:10:15.324511 2026] [:error] [pid 62297:tid 62372] [client 20.107.203.74:32546] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "ad5096vogcWlrafOEaG_6QAAARI"]
[Wed Apr 15 01:10:15.947956 2026] [:error] [pid 62295:tid 62322] [client 20.107.203.74:42563] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "ad509xng-JDNFCa0BnhtFgAAABc"]
[Wed Apr 15 01:10:16.453981 2026] [:error] [pid 62295:tid 62303] [client 20.107.203.74:8645] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "ad50-Bng-JDNFCa0BnhtHAAAAAQ"]
[Wed Apr 15 01:10:17.018619 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:26176] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad50-Rng-JDNFCa0BnhtIQAAAAM"]
[Wed Apr 15 01:10:17.543009 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:8757] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad50-avogcWlrafOEaG_7wAAARE"]
[Wed Apr 15 01:10:18.053034 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:8650] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad50-hng-JDNFCa0BnhtMQAAAAI"]
[Wed Apr 15 01:10:18.587176 2026] [:error] [pid 17734:tid 17759] [client 20.107.203.74:23076] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad50-tN3xsztF3DFLWz_jwAAAJQ"]
[Wed Apr 15 01:10:19.163790 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:26186] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ad50-9N3xsztF3DFLWz_kQAAAJA"]
[Wed Apr 15 01:10:19.692392 2026] [:error] [pid 17804:tid 17826] [client 20.107.203.74:31270] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ad50-wAZKYxfpamecKd9jwAAANA"]
[Wed Apr 15 01:10:20.206577 2026] [:error] [pid 62296:tid 62339] [client 20.107.203.74:26232] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ad50_MTNd04nWM2DK4SEAQAAAEw"]
[Wed Apr 15 01:10:20.769775 2026] [:error] [pid 62432:tid 62436] [client 20.107.203.74:44517] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ad50_LPtNET7V_vfTPfRKAAAAUE"]
[Wed Apr 15 01:10:21.333254 2026] [:error] [pid 62432:tid 62447] [client 20.107.203.74:62289] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad50_bPtNET7V_vfTPfRKgAAAUw"]
[Wed Apr 15 01:10:21.977166 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:44489] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad50_avogcWlrafOEaG_-AAAAQM"]
[Wed Apr 15 01:10:22.543358 2026] [:error] [pid 62297:tid 62361] [client 20.107.203.74:31242] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad50_qvogcWlrafOEaG_-wAAAQc"]
[Wed Apr 15 01:10:23.159481 2026] [:error] [pid 17734:tid 17753] [client 20.107.203.74:8672] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad50_9N3xsztF3DFLWz_mwAAAI4"]
[Wed Apr 15 01:10:23.700782 2026] [:error] [pid 62295:tid 62319] [client 20.107.203.74:59983] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad50_xng-JDNFCa0BnhtSQAAABQ"]
[Wed Apr 15 01:10:24.208438 2026] [:error] [pid 17926:tid 17951] [client 20.107.203.74:42606] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad51APKxFvgDwMI04zBS3wAAAdI"]
[Wed Apr 15 01:10:24.727546 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:42524] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad51AKvogcWlrafOEaG__gAAAQE"]
[Wed Apr 15 01:10:25.309300 2026] [:error] [pid 17866:tid 17874] [client 20.107.203.74:42539] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad51Abx_17kv70EUVIlEMAAAAYY"]
[Wed Apr 15 01:10:25.837537 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:42572] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ad51AdN3xsztF3DFLWz_ogAAAJY"]
[Wed Apr 15 01:10:29.003521 2026] [proxy_fcgi:error] [pid 17734:tid 17739] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:31.920600 2026] [proxy_fcgi:error] [pid 17734:tid 17750] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:33.734457 2026] [proxy_fcgi:error] [pid 17734:tid 17763] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:35.848987 2026] [proxy_fcgi:error] [pid 17734:tid 17758] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:37.555856 2026] [proxy_fcgi:error] [pid 17734:tid 17763] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:39.763550 2026] [proxy_fcgi:error] [pid 17734:tid 17754] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:42.062764 2026] [proxy_fcgi:error] [pid 17734:tid 17752] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:43.490454 2026] [proxy_fcgi:error] [pid 17734:tid 17746] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:45.525452 2026] [proxy_fcgi:error] [pid 17734:tid 17763] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:48.318701 2026] [proxy_fcgi:error] [pid 17734:tid 17754] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:50.356993 2026] [proxy_fcgi:error] [pid 17734:tid 17759] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:52.459370 2026] [proxy_fcgi:error] [pid 17734:tid 17760] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:54.616902 2026] [proxy_fcgi:error] [pid 17734:tid 17757] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:56.669284 2026] [proxy_fcgi:error] [pid 17734:tid 17756] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:58.977579 2026] [proxy_fcgi:error] [pid 17734:tid 17754] [client 20.107.203.74:31251] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:10:59.237657 2026] [:error] [pid 17734:tid 17747] [client 20.107.203.74:31251] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "ad51I9N3xsztF3DFLWz_8gAAAIg"]
[Wed Apr 15 01:10:59.836145 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:62305] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "ad51Ixng-JDNFCa0Bnht2AAAAAg"]
[Wed Apr 15 01:11:00.452101 2026] [:error] [pid 62295:tid 62317] [client 20.107.203.74:28096] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "ad51JBng-JDNFCa0Bnht3gAAABI"]
[Wed Apr 15 01:11:00.969779 2026] [:error] [pid 62296:tid 62331] [client 20.107.203.74:42617] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/plss3.php"] [unique_id "ad51JMTNd04nWM2DK4SEOgAAAEQ"]
[Wed Apr 15 01:11:01.496363 2026] [:error] [pid 17734:tid 17762] [client 20.107.203.74:42594] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ad51JdN3xsztF3DFLWz_9wAAAJc"]
[Wed Apr 15 01:11:02.017015 2026] [:error] [pid 62295:tid 62316] [client 20.107.203.74:8696] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ad51Jhng-JDNFCa0Bnht5QAAABE"]
[Wed Apr 15 01:11:02.569418 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:54395] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ad51Jhng-JDNFCa0Bnht6AAAAAo"]
[Wed Apr 15 01:11:03.085841 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:55372] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ad51J6vogcWlrafOEaHA1QAAARc"]
[Wed Apr 15 01:11:03.590119 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:55360] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "ad51Jxng-JDNFCa0Bnht6wAAAAY"]
[Wed Apr 15 01:11:04.113371 2026] [:error] [pid 62295:tid 62320] [client 20.107.203.74:26659] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "ad51KBng-JDNFCa0Bnht7wAAABU"]
[Wed Apr 15 01:11:04.622381 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:62280] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "ad51KBng-JDNFCa0Bnht8QAAABY"]
[Wed Apr 15 01:11:05.127653 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:62311] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "ad51KRng-JDNFCa0Bnht9QAAAAE"]
[Wed Apr 15 01:11:05.633347 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:62285] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad51KRng-JDNFCa0Bnht-QAAAAc"]
[Wed Apr 15 01:11:06.133716 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:23046] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad51Khng-JDNFCa0Bnht_QAAABY"]
[Wed Apr 15 01:11:06.639640 2026] [:error] [pid 17804:tid 17831] [client 20.107.203.74:42620] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad51KgAZKYxfpamecKd9rQAAANU"]
[Wed Apr 15 01:11:07.173808 2026] [:error] [pid 17804:tid 17824] [client 20.107.203.74:42603] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad51KwAZKYxfpamecKd9rwAAAM4"]
[Wed Apr 15 01:11:07.731941 2026] [:error] [pid 62432:tid 62439] [client 20.107.203.74:8676] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad51K7PtNET7V_vfTPfRaAAAAUQ"]
[Wed Apr 15 01:11:08.343066 2026] [:error] [pid 62295:tid 62308] [client 20.107.203.74:26203] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad51LBng-JDNFCa0BnhuBQAAAAk"]
[Wed Apr 15 01:11:08.926735 2026] [:error] [pid 17866:tid 17890] [client 20.107.203.74:23066] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad51LLx_17kv70EUVIlEaQAAAZY"]
[Wed Apr 15 01:11:09.445773 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:54397] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad51LRng-JDNFCa0BnhuCQAAAAA"]
[Wed Apr 15 01:11:09.947249 2026] [:error] [pid 62297:tid 62361] [client 20.107.203.74:62320] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "ad51LavogcWlrafOEaHA5AAAAQc"]
[Wed Apr 15 01:11:10.468001 2026] [:error] [pid 62295:tid 62315] [client 20.107.203.74:28143] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "ad51Lhng-JDNFCa0BnhuCwAAABA"]
[Wed Apr 15 01:11:11.001219 2026] [:error] [pid 17866:tid 17887] [client 20.107.203.74:31344] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "ad51L7x_17kv70EUVIlEcwAAAZM"]
[Wed Apr 15 01:11:11.511146 2026] [:error] [pid 62296:tid 62330] [client 20.107.203.74:42577] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-update.php"] [unique_id "ad51L8TNd04nWM2DK4SEVAAAAEM"]
[Wed Apr 15 01:11:12.011849 2026] [:error] [pid 62432:tid 62453] [client 20.107.203.74:28113] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ad51MLPtNET7V_vfTPfRbQAAAVI"]
[Wed Apr 15 01:11:12.514737 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:51442] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ad51MBng-JDNFCa0BnhuEgAAAAE"]
[Wed Apr 15 01:11:13.019546 2026] [:error] [pid 17804:tid 17817] [client 20.107.203.74:42535] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ad51MQAZKYxfpamecKd9sQAAAMc"]
[Wed Apr 15 01:11:13.524624 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:28158] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ad51MavogcWlrafOEaHA7QAAAQE"]
[Wed Apr 15 01:11:14.026768 2026] [:error] [pid 62432:tid 62440] [client 20.107.203.74:8669] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "ad51MrPtNET7V_vfTPfRcAAAAUU"]
[Wed Apr 15 01:11:14.533176 2026] [:error] [pid 62432:tid 62447] [client 20.107.203.74:42545] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "ad51MrPtNET7V_vfTPfRcQAAAUw"]
[Wed Apr 15 01:11:15.039519 2026] [:error] [pid 17734:tid 17756] [client 20.107.203.74:8716] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "ad51M9N3xsztF3DFLWwAGQAAAJE"]
[Wed Apr 15 01:11:15.543558 2026] [:error] [pid 62297:tid 62360] [client 20.107.203.74:28115] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "ad51M6vogcWlrafOEaHA-QAAAQY"]
[Wed Apr 15 01:11:16.042389 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:23070] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad51NKvogcWlrafOEaHA_AAAAQE"]
[Wed Apr 15 01:11:16.542828 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:54350] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad51NBng-JDNFCa0BnhuHAAAAAU"]
[Wed Apr 15 01:11:17.048651 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:23094] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad51NRng-JDNFCa0BnhuIQAAAAs"]
[Wed Apr 15 01:11:17.566702 2026] [:error] [pid 62295:tid 62320] [client 20.107.203.74:23101] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ad51NRng-JDNFCa0BnhuJAAAABU"]
[Wed Apr 15 01:11:18.070932 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:54361] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad51Nhng-JDNFCa0BnhuKQAAAAU"]
[Wed Apr 15 01:11:18.570532 2026] [:error] [pid 17734:tid 17752] [client 20.107.203.74:8742] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad51NtN3xsztF3DFLWwAHQAAAI0"]
[Wed Apr 15 01:11:19.077339 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:42621] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad51N9N3xsztF3DFLWwAIgAAAIE"]
[Wed Apr 15 01:11:19.577047 2026] [:error] [pid 17804:tid 17827] [client 20.107.203.74:8644] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad51NwAZKYxfpamecKd9tQAAANE"]
[Wed Apr 15 01:11:20.077733 2026] [:error] [pid 17804:tid 17828] [client 20.107.203.74:23087] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51OAAZKYxfpamecKd9tgAAANI"]
[Wed Apr 15 01:11:20.579698 2026] [:error] [pid 17926:tid 17947] [client 20.107.203.74:54366] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51OPKxFvgDwMI04zBTEQAAAc4"]
[Wed Apr 15 01:11:21.082012 2026] [:error] [pid 17926:tid 17937] [client 20.107.203.74:26227] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51OfKxFvgDwMI04zBTEwAAAcQ"]
[Wed Apr 15 01:11:21.584249 2026] [:error] [pid 62297:tid 62360] [client 20.107.203.74:54349] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51OavogcWlrafOEaHBEQAAAQY"]
[Wed Apr 15 01:11:22.088142 2026] [:error] [pid 17866:tid 17870] [client 20.107.203.74:42530] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ad51Orx_17kv70EUVIlEggAAAYI"]
[Wed Apr 15 01:11:22.588081 2026] [:error] [pid 62432:tid 62442] [client 20.107.203.74:8674] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ad51OrPtNET7V_vfTPfRdgAAAUc"]
[Wed Apr 15 01:11:23.088102 2026] [:error] [pid 17926:tid 17933] [client 20.107.203.74:51446] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ad51O_KxFvgDwMI04zBTFQAAAcA"]
[Wed Apr 15 01:11:23.599970 2026] [:error] [pid 62295:tid 62316] [client 20.107.203.74:62327] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ad51Oxng-JDNFCa0BnhuMwAAABE"]
[Wed Apr 15 01:11:24.099334 2026] [:error] [pid 62297:tid 62374] [client 20.107.203.74:23092] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "ad51PKvogcWlrafOEaHBFAAAARQ"]
[Wed Apr 15 01:11:24.598787 2026] [:error] [pid 17926:tid 17950] [client 20.107.203.74:31302] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "ad51PPKxFvgDwMI04zBTGQAAAdE"]
[Wed Apr 15 01:11:25.098264 2026] [:error] [pid 17926:tid 17949] [client 20.107.203.74:28142] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "ad51PfKxFvgDwMI04zBTGwAAAdA"]
[Wed Apr 15 01:11:25.601485 2026] [:error] [pid 17866:tid 17876] [client 20.107.203.74:8675] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "ad51Pbx_17kv70EUVIlEhQAAAYg"]
[Wed Apr 15 01:11:26.100511 2026] [:error] [pid 17734:tid 17757] [client 20.107.203.74:31339] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51PtN3xsztF3DFLWwAMQAAAJI"]
[Wed Apr 15 01:11:26.600768 2026] [:error] [pid 62432:tid 62455] [client 20.107.203.74:28105] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51PrPtNET7V_vfTPfRiAAAAVQ"]
[Wed Apr 15 01:11:27.113268 2026] [:error] [pid 17734:tid 17743] [client 20.107.203.74:54338] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51P9N3xsztF3DFLWwANQAAAIQ"]
[Wed Apr 15 01:11:27.621663 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:23048] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ad51Pxng-JDNFCa0BnhuPQAAAAU"]
[Wed Apr 15 01:11:28.121261 2026] [:error] [pid 62432:tid 62453] [client 20.107.203.74:8661] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ad51QLPtNET7V_vfTPfRkgAAAVI"]
[Wed Apr 15 01:11:28.638735 2026] [:error] [pid 17734:tid 17759] [client 20.107.203.74:51436] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ad51QNN3xsztF3DFLWwAOQAAAJQ"]
[Wed Apr 15 01:11:29.146076 2026] [:error] [pid 17866:tid 17874] [client 20.107.203.74:31255] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ad51Qbx_17kv70EUVIlEiQAAAYY"]
[Wed Apr 15 01:11:29.646815 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:42521] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ad51QavogcWlrafOEaHBGAAAAQM"]
[Wed Apr 15 01:11:30.147687 2026] [:error] [pid 17804:tid 17811] [client 20.107.203.74:8663] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad51QgAZKYxfpamecKd9wAAAAME"]
[Wed Apr 15 01:11:30.648876 2026] [:error] [pid 17804:tid 17812] [client 20.107.203.74:29977] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad51QgAZKYxfpamecKd9wQAAAMI"]
[Wed Apr 15 01:11:31.149968 2026] [:error] [pid 17866:tid 17883] [client 20.107.203.74:23851] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad51Q7x_17kv70EUVIlEkAAAAY8"]
[Wed Apr 15 01:11:31.648832 2026] [:error] [pid 17804:tid 17822] [client 20.107.203.74:54340] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad51QwAZKYxfpamecKd9xAAAAMw"]
[Wed Apr 15 01:11:32.154026 2026] [:error] [pid 62295:tid 62319] [client 20.107.203.74:22050] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "ad51RBng-JDNFCa0BnhuTgAAABQ"]
[Wed Apr 15 01:11:32.658103 2026] [:error] [pid 62432:tid 62435] [client 20.107.203.74:20181] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "ad51RLPtNET7V_vfTPfRmgAAAUA"]
[Wed Apr 15 01:11:33.166755 2026] [:error] [pid 17734:tid 17758] [client 20.107.203.74:28135] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "ad51RdN3xsztF3DFLWwAQAAAAJM"]
[Wed Apr 15 01:11:33.675910 2026] [:error] [pid 17926:tid 17953] [client 20.107.203.74:8368] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "ad51RfKxFvgDwMI04zBTKAAAAdQ"]
[Wed Apr 15 01:11:34.231370 2026] [:error] [pid 62432:tid 62441] [client 20.107.203.74:8354] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "ad51RrPtNET7V_vfTPfRmwAAAUY"]
[Wed Apr 15 01:11:34.872442 2026] [:error] [pid 17734:tid 17751] [client 20.107.203.74:22658] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "ad51RtN3xsztF3DFLWwARQAAAIw"]
[Wed Apr 15 01:11:35.589720 2026] [:error] [pid 17734:tid 17763] [client 20.107.203.74:48563] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "ad51R9N3xsztF3DFLWwARwAAAJg"]
[Wed Apr 15 01:11:36.282655 2026] [:error] [pid 62297:tid 62357] [client 20.107.203.74:51398] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "ad51SKvogcWlrafOEaHBKQAAAQM"]
[Wed Apr 15 01:11:36.965745 2026] [:error] [pid 17804:tid 17834] [client 20.107.203.74:8383] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/we.php"] [unique_id "ad51SAAZKYxfpamecKd9yQAAANg"]
[Wed Apr 15 01:11:37.885021 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:33191] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/we.php"] [unique_id "ad51SRng-JDNFCa0BnhubQAAAAo"]
[Wed Apr 15 01:11:38.524057 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:50878] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/we.php"] [unique_id "ad51StN3xsztF3DFLWwAUQAAAIE"]
[Wed Apr 15 01:11:39.102227 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:23866] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/we.php"] [unique_id "ad51S6vogcWlrafOEaHBNQAAARc"]
[Wed Apr 15 01:11:39.699504 2026] [:error] [pid 62296:tid 62336] [client 20.107.203.74:31940] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alpha.php"] [unique_id "ad51S8TNd04nWM2DK4SEgQAAAEk"]
[Wed Apr 15 01:11:40.265274 2026] [:error] [pid 17734:tid 17745] [client 20.107.203.74:22072] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alpha.php"] [unique_id "ad51TNN3xsztF3DFLWwAWgAAAIY"]
[Wed Apr 15 01:11:40.865769 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:22662] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alpha.php"] [unique_id "ad51TNN3xsztF3DFLWwAZAAAAIE"]
[Wed Apr 15 01:11:41.672278 2026] [:error] [pid 62296:tid 62348] [client 20.107.203.74:45084] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alpha.php"] [unique_id "ad51TcTNd04nWM2DK4SEgwAAAFU"]
[Wed Apr 15 01:11:42.358174 2026] [:error] [pid 62295:tid 62320] [client 20.107.203.74:22711] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/makeasmtp.php"] [unique_id "ad51Thng-JDNFCa0BnhugQAAABU"]
[Wed Apr 15 01:11:42.931662 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:45058] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/makeasmtp.php"] [unique_id "ad51Thng-JDNFCa0BnhugwAAAAc"]
[Wed Apr 15 01:11:43.808604 2026] [:error] [pid 62297:tid 62367] [client 20.107.203.74:60475] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/makeasmtp.php"] [unique_id "ad51T6vogcWlrafOEaHBQAAAAQ0"]
[Wed Apr 15 01:11:44.418864 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:43780] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/makeasmtp.php"] [unique_id "ad51UBng-JDNFCa0BnhuhgAAAAs"]
[Wed Apr 15 01:11:45.037555 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:30719] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-michan.php"] [unique_id "ad51URng-JDNFCa0BnhujgAAAAg"]
[Wed Apr 15 01:11:45.784102 2026] [:error] [pid 62295:tid 62319] [client 20.107.203.74:30624] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-michan.php"] [unique_id "ad51URng-JDNFCa0BnhulgAAABQ"]
[Wed Apr 15 01:11:46.652703 2026] [:error] [pid 17734:tid 17762] [client 20.107.203.74:50848] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-michan.php"] [unique_id "ad51UtN3xsztF3DFLWwAeAAAAJc"]
[Wed Apr 15 01:11:47.358118 2026] [:error] [pid 62296:tid 62343] [client 20.107.203.74:61180] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-michan.php"] [unique_id "ad51U8TNd04nWM2DK4SEiwAAAFA"]
[Wed Apr 15 01:11:48.079317 2026] [:error] [pid 17804:tid 17811] [client 20.107.203.74:30635] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin1.php"] [unique_id "ad51VAAZKYxfpamecKd90gAAAME"]
[Wed Apr 15 01:11:48.726318 2026] [:error] [pid 62297:tid 62369] [client 20.107.203.74:30699] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin1.php"] [unique_id "ad51VKvogcWlrafOEaHBSwAAAQ8"]
[Wed Apr 15 01:11:49.416206 2026] [:error] [pid 17926:tid 17933] [client 20.107.203.74:30621] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin1.php"] [unique_id "ad51VfKxFvgDwMI04zBTNAAAAcA"]
[Wed Apr 15 01:11:50.101824 2026] [:error] [pid 62295:tid 62311] [client 20.107.203.74:45821] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin1.php"] [unique_id "ad51Vhng-JDNFCa0BnhungAAAAw"]
[Wed Apr 15 01:11:51.003788 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:43800] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad51Vxng-JDNFCa0BnhurAAAAAg"]
[Wed Apr 15 01:11:51.648516 2026] [:error] [pid 62297:tid 62368] [client 20.107.203.74:30712] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad51V6vogcWlrafOEaHBUQAAAQ4"]
[Wed Apr 15 01:11:52.286584 2026] [:error] [pid 17866:tid 17888] [client 20.107.203.74:28636] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad51WLx_17kv70EUVIlE0wAAAZQ"]
[Wed Apr 15 01:11:52.896819 2026] [:error] [pid 17804:tid 17815] [client 20.107.203.74:46458] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad51WAAZKYxfpamecKd92gAAAMU"]
[Wed Apr 15 01:11:53.764435 2026] [:error] [pid 17866:tid 17870] [client 20.107.203.74:59354] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad51Wbx_17kv70EUVIlE4wAAAYI"]
[Wed Apr 15 01:11:54.625182 2026] [:error] [pid 62297:tid 62366] [client 20.107.203.74:57748] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad51WqvogcWlrafOEaHBWQAAAQw"]
[Wed Apr 15 01:11:55.401301 2026] [:error] [pid 17734:tid 17757] [client 20.107.203.74:28662] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad51W9N3xsztF3DFLWwAggAAAJI"]
[Wed Apr 15 01:11:58.809601 2026] [proxy_fcgi:error] [pid 62295:tid 62305] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:01.096658 2026] [proxy_fcgi:error] [pid 62295:tid 62319] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:03.418181 2026] [proxy_fcgi:error] [pid 62295:tid 62306] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:05.822748 2026] [proxy_fcgi:error] [pid 62295:tid 62299] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:08.253710 2026] [proxy_fcgi:error] [pid 62295:tid 62311] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:10.546272 2026] [proxy_fcgi:error] [pid 62295:tid 62315] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:12.621589 2026] [proxy_fcgi:error] [pid 62295:tid 62314] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:14.050364 2026] [proxy_fcgi:error] [pid 62295:tid 62305] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:16.137036 2026] [proxy_fcgi:error] [pid 62295:tid 62312] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:18.306475 2026] [proxy_fcgi:error] [pid 62295:tid 62318] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:20.376070 2026] [proxy_fcgi:error] [pid 62295:tid 62320] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:22.546632 2026] [proxy_fcgi:error] [pid 62295:tid 62313] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:24.140139 2026] [proxy_fcgi:error] [pid 62295:tid 62307] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:26.253833 2026] [proxy_fcgi:error] [pid 62295:tid 62310] [client 20.107.203.74:59339] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:12:26.633642 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:59339] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "ad51ehng-JDNFCa0Bnhu9wAAAAE"]
[Wed Apr 15 01:12:28.506100 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:8259] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "ad51fNN3xsztF3DFLWwA7gAAAJY"]
[Wed Apr 15 01:12:29.144776 2026] [:error] [pid 17734:tid 17748] [client 20.107.203.74:25744] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "ad51fdN3xsztF3DFLWwA8gAAAIk"]
[Wed Apr 15 01:12:30.595912 2026] [:error] [pid 17866:tid 17887] [client 20.107.203.74:50202] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "ad51frx_17kv70EUVIlFKwAAAZM"]
[Wed Apr 15 01:12:31.340882 2026] [:error] [pid 62295:tid 62311] [client 20.107.203.74:57278] [client 20.107.203.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad51fxng-JDNFCa0BnhvCAAAAAw"]
[Wed Apr 15 01:12:32.038377 2026] [:error] [pid 17804:tid 17821] [client 20.107.203.74:28036] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ad51gAAZKYxfpamecKd95AAAAMs"]
[Wed Apr 15 01:12:32.642443 2026] [:error] [pid 62297:tid 62370] [client 20.107.203.74:50230] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ad51gKvogcWlrafOEaHCFgAAARA"]
[Wed Apr 15 01:12:33.367025 2026] [:error] [pid 62295:tid 62301] [client 20.107.203.74:23428] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ad51gRng-JDNFCa0BnhvFgAAAAI"]
[Wed Apr 15 01:12:34.031955 2026] [:error] [pid 62296:tid 62343] [client 20.107.203.74:29080] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ad51gsTNd04nWM2DK4SE3QAAAFA"]
[Wed Apr 15 01:12:34.717473 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:57831] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad51ghng-JDNFCa0BnhvIwAAAAs"]
[Wed Apr 15 01:12:35.269945 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:57820] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad51gxng-JDNFCa0BnhvJwAAAAA"]
[Wed Apr 15 01:12:35.850635 2026] [:error] [pid 62297:tid 62360] [client 20.107.203.74:51510] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad51g6vogcWlrafOEaHCIwAAAQY"]
[Wed Apr 15 01:12:36.466864 2026] [:error] [pid 17734:tid 17747] [client 20.107.203.74:23441] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad51hNN3xsztF3DFLWwBBgAAAIg"]
[Wed Apr 15 01:12:37.144110 2026] [:error] [pid 62295:tid 62305] [client 20.107.203.74:50122] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad51hRng-JDNFCa0BnhvMwAAAAY"]
[Wed Apr 15 01:12:37.726079 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:23440] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad51hRng-JDNFCa0BnhvPgAAABY"]
[Wed Apr 15 01:12:38.491918 2026] [:error] [pid 62295:tid 62300] [client 20.107.203.74:29091] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad51hhng-JDNFCa0BnhvSgAAAAE"]
[Wed Apr 15 01:12:39.271666 2026] [:error] [pid 62295:tid 62304] [client 20.107.203.74:29072] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad51hxng-JDNFCa0BnhvVQAAAAU"]
[Wed Apr 15 01:12:39.853135 2026] [:error] [pid 62295:tid 62303] [client 20.107.203.74:29118] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad51hxng-JDNFCa0BnhvZQAAAAQ"]
[Wed Apr 15 01:12:40.384202 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:57839] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad51iBng-JDNFCa0BnhvagAAAAo"]
[Wed Apr 15 01:12:41.060182 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:57836] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad51iavogcWlrafOEaHCKQAAARU"]
[Wed Apr 15 01:12:41.706764 2026] [:error] [pid 62296:tid 62332] [client 20.107.203.74:56669] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "ad51icTNd04nWM2DK4SE4gAAAEU"]
[Wed Apr 15 01:12:42.394094 2026] [:error] [pid 62297:tid 62355] [client 20.107.203.74:29064] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "ad51iqvogcWlrafOEaHCMAAAAQE"]
[Wed Apr 15 01:12:43.138254 2026] [:error] [pid 62296:tid 62347] [client 20.107.203.74:24243] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "ad51i8TNd04nWM2DK4SE6QAAAFQ"]
[Wed Apr 15 01:12:44.928410 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:25731] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "ad51jKvogcWlrafOEaHCOQAAARc"]
[Wed Apr 15 01:12:45.563009 2026] [:error] [pid 17734:tid 17746] [client 20.107.203.74:29098] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "ad51jdN3xsztF3DFLWwBIAAAAIc"]
[Wed Apr 15 01:12:46.176945 2026] [:error] [pid 62296:tid 62336] [client 20.107.203.74:23452] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "ad51jsTNd04nWM2DK4SE-wAAAEk"]
[Wed Apr 15 01:12:46.762546 2026] [:error] [pid 17734:tid 17744] [client 20.107.203.74:59965] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "ad51jtN3xsztF3DFLWwBKAAAAIU"]
[Wed Apr 15 01:12:47.447471 2026] [:error] [pid 17866:tid 17878] [client 20.107.203.74:23483] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "ad51j7x_17kv70EUVIlFOAAAAYo"]
[Wed Apr 15 01:12:48.327290 2026] [:error] [pid 62295:tid 62307] [client 20.107.203.74:25773] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "ad51kBng-JDNFCa0BnhvkgAAAAg"]
[Wed Apr 15 01:12:48.857480 2026] [:error] [pid 17734:tid 17761] [client 20.107.203.74:8782] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ad51kNN3xsztF3DFLWwBNAAAAJY"]
[Wed Apr 15 01:12:49.436841 2026] [:error] [pid 17734:tid 17754] [client 20.107.203.74:27193] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ad51kdN3xsztF3DFLWwBOgAAAI8"]
[Wed Apr 15 01:12:50.053318 2026] [:error] [pid 17734:tid 17742] [client 20.107.203.74:57849] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ad51ktN3xsztF3DFLWwBRQAAAIM"]
[Wed Apr 15 01:12:50.578614 2026] [:error] [pid 62297:tid 62362] [client 20.107.203.74:27156] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ad51kqvogcWlrafOEaHCSQAAAQg"]
[Wed Apr 15 01:12:51.303347 2026] [:error] [pid 17734:tid 17754] [client 20.107.203.74:25789] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "ad51k9N3xsztF3DFLWwBTgAAAI8"]
[Wed Apr 15 01:12:52.275011 2026] [:error] [pid 62297:tid 62364] [client 20.107.203.74:27173] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "ad51lKvogcWlrafOEaHCUQAAAQo"]
[Wed Apr 15 01:12:52.962804 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:50234] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "ad51lKvogcWlrafOEaHCVwAAARE"]
[Wed Apr 15 01:12:53.478196 2026] [:error] [pid 62432:tid 62441] [client 20.107.203.74:9129] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "ad51lbPtNET7V_vfTPfSCgAAAUY"]
[Wed Apr 15 01:12:54.096120 2026] [:error] [pid 17734:tid 17743] [client 20.107.203.74:25736] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "ad51ltN3xsztF3DFLWwBWgAAAIQ"]
[Wed Apr 15 01:12:54.708741 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:24209] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "ad51ltN3xsztF3DFLWwBYQAAAIE"]
[Wed Apr 15 01:12:55.462439 2026] [:error] [pid 62297:tid 62377] [client 20.107.203.74:20500] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "ad51l6vogcWlrafOEaHCXQAAARc"]
[Wed Apr 15 01:12:56.076909 2026] [:error] [pid 62297:tid 62365] [client 20.107.203.74:9103] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "ad51mKvogcWlrafOEaHCXgAAAQs"]
[Wed Apr 15 01:12:56.782815 2026] [:error] [pid 62297:tid 62360] [client 20.107.203.74:8546] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad51mKvogcWlrafOEaHCYgAAAQY"]
[Wed Apr 15 01:12:57.397123 2026] [:error] [pid 17734:tid 17750] [client 20.107.203.74:57820] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad51mdN3xsztF3DFLWwBcQAAAIs"]
[Wed Apr 15 01:12:58.076122 2026] [:error] [pid 17734:tid 17760] [client 20.107.203.74:51505] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad51mtN3xsztF3DFLWwBeAAAAJU"]
[Wed Apr 15 01:12:58.880785 2026] [:error] [pid 62296:tid 62349] [client 20.107.203.74:9140] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ad51msTNd04nWM2DK4SFPAAAAFY"]
[Wed Apr 15 01:12:59.553936 2026] [:error] [pid 17734:tid 17762] [client 20.107.203.74:8424] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "ad51m9N3xsztF3DFLWwBegAAAJc"]
[Wed Apr 15 01:13:00.662321 2026] [:error] [pid 17804:tid 17825] [client 20.107.203.74:26161] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "ad51nAAZKYxfpamecKd97QAAAM8"]
[Wed Apr 15 01:13:01.505388 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:26138] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "ad51navogcWlrafOEaHCewAAARU"]
[Wed Apr 15 01:13:02.211422 2026] [:error] [pid 62295:tid 62318] [client 20.107.203.74:20517] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "ad51nhng-JDNFCa0BnhvowAAABM"]
[Wed Apr 15 01:13:03.466272 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:8422] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bengi.php"] [unique_id "ad51nxng-JDNFCa0BnhvrAAAAAA"]
[Wed Apr 15 01:13:04.581971 2026] [:error] [pid 17804:tid 17823] [client 20.107.203.74:26156] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bengi.php"] [unique_id "ad51oAAZKYxfpamecKd98QAAAM0"]
[Wed Apr 15 01:13:05.396524 2026] [:error] [pid 17734:tid 17749] [client 20.107.203.74:26145] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bengi.php"] [unique_id "ad51odN3xsztF3DFLWwBiQAAAIo"]
[Wed Apr 15 01:13:06.128628 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:53939] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bengi.php"] [unique_id "ad51oqvogcWlrafOEaHCiwAAARU"]
[Wed Apr 15 01:13:06.745779 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:21709] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad51ohng-JDNFCa0BnhvvQAAAAs"]
[Wed Apr 15 01:13:07.384715 2026] [:error] [pid 17734:tid 17756] [client 20.107.203.74:52483] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad51o9N3xsztF3DFLWwBjwAAAJE"]
[Wed Apr 15 01:13:08.112579 2026] [:error] [pid 17926:tid 17956] [client 20.107.203.74:53708] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad51pPKxFvgDwMI04zBThgAAAdc"]
[Wed Apr 15 01:13:08.736973 2026] [:error] [pid 62432:tid 62439] [client 20.107.203.74:62214] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ad51pLPtNET7V_vfTPfSLgAAAUQ"]
[Wed Apr 15 01:13:09.586813 2026] [:error] [pid 62295:tid 62306] [client 20.107.203.74:52515] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "ad51pRng-JDNFCa0BnhvyQAAAAc"]
[Wed Apr 15 01:13:10.214075 2026] [:error] [pid 17734:tid 17746] [client 20.107.203.74:22138] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "ad51ptN3xsztF3DFLWwBkgAAAIc"]
[Wed Apr 15 01:13:10.815155 2026] [:error] [pid 17734:tid 17747] [client 20.107.203.74:24617] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "ad51ptN3xsztF3DFLWwBmAAAAIg"]
[Wed Apr 15 01:13:11.426442 2026] [:error] [pid 17866:tid 17883] [client 20.107.203.74:22093] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "ad51p7x_17kv70EUVIlFWQAAAY8"]
[Wed Apr 15 01:13:12.227759 2026] [:error] [pid 62296:tid 62334] [client 20.107.203.74:21720] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "ad51qMTNd04nWM2DK4SFWgAAAEc"]
[Wed Apr 15 01:13:13.036845 2026] [:error] [pid 17734:tid 17751] [client 20.107.203.74:24581] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "ad51qdN3xsztF3DFLWwBngAAAIw"]
[Wed Apr 15 01:13:13.713762 2026] [:error] [pid 62296:tid 62331] [client 20.107.203.74:9106] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "ad51qcTNd04nWM2DK4SFXQAAAEQ"]
[Wed Apr 15 01:13:14.439179 2026] [:error] [pid 62295:tid 62302] [client 20.107.203.74:53741] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "ad51qhng-JDNFCa0Bnhv4QAAAAM"]
[Wed Apr 15 01:13:15.249147 2026] [:error] [pid 62296:tid 62344] [client 20.107.203.74:8400] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad51q8TNd04nWM2DK4SFXgAAAFE"]
[Wed Apr 15 01:13:15.928880 2026] [:error] [pid 17866:tid 17889] [client 20.107.203.74:52527] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad51q7x_17kv70EUVIlFYwAAAZU"]
[Wed Apr 15 01:13:16.459720 2026] [:error] [pid 17734:tid 17740] [client 20.107.203.74:21726] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad51rNN3xsztF3DFLWwBoQAAAIE"]
[Wed Apr 15 01:13:17.048091 2026] [:error] [pid 62432:tid 62453] [client 20.107.203.74:24606] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad51rbPtNET7V_vfTPfSPwAAAVI"]
[Wed Apr 15 01:13:17.787605 2026] [:error] [pid 62297:tid 62371] [client 20.107.203.74:53738] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ad51ravogcWlrafOEaHCpAAAARE"]
[Wed Apr 15 01:13:18.306059 2026] [:error] [pid 62297:tid 62374] [client 20.107.203.74:52480] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ad51rqvogcWlrafOEaHCpgAAARQ"]
[Wed Apr 15 01:13:18.886874 2026] [:error] [pid 62297:tid 62363] [client 20.107.203.74:62255] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ad51rqvogcWlrafOEaHCqwAAAQk"]
[Wed Apr 15 01:13:19.562396 2026] [:error] [pid 62295:tid 62309] [client 20.107.203.74:25075] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ad51rxng-JDNFCa0Bnhv8QAAAAo"]
[Wed Apr 15 01:13:20.144034 2026] [:error] [pid 62432:tid 62439] [client 20.107.203.74:21373] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "ad51sLPtNET7V_vfTPfSTwAAAUQ"]
[Wed Apr 15 01:13:20.680313 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:62246] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "ad51sBng-JDNFCa0Bnhv8wAAAAA"]
[Wed Apr 15 01:13:21.342439 2026] [:error] [pid 17734:tid 17751] [client 20.107.203.74:24636] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "ad51sdN3xsztF3DFLWwBqgAAAIw"]
[Wed Apr 15 01:13:21.917840 2026] [:error] [pid 62295:tid 62321] [client 20.107.203.74:24609] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "ad51sRng-JDNFCa0Bnhv_AAAABY"]
[Wed Apr 15 01:13:22.655727 2026] [:error] [pid 62297:tid 62363] [client 20.107.203.74:24633] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "ad51sqvogcWlrafOEaHCvQAAAQk"]
[Wed Apr 15 01:13:23.221027 2026] [:error] [pid 62295:tid 62299] [client 20.107.203.74:31902] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "ad51sxng-JDNFCa0BnhwBgAAAAA"]
[Wed Apr 15 01:13:23.749661 2026] [:error] [pid 62295:tid 62320] [client 20.107.203.74:62243] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "ad51sxng-JDNFCa0BnhwCwAAABU"]
[Wed Apr 15 01:13:26.835103 2026] [proxy_fcgi:error] [pid 62297:tid 62368] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:29.630393 2026] [proxy_fcgi:error] [pid 62297:tid 62375] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:32.288418 2026] [proxy_fcgi:error] [pid 62297:tid 62372] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:34.710912 2026] [proxy_fcgi:error] [pid 62297:tid 62356] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:36.773820 2026] [proxy_fcgi:error] [pid 62297:tid 62363] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:38.874108 2026] [proxy_fcgi:error] [pid 62297:tid 62359] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:40.934710 2026] [proxy_fcgi:error] [pid 62297:tid 62366] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:43.056018 2026] [proxy_fcgi:error] [pid 62297:tid 62372] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:45.182913 2026] [proxy_fcgi:error] [pid 62297:tid 62360] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:47.313985 2026] [proxy_fcgi:error] [pid 62297:tid 62362] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:49.408469 2026] [proxy_fcgi:error] [pid 62297:tid 62377] [client 20.107.203.74:43233] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 01:13:49.743406 2026] [:error] [pid 62297:tid 62375] [client 20.107.203.74:43233] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "ad51zavogcWlrafOEaHDCAAAARU"]
[Wed Apr 15 01:13:50.269249 2026] [:error] [pid 62432:tid 62445] [client 20.107.203.74:59278] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "ad51zrPtNET7V_vfTPfSjAAAAUo"]
[Wed Apr 15 01:13:50.794712 2026] [:error] [pid 17734:tid 17755] [client 20.107.203.74:22387] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "ad51ztN3xsztF3DFLWwCGwAAAJA"]
[Wed Apr 15 01:13:51.368260 2026] [:error] [pid 62295:tid 62310] [client 20.107.203.74:22355] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "ad51zxng-JDNFCa0BnhwYQAAAAs"]
[Wed Apr 15 01:13:51.869522 2026] [:error] [pid 62295:tid 62322] [client 20.107.203.74:59303] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "ad51zxng-JDNFCa0BnhwZgAAABc"]
[Wed Apr 15 01:13:52.394635 2026] [:error] [pid 62295:tid 62308] [client 20.107.203.74:31879] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "ad510Bng-JDNFCa0BnhwawAAAAk"]
[Wed Apr 15 01:13:52.922054 2026] [:error] [pid 62432:tid 62446] [client 20.107.203.74:59304] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "ad510LPtNET7V_vfTPfSkQAAAUs"]
[Wed Apr 15 01:13:53.477186 2026] [:error] [pid 17866:tid 17884] [client 20.107.203.74:8895] [client 20.107.203.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "ad510bx_17kv70EUVIlFbwAAAZA"]
[Wed Apr 15 05:16:45.662459 2026] [proxy_fcgi:error] [pid 45504:tid 45518] [client 52.167.144.57:34955] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 05:16:52.559468 2026] [proxy_fcgi:error] [pid 4169:tid 4177] [client 207.46.13.154:2604] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 15 10:20:17.659337 2026] [proxy_fcgi:error] [pid 50234:tid 50259] [client 157.55.39.10:43974] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 01:38:23.185033 2026] [:error] [pid 37370:tid 37379] [client 118.107.44.120:23969] [client 118.107.44.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.end2end.hostone.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "ad_ND3g-gnM2Ga0cGADgDQAAAQc"], referer: https://www.pinterest.com/
[Thu Apr 16 01:38:25.096478 2026] [proxy_fcgi:error] [pid 37370:tid 37379] [client 118.107.44.120:23969] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322', referer: https://www.pinterest.com/
[Thu Apr 16 02:21:30.051846 2026] [proxy_fcgi:error] [pid 54814:tid 54826] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:33.053621 2026] [proxy_fcgi:error] [pid 54814:tid 54828] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:35.295823 2026] [proxy_fcgi:error] [pid 54814:tid 54831] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:37.424774 2026] [proxy_fcgi:error] [pid 54814:tid 54838] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:39.539044 2026] [proxy_fcgi:error] [pid 54814:tid 54844] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:41.643582 2026] [proxy_fcgi:error] [pid 54814:tid 54842] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:43.748934 2026] [proxy_fcgi:error] [pid 54814:tid 54825] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:45.868937 2026] [proxy_fcgi:error] [pid 54814:tid 54840] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:47.870342 2026] [proxy_fcgi:error] [pid 54814:tid 54844] [client 20.43.56.9:64486] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:21:48.115667 2026] [:error] [pid 54814:tid 54843] [client 20.43.56.9:64486] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad_XPDrHu_-tAAe-BOW17AAAAZc"]
[Thu Apr 16 02:21:49.145577 2026] [:error] [pid 791:tid 856] [client 20.43.56.9:64903] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad_XPbxl5Y18om2fepnfVwAAAE4"]
[Thu Apr 16 02:21:51.879665 2026] [:error] [pid 791:tid 845] [client 20.43.56.9:64943] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad_XP7xl5Y18om2fepnfWQAAAEU"]
[Thu Apr 16 02:21:53.817460 2026] [:error] [pid 20548:tid 20571] [client 20.43.56.9:22464] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ad_XQakpqgnqCHq6bJbD9QAAAJQ"]
[Thu Apr 16 02:21:55.758316 2026] [:error] [pid 912:tid 971] [client 20.43.56.9:21064] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admlo.php"] [unique_id "ad_XQ8U0_VzYCBipADk4ggAAAQM"]
[Thu Apr 16 02:21:58.153415 2026] [:error] [pid 20548:tid 20554] [client 20.43.56.9:40283] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admlo.php"] [unique_id "ad_XRqkpqgnqCHq6bJbD_AAAAIM"]
[Thu Apr 16 02:21:59.856421 2026] [:error] [pid 20548:tid 20553] [client 20.43.56.9:24855] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admlo.php"] [unique_id "ad_XR6kpqgnqCHq6bJbD_wAAAII"]
[Thu Apr 16 02:22:00.533681 2026] [:error] [pid 20548:tid 20562] [client 20.43.56.9:64907] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admlo.php"] [unique_id "ad_XSKkpqgnqCHq6bJbEAQAAAIs"]
[Thu Apr 16 02:22:02.203662 2026] [:error] [pid 34542:tid 34555] [client 20.43.56.9:64919] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t.php"] [unique_id "ad_XSgdF4OGi-asleB6YuQAAAUs"]
[Thu Apr 16 02:22:04.858794 2026] [:error] [pid 912:tid 986] [client 20.43.56.9:40208] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t.php"] [unique_id "ad_XTMU0_VzYCBipADk4iwAAARI"]
[Thu Apr 16 02:22:06.742788 2026] [:error] [pid 34542:tid 34564] [client 20.43.56.9:53499] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t.php"] [unique_id "ad_XTgdF4OGi-asleB6YzQAAAVQ"]
[Thu Apr 16 02:22:08.399373 2026] [:error] [pid 34542:tid 34568] [client 20.43.56.9:23451] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t.php"] [unique_id "ad_XUAdF4OGi-asleB6Y1QAAAVg"]
[Thu Apr 16 02:22:09.646479 2026] [:error] [pid 792:tid 901] [client 20.43.56.9:23487] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ad_XUd3PZ8z30TezIkZldwAAANQ"]
[Thu Apr 16 02:22:11.669803 2026] [:error] [pid 34542:tid 34561] [client 20.43.56.9:56533] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ad_XUwdF4OGi-asleB6Y3gAAAVE"]
[Thu Apr 16 02:22:13.343435 2026] [:error] [pid 912:tid 979] [client 20.43.56.9:40318] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ad_XVcU0_VzYCBipADk4twAAAQs"]
[Thu Apr 16 02:22:14.631827 2026] [:error] [pid 791:tid 859] [client 20.43.56.9:26527] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ad_XVrxl5Y18om2fepnfXwAAAFE"]
[Thu Apr 16 02:22:15.299637 2026] [:error] [pid 791:tid 850] [client 20.43.56.9:53459] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "ad_XV7xl5Y18om2fepnfYAAAAEo"]
[Thu Apr 16 02:22:15.993402 2026] [:error] [pid 790:tid 799] [client 20.43.56.9:40273] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "ad_XVyHz-rbrjNOa3VKrdAAAAAU"]
[Thu Apr 16 02:22:16.714496 2026] [:error] [pid 912:tid 977] [client 20.43.56.9:25922] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "ad_XWMU0_VzYCBipADk4vgAAAQk"]
[Thu Apr 16 02:22:17.218347 2026] [:error] [pid 34542:tid 34545] [client 20.43.56.9:26518] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "ad_XWQdF4OGi-asleB6Y7QAAAUE"]
[Thu Apr 16 02:22:18.102456 2026] [:error] [pid 20548:tid 20555] [client 20.43.56.9:64485] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ad_XWqkpqgnqCHq6bJbEGgAAAIQ"]
[Thu Apr 16 02:22:18.724086 2026] [:error] [pid 20548:tid 20566] [client 20.43.56.9:25976] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ad_XWqkpqgnqCHq6bJbEHAAAAI8"]
[Thu Apr 16 02:22:20.607598 2026] [:error] [pid 20548:tid 20561] [client 20.43.56.9:64939] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ad_XXKkpqgnqCHq6bJbEIQAAAIo"]
[Thu Apr 16 02:22:23.439860 2026] [:error] [pid 20548:tid 20574] [client 20.43.56.9:25942] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ad_XX6kpqgnqCHq6bJbEJQAAAJc"]
[Thu Apr 16 02:22:24.606378 2026] [:error] [pid 20548:tid 20571] [client 20.43.56.9:40319] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad_XYKkpqgnqCHq6bJbEJwAAAJQ"]
[Thu Apr 16 02:22:26.077750 2026] [:error] [pid 20548:tid 20560] [client 20.43.56.9:40313] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad_XYqkpqgnqCHq6bJbELQAAAIk"]
[Thu Apr 16 02:22:28.013362 2026] [:error] [pid 34542:tid 34556] [client 20.43.56.9:56529] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad_XZAdF4OGi-asleB6ZAgAAAUw"]
[Thu Apr 16 02:22:29.571245 2026] [:error] [pid 34542:tid 34566] [client 20.43.56.9:24837] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ad_XZQdF4OGi-asleB6ZCAAAAVY"]
[Thu Apr 16 02:22:31.621765 2026] [:error] [pid 20548:tid 20559] [client 20.43.56.9:25953] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad_XZ6kpqgnqCHq6bJbEMgAAAIg"]
[Thu Apr 16 02:22:33.735830 2026] [:error] [pid 34542:tid 34557] [client 20.43.56.9:23474] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad_XaQdF4OGi-asleB6ZFwAAAU0"]
[Thu Apr 16 02:22:35.458806 2026] [:error] [pid 34542:tid 34550] [client 20.43.56.9:56575] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad_XawdF4OGi-asleB6ZHwAAAUY"]
[Thu Apr 16 02:22:37.067983 2026] [:error] [pid 34542:tid 34555] [client 20.43.56.9:25965] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "ad_XbQdF4OGi-asleB6ZKAAAAUs"]
[Thu Apr 16 02:22:38.236907 2026] [:error] [pid 34542:tid 34545] [client 20.43.56.9:54122] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file.php"] [unique_id "ad_XbgdF4OGi-asleB6ZKgAAAUE"]
[Thu Apr 16 02:22:39.114185 2026] [:error] [pid 54814:tid 54844] [client 20.43.56.9:64952] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file.php"] [unique_id "ad_XbzrHu_-tAAe-BOW2AgAAAZg"]
[Thu Apr 16 02:22:40.309119 2026] [:error] [pid 20548:tid 20570] [client 20.43.56.9:40226] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file.php"] [unique_id "ad_XcKkpqgnqCHq6bJbEOAAAAJM"]
[Thu Apr 16 02:22:41.214459 2026] [:error] [pid 792:tid 870] [client 20.43.56.9:39089] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file.php"] [unique_id "ad_Xcd3PZ8z30TezIkZlfgAAAME"]
[Thu Apr 16 02:22:55.599316 2026] [proxy_fcgi:error] [pid 20548:tid 20562] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:22:58.526517 2026] [proxy_fcgi:error] [pid 20548:tid 20553] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:23:00.938418 2026] [proxy_fcgi:error] [pid 20548:tid 20570] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:23:03.043409 2026] [proxy_fcgi:error] [pid 20548:tid 20552] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:23:05.120896 2026] [proxy_fcgi:error] [pid 20548:tid 20560] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:23:07.179662 2026] [proxy_fcgi:error] [pid 20548:tid 20558] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:23:09.242805 2026] [proxy_fcgi:error] [pid 20548:tid 20571] [client 20.43.56.9:64933] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:23:09.487283 2026] [:error] [pid 20548:tid 20559] [client 20.43.56.9:64933] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ad_XjakpqgnqCHq6bJbEcwAAAIg"]
[Thu Apr 16 02:23:10.208960 2026] [:error] [pid 54814:tid 54844] [client 20.43.56.9:24893] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ad_XjjrHu_-tAAe-BOW2MwAAAZg"]
[Thu Apr 16 02:23:11.903025 2026] [:error] [pid 34542:tid 34555] [client 20.43.56.9:57096] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ad_XjwdF4OGi-asleB6ZfAAAAUs"]
[Thu Apr 16 02:23:13.198707 2026] [:error] [pid 790:tid 826] [client 20.43.56.9:6496] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ad_XkSHz-rbrjNOa3VKrgQAAABU"]
[Thu Apr 16 02:23:14.483031 2026] [:error] [pid 20548:tid 20563] [client 20.43.56.9:56478] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bmi.php"] [unique_id "ad_XkqkpqgnqCHq6bJbEewAAAIw"]
[Thu Apr 16 02:23:15.906444 2026] [:error] [pid 34542:tid 34564] [client 20.43.56.9:6843] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bmi.php"] [unique_id "ad_XkwdF4OGi-asleB6ZiAAAAVQ"]
[Thu Apr 16 02:23:17.382703 2026] [:error] [pid 912:tid 990] [client 20.43.56.9:62246] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bmi.php"] [unique_id "ad_XlcU0_VzYCBipADk46AAAARY"]
[Thu Apr 16 02:23:18.838936 2026] [:error] [pid 791:tid 843] [client 20.43.56.9:61823] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bmi.php"] [unique_id "ad_Xlrxl5Y18om2fepnfaQAAAEM"]
[Thu Apr 16 02:23:20.895569 2026] [:error] [pid 792:tid 877] [client 20.43.56.9:65329] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ad_XmN3PZ8z30TezIkZlhAAAAMg"]
[Thu Apr 16 02:23:22.260759 2026] [:error] [pid 20548:tid 20557] [client 20.43.56.9:28970] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ad_XmqkpqgnqCHq6bJbEiQAAAIY"]
[Thu Apr 16 02:23:23.191814 2026] [:error] [pid 20548:tid 20569] [client 20.43.56.9:55300] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ad_Xm6kpqgnqCHq6bJbEjAAAAJI"]
[Thu Apr 16 02:23:25.566050 2026] [:error] [pid 20548:tid 20571] [client 20.43.56.9:54672] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ad_XnakpqgnqCHq6bJbEmAAAAJQ"]
[Thu Apr 16 02:23:26.507408 2026] [:error] [pid 34542:tid 34556] [client 20.43.56.9:60080] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad_XngdF4OGi-asleB6ZpAAAAUw"]
[Thu Apr 16 02:23:28.773023 2026] [:error] [pid 34542:tid 34552] [client 20.43.56.9:23509] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad_XoAdF4OGi-asleB6ZqgAAAUg"]
[Thu Apr 16 02:23:30.917387 2026] [:error] [pid 912:tid 977] [client 20.43.56.9:23531] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad_XosU0_VzYCBipADk46wAAAQk"]
[Thu Apr 16 02:23:32.559468 2026] [:error] [pid 791:tid 850] [client 20.43.56.9:20543] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "ad_XpLxl5Y18om2fepnfcAAAAEo"]
[Thu Apr 16 02:23:33.748208 2026] [:error] [pid 790:tid 809] [client 20.43.56.9:37103] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dass.php"] [unique_id "ad_XpSHz-rbrjNOa3VKrjgAAAA4"]
[Thu Apr 16 02:23:35.442147 2026] [:error] [pid 912:tid 972] [client 20.43.56.9:27178] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dass.php"] [unique_id "ad_Xp8U0_VzYCBipADk48QAAAQQ"]
[Thu Apr 16 02:23:37.970964 2026] [:error] [pid 54814:tid 54823] [client 20.43.56.9:27145] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dass.php"] [unique_id "ad_XqTrHu_-tAAe-BOW2UQAAAYM"]
[Thu Apr 16 02:23:40.079960 2026] [:error] [pid 54814:tid 54828] [client 20.43.56.9:52817] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dass.php"] [unique_id "ad_XrDrHu_-tAAe-BOW2VgAAAYg"]
[Thu Apr 16 02:23:42.076322 2026] [:error] [pid 912:tid 984] [client 20.43.56.9:27191] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "ad_XrsU0_VzYCBipADk49gAAARA"]
[Thu Apr 16 02:23:45.203007 2026] [:error] [pid 790:tid 825] [client 20.43.56.9:22939] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "ad_XsSHz-rbrjNOa3VKrmwAAABQ"]
[Thu Apr 16 02:23:47.119801 2026] [:error] [pid 20548:tid 20573] [client 20.43.56.9:37098] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "ad_Xs6kpqgnqCHq6bJbEwwAAAJY"]
[Thu Apr 16 02:23:47.966666 2026] [:error] [pid 54814:tid 54840] [client 20.43.56.9:28424] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "ad_XszrHu_-tAAe-BOW2WwAAAZQ"]
[Thu Apr 16 02:23:49.647180 2026] [:error] [pid 34542:tid 34565] [client 20.43.56.9:38389] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ad_XtQdF4OGi-asleB6Z4QAAAVU"]
[Thu Apr 16 02:23:50.821441 2026] [:error] [pid 790:tid 808] [client 20.43.56.9:64104] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ad_XtiHz-rbrjNOa3VKrnAAAAA0"]
[Thu Apr 16 02:23:52.854290 2026] [:error] [pid 34542:tid 34555] [client 20.43.56.9:28471] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ad_XuAdF4OGi-asleB6Z5QAAAUs"]
[Thu Apr 16 02:23:53.491263 2026] [:error] [pid 790:tid 809] [client 20.43.56.9:50206] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ad_XuSHz-rbrjNOa3VKrnwAAAA4"]
[Thu Apr 16 02:23:55.329447 2026] [:error] [pid 912:tid 992] [client 20.43.56.9:37729] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "ad_Xu8U0_VzYCBipADk4-gAAARg"]
[Thu Apr 16 02:23:56.166077 2026] [:error] [pid 34542:tid 34549] [client 20.43.56.9:41430] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "ad_XvAdF4OGi-asleB6Z6AAAAUU"]
[Thu Apr 16 02:23:57.330324 2026] [:error] [pid 912:tid 981] [client 20.43.56.9:57802] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "ad_XvcU0_VzYCBipADk4_AAAAQ0"]
[Thu Apr 16 02:23:58.774625 2026] [:error] [pid 20548:tid 20568] [client 20.43.56.9:23880] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "ad_XvqkpqgnqCHq6bJbE4wAAAJE"]
[Thu Apr 16 02:23:59.480167 2026] [:error] [pid 20548:tid 20573] [client 20.43.56.9:64105] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "ad_Xv6kpqgnqCHq6bJbE6gAAAJY"]
[Thu Apr 16 02:24:00.310445 2026] [:error] [pid 792:tid 877] [client 20.43.56.9:39444] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "ad_XwN3PZ8z30TezIkZlrwAAAMg"]
[Thu Apr 16 02:24:02.020023 2026] [:error] [pid 20548:tid 20555] [client 20.43.56.9:6927] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "ad_XwqkpqgnqCHq6bJbE9AAAAIQ"]
[Thu Apr 16 02:24:05.762077 2026] [:error] [pid 34542:tid 34567] [client 20.43.56.9:6546] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "ad_XxQdF4OGi-asleB6Z9gAAAVc"]
[Thu Apr 16 02:24:10.824179 2026] [proxy_fcgi:error] [pid 912:tid 991] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:13.000839 2026] [proxy_fcgi:error] [pid 912:tid 980] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:15.278387 2026] [proxy_fcgi:error] [pid 912:tid 977] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:17.679622 2026] [proxy_fcgi:error] [pid 912:tid 986] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:19.813768 2026] [proxy_fcgi:error] [pid 912:tid 979] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:22.056321 2026] [proxy_fcgi:error] [pid 912:tid 983] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:24.129071 2026] [proxy_fcgi:error] [pid 912:tid 985] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:26.251517 2026] [proxy_fcgi:error] [pid 912:tid 990] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:28.337281 2026] [proxy_fcgi:error] [pid 912:tid 971] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:30.394807 2026] [proxy_fcgi:error] [pid 912:tid 979] [client 20.43.56.9:39481] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:24:30.645754 2026] [:error] [pid 912:tid 974] [client 20.43.56.9:39481] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index.php"] [unique_id "ad_X3sU0_VzYCBipADk5IAAAAQY"]
[Thu Apr 16 02:24:31.618439 2026] [:error] [pid 34542:tid 34549] [client 20.43.56.9:25426] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index.php"] [unique_id "ad_X3wdF4OGi-asleB6aHwAAAUU"]
[Thu Apr 16 02:24:32.708336 2026] [:error] [pid 34542:tid 34557] [client 20.43.56.9:54762] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index.php"] [unique_id "ad_X4AdF4OGi-asleB6aJgAAAU0"]
[Thu Apr 16 02:24:35.571138 2026] [:error] [pid 34542:tid 34566] [client 20.43.56.9:34594] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index.php"] [unique_id "ad_X4wdF4OGi-asleB6aLAAAAVY"]
[Thu Apr 16 02:24:37.268632 2026] [:error] [pid 791:tid 849] [client 20.43.56.9:7038] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ad_X5bxl5Y18om2fepnfjQAAAEk"]
[Thu Apr 16 02:24:39.124931 2026] [:error] [pid 54814:tid 54821] [client 20.43.56.9:35909] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ad_X5zrHu_-tAAe-BOW2sQAAAYE"]
[Thu Apr 16 02:24:40.189979 2026] [:error] [pid 34542:tid 34562] [client 20.43.56.9:54724] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ad_X6AdF4OGi-asleB6aNgAAAVI"]
[Thu Apr 16 02:24:42.816687 2026] [:error] [pid 54814:tid 54833] [client 20.43.56.9:54725] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ad_X6jrHu_-tAAe-BOW2ugAAAY0"]
[Thu Apr 16 02:24:45.652886 2026] [:error] [pid 20548:tid 20555] [client 20.43.56.9:22423] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/900.php"] [unique_id "ad_X7akpqgnqCHq6bJbFFgAAAIQ"]
[Thu Apr 16 02:24:46.951456 2026] [:error] [pid 34542:tid 34562] [client 20.43.56.9:37664] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/900.php"] [unique_id "ad_X7gdF4OGi-asleB6aQgAAAVI"]
[Thu Apr 16 02:24:48.022153 2026] [:error] [pid 20548:tid 20565] [client 20.43.56.9:37029] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/900.php"] [unique_id "ad_X8KkpqgnqCHq6bJbFGQAAAI4"]
[Thu Apr 16 02:24:49.512046 2026] [:error] [pid 20548:tid 20556] [client 20.43.56.9:37003] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/900.php"] [unique_id "ad_X8akpqgnqCHq6bJbFHwAAAIU"]
[Thu Apr 16 02:24:51.059529 2026] [:error] [pid 20548:tid 20555] [client 20.43.56.9:6266] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ad_X86kpqgnqCHq6bJbFIAAAAIQ"]
[Thu Apr 16 02:24:52.328293 2026] [:error] [pid 54814:tid 54832] [client 20.43.56.9:54770] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ad_X9DrHu_-tAAe-BOW2ywAAAYw"]
[Thu Apr 16 02:24:54.143018 2026] [:error] [pid 34542:tid 34548] [client 20.43.56.9:22424] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ad_X9gdF4OGi-asleB6aRgAAAUQ"]
[Thu Apr 16 02:24:56.628591 2026] [:error] [pid 20548:tid 20557] [client 20.43.56.9:6229] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ad_X-KkpqgnqCHq6bJbFJAAAAIY"]
[Thu Apr 16 02:24:57.998830 2026] [:error] [pid 791:tid 847] [client 20.43.56.9:33330] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "ad_X-bxl5Y18om2fepnfkwAAAEc"]
[Thu Apr 16 02:24:59.468155 2026] [:error] [pid 34542:tid 34563] [client 20.43.56.9:25437] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "ad_X-wdF4OGi-asleB6aUwAAAVM"]
[Thu Apr 16 02:25:00.610949 2026] [:error] [pid 34542:tid 34551] [client 20.43.56.9:37015] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "ad_X_AdF4OGi-asleB6aXwAAAUc"]
[Thu Apr 16 02:25:01.683781 2026] [:error] [pid 790:tid 823] [client 20.43.56.9:6978] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "ad_X_SHz-rbrjNOa3VKrqgAAABI"]
[Thu Apr 16 02:25:02.892677 2026] [:error] [pid 34542:tid 34550] [client 20.43.56.9:25447] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/b.php"] [unique_id "ad_X_gdF4OGi-asleB6abQAAAUY"]
[Thu Apr 16 02:25:04.824163 2026] [:error] [pid 34542:tid 34560] [client 20.43.56.9:54747] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/b.php"] [unique_id "ad_YAAdF4OGi-asleB6adAAAAVA"]
[Thu Apr 16 02:25:06.651786 2026] [:error] [pid 34542:tid 34561] [client 20.43.56.9:37009] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/b.php"] [unique_id "ad_YAgdF4OGi-asleB6afAAAAVE"]
[Thu Apr 16 02:25:08.936312 2026] [:error] [pid 34542:tid 34547] [client 20.43.56.9:6251] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/b.php"] [unique_id "ad_YBAdF4OGi-asleB6agQAAAUM"]
[Thu Apr 16 02:25:11.415413 2026] [:error] [pid 54814:tid 54843] [client 20.43.56.9:54722] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ad_YBzrHu_-tAAe-BOW2_AAAAZc"]
[Thu Apr 16 02:25:15.330067 2026] [:error] [pid 20548:tid 20567] [client 20.43.56.9:65246] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ad_YC6kpqgnqCHq6bJbFMAAAAJA"]
[Thu Apr 16 02:25:17.090037 2026] [:error] [pid 20548:tid 20574] [client 20.43.56.9:33975] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ad_YDakpqgnqCHq6bJbFMwAAAJc"]
[Thu Apr 16 02:25:23.128825 2026] [:error] [pid 54814:tid 54835] [client 20.43.56.9:36994] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ad_YEzrHu_-tAAe-BOW3GQAAAY8"]
[Thu Apr 16 02:25:25.072627 2026] [:error] [pid 20548:tid 20552] [client 20.43.56.9:36359] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccs.php"] [unique_id "ad_YFakpqgnqCHq6bJbFNQAAAIE"]
[Thu Apr 16 02:25:26.745288 2026] [:error] [pid 20548:tid 20554] [client 20.43.56.9:35917] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccs.php"] [unique_id "ad_YFqkpqgnqCHq6bJbFOwAAAIM"]
[Thu Apr 16 02:25:28.706835 2026] [:error] [pid 34542:tid 34549] [client 20.43.56.9:40726] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccs.php"] [unique_id "ad_YGAdF4OGi-asleB6amQAAAUU"]
[Thu Apr 16 02:25:32.023033 2026] [proxy_fcgi:error] [pid 20548:tid 20556] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:34.859409 2026] [proxy_fcgi:error] [pid 20548:tid 20573] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:37.300821 2026] [proxy_fcgi:error] [pid 20548:tid 20557] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:39.382790 2026] [proxy_fcgi:error] [pid 20548:tid 20561] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:41.454326 2026] [proxy_fcgi:error] [pid 20548:tid 20556] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:43.463833 2026] [proxy_fcgi:error] [pid 20548:tid 20565] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:45.523188 2026] [proxy_fcgi:error] [pid 20548:tid 20575] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:47.537207 2026] [proxy_fcgi:error] [pid 20548:tid 20552] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:49.616579 2026] [proxy_fcgi:error] [pid 20548:tid 20572] [client 20.43.56.9:49725] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:25:49.863169 2026] [:error] [pid 20548:tid 20564] [client 20.43.56.9:49725] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "ad_YLakpqgnqCHq6bJbFawAAAI0"]
[Thu Apr 16 02:25:52.055595 2026] [:error] [pid 34542:tid 34557] [client 20.43.56.9:49698] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "ad_YMAdF4OGi-asleB6augAAAU0"]
[Thu Apr 16 02:25:53.677785 2026] [:error] [pid 34542:tid 34551] [client 20.43.56.9:37011] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "ad_YMQdF4OGi-asleB6avgAAAUc"]
[Thu Apr 16 02:25:55.393774 2026] [:error] [pid 791:tid 843] [client 20.43.56.9:6235] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wen.php"] [unique_id "ad_YM7xl5Y18om2fepnfoQAAAEM"]
[Thu Apr 16 02:25:57.490082 2026] [:error] [pid 34542:tid 34558] [client 20.43.56.9:30259] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ad_YNQdF4OGi-asleB6axwAAAU4"]
[Thu Apr 16 02:25:59.895232 2026] [:error] [pid 34542:tid 34553] [client 20.43.56.9:30219] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ad_YNwdF4OGi-asleB6a1QAAAUk"]
[Thu Apr 16 02:26:02.003836 2026] [:error] [pid 912:tid 979] [client 20.43.56.9:34029] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ad_YOsU0_VzYCBipADk5QAAAAQs"]
[Thu Apr 16 02:26:04.914774 2026] [:error] [pid 20548:tid 20554] [client 20.43.56.9:33940] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ad_YPKkpqgnqCHq6bJbFlQAAAIM"]
[Thu Apr 16 02:26:06.918832 2026] [:error] [pid 34542:tid 34548] [client 20.43.56.9:36371] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_YPgdF4OGi-asleB6a8AAAAUQ"]
[Thu Apr 16 02:26:09.494690 2026] [:error] [pid 912:tid 991] [client 20.43.56.9:39144] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_YQcU0_VzYCBipADk5QgAAARc"]
[Thu Apr 16 02:26:12.233525 2026] [:error] [pid 20548:tid 20565] [client 20.43.56.9:40732] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_YRKkpqgnqCHq6bJbFpwAAAI4"]
[Thu Apr 16 02:26:14.400854 2026] [:error] [pid 34542:tid 34546] [client 20.43.56.9:33957] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_YRgdF4OGi-asleB6bBAAAAUI"]
[Thu Apr 16 02:26:16.233836 2026] [:error] [pid 20548:tid 20558] [client 20.43.56.9:32672] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "ad_YSKkpqgnqCHq6bJbFuQAAAIc"]
[Thu Apr 16 02:26:17.831003 2026] [:error] [pid 790:tid 803] [client 20.43.56.9:39149] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "ad_YSSHz-rbrjNOa3VKrvgAAAAg"]
[Thu Apr 16 02:26:20.013125 2026] [:error] [pid 20548:tid 20566] [client 20.43.56.9:39124] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "ad_YTKkpqgnqCHq6bJbFygAAAI8"]
[Thu Apr 16 02:26:21.103615 2026] [:error] [pid 54814:tid 54835] [client 20.43.56.9:34033] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "ad_YTTrHu_-tAAe-BOW3PwAAAY8"]
[Thu Apr 16 02:26:22.703086 2026] [:error] [pid 20548:tid 20570] [client 20.43.56.9:39120] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad_YTqkpqgnqCHq6bJbFzgAAAJM"]
[Thu Apr 16 02:26:24.211542 2026] [:error] [pid 34542:tid 34552] [client 20.43.56.9:21381] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad_YUAdF4OGi-asleB6bDQAAAUg"]
[Thu Apr 16 02:26:25.993855 2026] [:error] [pid 20548:tid 20568] [client 20.43.56.9:35139] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad_YUakpqgnqCHq6bJbF3gAAAJE"]
[Thu Apr 16 02:26:27.504414 2026] [:error] [pid 34542:tid 34554] [client 20.43.56.9:20556] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ad_YUwdF4OGi-asleB6bEgAAAUo"]
[Thu Apr 16 02:26:29.132266 2026] [:error] [pid 34542:tid 34566] [client 20.43.56.9:59610] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "ad_YVQdF4OGi-asleB6bFwAAAVY"]
[Thu Apr 16 02:26:30.728655 2026] [:error] [pid 791:tid 866] [client 20.43.56.9:33996] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "ad_YVrxl5Y18om2fepnfqwAAAFg"]
[Thu Apr 16 02:26:34.619952 2026] [:error] [pid 791:tid 851] [client 20.43.56.9:30229] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "ad_YWrxl5Y18om2fepnfrgAAAEs"]
[Thu Apr 16 02:26:35.690025 2026] [:error] [pid 34542:tid 34555] [client 20.43.56.9:41378] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/grsiuk.php"] [unique_id "ad_YWwdF4OGi-asleB6bIQAAAUs"]
[Thu Apr 16 02:26:37.864060 2026] [:error] [pid 20548:tid 20571] [client 20.43.56.9:7044] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "ad_YXakpqgnqCHq6bJbGCwAAAJQ"]
[Thu Apr 16 02:26:41.639151 2026] [:error] [pid 20548:tid 20564] [client 20.43.56.9:30261] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "ad_YYakpqgnqCHq6bJbGGQAAAI0"]
[Thu Apr 16 02:26:43.921395 2026] [:error] [pid 792:tid 901] [client 20.43.56.9:34019] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "ad_YY93PZ8z30TezIkZmRAAAANQ"]
[Thu Apr 16 02:26:46.767504 2026] [:error] [pid 792:tid 893] [client 20.43.56.9:59618] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gifclass.php"] [unique_id "ad_YZt3PZ8z30TezIkZmRQAAAM8"]
[Thu Apr 16 02:26:52.338982 2026] [proxy_fcgi:error] [pid 791:tid 853] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:26:55.207387 2026] [proxy_fcgi:error] [pid 791:tid 842] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:26:57.485254 2026] [proxy_fcgi:error] [pid 791:tid 857] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:26:59.592753 2026] [proxy_fcgi:error] [pid 791:tid 846] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:27:01.727771 2026] [proxy_fcgi:error] [pid 791:tid 850] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:27:03.777326 2026] [proxy_fcgi:error] [pid 791:tid 852] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:27:05.805500 2026] [proxy_fcgi:error] [pid 791:tid 844] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:27:07.880392 2026] [proxy_fcgi:error] [pid 791:tid 848] [client 20.43.56.9:62798] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:27:08.123304 2026] [:error] [pid 791:tid 861] [client 20.43.56.9:62798] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "ad_YfLxl5Y18om2fepnfxAAAAFM"]
[Thu Apr 16 02:27:09.976998 2026] [:error] [pid 912:tid 980] [client 20.43.56.9:30750] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "ad_YfcU0_VzYCBipADk5YgAAAQw"]
[Thu Apr 16 02:27:11.986855 2026] [:error] [pid 790:tid 797] [client 20.43.56.9:7076] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "ad_YfyHz-rbrjNOa3VKrzAAAAAM"]
[Thu Apr 16 02:27:12.997746 2026] [:error] [pid 54814:tid 54832] [client 20.43.56.9:32033] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "ad_YgDrHu_-tAAe-BOW3bQAAAYw"]
[Thu Apr 16 02:27:14.637429 2026] [:error] [pid 54814:tid 54840] [client 20.43.56.9:61704] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad_YgjrHu_-tAAe-BOW3bgAAAZQ"]
[Thu Apr 16 02:27:15.860139 2026] [:error] [pid 20548:tid 20558] [client 20.43.56.9:58463] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad_Yg6kpqgnqCHq6bJbGbQAAAIc"]
[Thu Apr 16 02:27:17.655667 2026] [:error] [pid 54814:tid 54827] [client 20.43.56.9:32001] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad_YhTrHu_-tAAe-BOW3dAAAAYc"]
[Thu Apr 16 02:27:19.764273 2026] [:error] [pid 791:tid 863] [client 20.43.56.9:32044] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "ad_Yh7xl5Y18om2fepnfxQAAAFU"]
[Thu Apr 16 02:27:21.228854 2026] [:error] [pid 34542:tid 34561] [client 20.43.56.9:58434] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_YiQdF4OGi-asleB6bXwAAAVE"]
[Thu Apr 16 02:27:22.946504 2026] [:error] [pid 912:tid 976] [client 20.43.56.9:6626] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_YisU0_VzYCBipADk5bAAAAQg"]
[Thu Apr 16 02:27:23.619993 2026] [:error] [pid 791:tid 841] [client 20.43.56.9:60626] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_Yi7xl5Y18om2fepnfyAAAAEE"]
[Thu Apr 16 02:27:25.086026 2026] [:error] [pid 20548:tid 20561] [client 20.43.56.9:6150] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_YjakpqgnqCHq6bJbGhQAAAIo"]
[Thu Apr 16 02:27:26.336456 2026] [:error] [pid 34542:tid 34565] [client 20.43.56.9:64882] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws88.php"] [unique_id "ad_YjgdF4OGi-asleB6bZgAAAVU"]
[Thu Apr 16 02:27:28.329673 2026] [:error] [pid 34542:tid 34544] [client 20.43.56.9:64161] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws88.php"] [unique_id "ad_YkAdF4OGi-asleB6bagAAAUA"]
[Thu Apr 16 02:27:29.455417 2026] [:error] [pid 34542:tid 34545] [client 20.43.56.9:60096] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws88.php"] [unique_id "ad_YkQdF4OGi-asleB6bbQAAAUE"]
[Thu Apr 16 02:27:30.842158 2026] [:error] [pid 792:tid 895] [client 20.43.56.9:60125] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws88.php"] [unique_id "ad_Ykt3PZ8z30TezIkZmWgAAANE"]
[Thu Apr 16 02:27:32.255045 2026] [:error] [pid 912:tid 983] [client 20.43.56.9:60149] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "ad_YlMU0_VzYCBipADk5cQAAAQ8"]
[Thu Apr 16 02:27:34.390490 2026] [:error] [pid 792:tid 871] [client 20.43.56.9:64187] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "ad_Ylt3PZ8z30TezIkZmXQAAAMI"]
[Thu Apr 16 02:27:35.666878 2026] [:error] [pid 791:tid 845] [client 20.43.56.9:24901] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "ad_Yl7xl5Y18om2fepnf0QAAAEU"]
[Thu Apr 16 02:27:36.798261 2026] [:error] [pid 20548:tid 20574] [client 20.43.56.9:24444] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "ad_YmKkpqgnqCHq6bJbGmAAAAJc"]
[Thu Apr 16 02:27:39.047265 2026] [:error] [pid 20548:tid 20571] [client 20.43.56.9:23813] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/set.php"] [unique_id "ad_Ym6kpqgnqCHq6bJbGnAAAAJQ"]
[Thu Apr 16 02:27:40.565294 2026] [:error] [pid 791:tid 845] [client 20.43.56.9:65299] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/set.php"] [unique_id "ad_YnLxl5Y18om2fepnf1AAAAEU"]
[Thu Apr 16 02:27:42.884435 2026] [:error] [pid 20548:tid 20570] [client 20.43.56.9:23842] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/set.php"] [unique_id "ad_YnqkpqgnqCHq6bJbGoAAAAJM"]
[Thu Apr 16 02:27:43.660767 2026] [:error] [pid 791:tid 848] [client 20.43.56.9:21490] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/set.php"] [unique_id "ad_Yn7xl5Y18om2fepnf3QAAAEg"]
[Thu Apr 16 02:27:44.696310 2026] [:error] [pid 34542:tid 34550] [client 20.43.56.9:25873] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hroxw.php"] [unique_id "ad_YoAdF4OGi-asleB6bgwAAAUY"]
[Thu Apr 16 02:27:46.395708 2026] [:error] [pid 912:tid 975] [client 20.43.56.9:6318] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hroxw.php"] [unique_id "ad_YosU0_VzYCBipADk5eAAAAQc"]
[Thu Apr 16 02:27:47.390049 2026] [:error] [pid 790:tid 825] [client 20.43.56.9:53385] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hroxw.php"] [unique_id "ad_YoyHz-rbrjNOa3VKr2gAAABQ"]
[Thu Apr 16 02:27:48.676120 2026] [:error] [pid 54814:tid 54843] [client 20.43.56.9:32094] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hroxw.php"] [unique_id "ad_YpDrHu_-tAAe-BOW3lgAAAZc"]
[Thu Apr 16 02:27:51.144883 2026] [:error] [pid 54814:tid 54822] [client 20.43.56.9:61767] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ad_YpzrHu_-tAAe-BOW3pwAAAYI"]
[Thu Apr 16 02:27:53.197917 2026] [:error] [pid 912:tid 987] [client 20.43.56.9:26618] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ad_YqcU0_VzYCBipADk5fQAAARM"]
[Thu Apr 16 02:27:55.119362 2026] [:error] [pid 20548:tid 20553] [client 20.43.56.9:32081] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ad_Yq6kpqgnqCHq6bJbGsgAAAII"]
[Thu Apr 16 02:27:56.463302 2026] [:error] [pid 792:tid 884] [client 20.43.56.9:53383] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ad_YrN3PZ8z30TezIkZmcAAAAMs"]
[Thu Apr 16 02:27:57.531905 2026] [:error] [pid 792:tid 875] [client 20.43.56.9:55908] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "ad_Yrd3PZ8z30TezIkZmcQAAAMY"]
[Thu Apr 16 02:27:59.009057 2026] [:error] [pid 912:tid 992] [client 20.43.56.9:25403] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "ad_Yr8U0_VzYCBipADk5iAAAARg"]
[Thu Apr 16 02:28:00.567835 2026] [:error] [pid 912:tid 974] [client 20.43.56.9:31537] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "ad_YsMU0_VzYCBipADk5jQAAAQY"]
[Thu Apr 16 02:28:02.153583 2026] [:error] [pid 20548:tid 20563] [client 20.43.56.9:24833] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoo.php"] [unique_id "ad_YsqkpqgnqCHq6bJbGwAAAAIw"]
[Thu Apr 16 02:28:03.545861 2026] [:error] [pid 912:tid 976] [client 20.43.56.9:56486] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gaza.php"] [unique_id "ad_Ys8U0_VzYCBipADk5kwAAAQg"]
[Thu Apr 16 02:28:04.394716 2026] [:error] [pid 34542:tid 34553] [client 20.43.56.9:6298] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gaza.php"] [unique_id "ad_YtAdF4OGi-asleB6bvQAAAUk"]
[Thu Apr 16 02:28:05.329884 2026] [:error] [pid 912:tid 970] [client 20.43.56.9:35878] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gaza.php"] [unique_id "ad_YtcU0_VzYCBipADk5lwAAAQI"]
[Thu Apr 16 02:28:05.949795 2026] [:error] [pid 54814:tid 54820] [client 20.43.56.9:32121] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gaza.php"] [unique_id "ad_YtTrHu_-tAAe-BOW32wAAAYA"]
[Thu Apr 16 02:28:06.653208 2026] [:error] [pid 20548:tid 20564] [client 20.43.56.9:32077] [client 20.43.56.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/retu11.PhP7"] [unique_id "ad_YtqkpqgnqCHq6bJbGxwAAAI0"]
[Thu Apr 16 02:28:09.825078 2026] [proxy_fcgi:error] [pid 792:tid 894] [client 20.43.56.9:25353] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:28:10.766899 2026] [:error] [pid 792:tid 902] [client 20.43.56.9:25353] [client 20.43.56.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "end2end.hostone.com.au"] [uri "/fm.php"] [unique_id "ad_Yut3PZ8z30TezIkZmegAAANU"]
[Thu Apr 16 02:28:13.619554 2026] [proxy_fcgi:error] [pid 20548:tid 20560] [client 20.43.56.9:33374] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:28:16.348423 2026] [proxy_fcgi:error] [pid 20548:tid 20565] [client 20.43.56.9:33374] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 02:43:13.286200 2026] [:error] [pid 34542:tid 34564] [client 91.200.101.138:61155] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/graphql"] [unique_id "ad_cQQdF4OGi-asleB6gXAAAAVQ"]
[Thu Apr 16 08:50:56.279436 2026] [proxy_fcgi:error] [pid 57536:tid 57568] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:50:59.220360 2026] [proxy_fcgi:error] [pid 57536:tid 57550] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:01.686540 2026] [proxy_fcgi:error] [pid 57536:tid 57572] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:03.897635 2026] [proxy_fcgi:error] [pid 57536:tid 57562] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:06.069995 2026] [proxy_fcgi:error] [pid 57536:tid 57571] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:08.828984 2026] [proxy_fcgi:error] [pid 57536:tid 57569] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:11.030922 2026] [proxy_fcgi:error] [pid 57536:tid 57554] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:13.147711 2026] [proxy_fcgi:error] [pid 57536:tid 57570] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:15.443294 2026] [proxy_fcgi:error] [pid 57536:tid 57561] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:17.734593 2026] [proxy_fcgi:error] [pid 57536:tid 57552] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:19.939988 2026] [proxy_fcgi:error] [pid 57536:tid 57566] [client 172.213.241.216:37174] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:51:20.182407 2026] [:error] [pid 57536:tid 57555] [client 172.213.241.216:37174] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/green.php"] [unique_id "aeAyiCQU4faGja6jpDuaPQAAAAc"]
[Thu Apr 16 08:52:11.177336 2026] [:error] [pid 57639:tid 57650] [client 172.213.241.216:29243] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/RIP.php"] [unique_id "aeAyu6MCQoTw7TsxWukN0gAAAMQ"]
[Thu Apr 16 08:52:13.807183 2026] [:error] [pid 57639:tid 57655] [client 172.213.241.216:60329] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/RIP.php"] [unique_id "aeAyvaMCQoTw7TsxWukN5QAAAMk"]
[Thu Apr 16 08:52:14.690715 2026] [:error] [pid 57639:tid 57663] [client 172.213.241.216:36540] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/RIP.php"] [unique_id "aeAyvqMCQoTw7TsxWukN6wAAANE"]
[Thu Apr 16 08:52:17.747533 2026] [:error] [pid 49094:tid 49115] [client 172.213.241.216:37178] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/RIP.php"] [unique_id "aeAywTbDwvcXorHR_MzcwwAAAVM"]
[Thu Apr 16 08:52:20.882072 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:23.949411 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:26.514367 2026] [proxy_fcgi:error] [pid 57538:tid 57622] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:28.981759 2026] [proxy_fcgi:error] [pid 57538:tid 57624] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:31.430511 2026] [proxy_fcgi:error] [pid 57538:tid 57623] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:33.598114 2026] [proxy_fcgi:error] [pid 57538:tid 57624] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:36.118158 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:38.398558 2026] [proxy_fcgi:error] [pid 57538:tid 57609] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:40.713289 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:43.910860 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:48.531101 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 172.213.241.216:37123] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:52:48.830818 2026] [:error] [pid 57538:tid 57620] [client 172.213.241.216:37123] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/unloathness.php"] [unique_id "aeAy4MuMaiEF5SVR2BdhNwAAAJI"]
[Thu Apr 16 08:52:49.976494 2026] [:error] [pid 57537:tid 57597] [client 172.213.241.216:45405] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/unloathness.php"] [unique_id "aeAy4VVQRS8nm73ENAlTNQAAAFY"]
[Thu Apr 16 08:52:50.840172 2026] [:error] [pid 29603:tid 29612] [client 172.213.241.216:59110] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/unloathness.php"] [unique_id "aeAy4lfGOR6fpTWUAzoB2AAAAQc"]
[Thu Apr 16 08:52:51.721846 2026] [:error] [pid 57537:tid 57588] [client 172.213.241.216:42737] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/unloathness.php"] [unique_id "aeAy41VQRS8nm73ENAlTPAAAAE0"]
[Thu Apr 16 08:52:52.605136 2026] [:error] [pid 57639:tid 57658] [client 172.213.241.216:37134] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doo.php"] [unique_id "aeAy5KMCQoTw7TsxWukOdwAAAMw"]
[Thu Apr 16 08:52:54.383601 2026] [:error] [pid 57538:tid 57625] [client 172.213.241.216:27968] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doo.php"] [unique_id "aeAy5suMaiEF5SVR2BdhOwAAAJc"]
[Thu Apr 16 08:52:55.346553 2026] [:error] [pid 29603:tid 29610] [client 172.213.241.216:29198] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doo.php"] [unique_id "aeAy51fGOR6fpTWUAzoB2gAAAQU"]
[Thu Apr 16 08:52:56.944635 2026] [:error] [pid 49094:tid 49103] [client 172.213.241.216:28031] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doo.php"] [unique_id "aeAy6DbDwvcXorHR_Mzc5wAAAUc"]
[Thu Apr 16 08:52:58.129330 2026] [:error] [pid 29603:tid 29619] [client 172.213.241.216:42723] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x123.php"] [unique_id "aeAy6lfGOR6fpTWUAzoB4QAAAQ4"]
[Thu Apr 16 08:53:01.791220 2026] [:error] [pid 49094:tid 49105] [client 172.213.241.216:60299] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x123.php"] [unique_id "aeAy7TbDwvcXorHR_Mzc7wAAAUk"]
[Thu Apr 16 08:53:03.128010 2026] [:error] [pid 57639:tid 57667] [client 172.213.241.216:36538] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x123.php"] [unique_id "aeAy76MCQoTw7TsxWukPhQAAANU"]
[Thu Apr 16 08:53:07.592920 2026] [:error] [pid 57537:tid 57585] [client 172.213.241.216:29195] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x123.php"] [unique_id "aeAy81VQRS8nm73ENAlTSQAAAEo"]
[Thu Apr 16 08:53:08.463908 2026] [:error] [pid 29603:tid 29610] [client 172.213.241.216:28002] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h2.php"] [unique_id "aeAy9FfGOR6fpTWUAzoB6QAAAQU"]
[Thu Apr 16 08:53:10.800056 2026] [:error] [pid 29603:tid 29621] [client 172.213.241.216:30989] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h2.php"] [unique_id "aeAy9lfGOR6fpTWUAzoB7gAAARA"]
[Thu Apr 16 08:53:12.723301 2026] [:error] [pid 57538:tid 57606] [client 172.213.241.216:27982] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h2.php"] [unique_id "aeAy-MuMaiEF5SVR2BdhXAAAAIQ"]
[Thu Apr 16 08:53:13.773156 2026] [:error] [pid 57538:tid 57623] [client 172.213.241.216:36488] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h2.php"] [unique_id "aeAy-cuMaiEF5SVR2BdhXwAAAJU"]
[Thu Apr 16 08:53:15.191290 2026] [:error] [pid 57639:tid 57651] [client 172.213.241.216:42748] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/greateb.php"] [unique_id "aeAy-6MCQoTw7TsxWukPqAAAAMU"]
[Thu Apr 16 08:53:15.819396 2026] [:error] [pid 57538:tid 57614] [client 172.213.241.216:49344] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/greateb.php"] [unique_id "aeAy-8uMaiEF5SVR2BdhZAAAAIw"]
[Thu Apr 16 08:53:16.484210 2026] [:error] [pid 57536:tid 57568] [client 172.213.241.216:36484] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/greateb.php"] [unique_id "aeAy_CQU4faGja6jpDua1AAAABQ"]
[Thu Apr 16 08:53:17.882745 2026] [:error] [pid 57538:tid 57610] [client 172.213.241.216:29186] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/greateb.php"] [unique_id "aeAy_cuMaiEF5SVR2BdhZwAAAIg"]
[Thu Apr 16 08:53:18.858925 2026] [:error] [pid 57639:tid 57670] [client 172.213.241.216:46756] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-class.php"] [unique_id "aeAy_qMCQoTw7TsxWukPrwAAANg"]
[Thu Apr 16 08:53:20.810526 2026] [:error] [pid 57538:tid 57621] [client 172.213.241.216:42714] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-class.php"] [unique_id "aeAzAMuMaiEF5SVR2BdhaAAAAJM"]
[Thu Apr 16 08:53:21.585449 2026] [:error] [pid 57538:tid 57608] [client 172.213.241.216:60315] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-class.php"] [unique_id "aeAzAcuMaiEF5SVR2BdhaQAAAIY"]
[Thu Apr 16 08:53:22.523947 2026] [:error] [pid 29603:tid 29622] [client 172.213.241.216:27986] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-class.php"] [unique_id "aeAzAlfGOR6fpTWUAzoB_AAAARE"]
[Thu Apr 16 08:53:26.644936 2026] [:error] [pid 57639:tid 57662] [client 172.213.241.216:60330] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAzBqMCQoTw7TsxWukPugAAANA"]
[Thu Apr 16 08:53:28.637175 2026] [:error] [pid 29603:tid 29619] [client 172.213.241.216:49381] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAzCFfGOR6fpTWUAzoCCAAAAQ4"]
[Thu Apr 16 08:53:29.351491 2026] [:error] [pid 49094:tid 49115] [client 172.213.241.216:53757] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAzCTbDwvcXorHR_MzdOwAAAVM"]
[Thu Apr 16 08:53:30.087375 2026] [:error] [pid 57538:tid 57623] [client 172.213.241.216:53734] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mjq.php/kma.php"] [unique_id "aeAzCsuMaiEF5SVR2BdhdQAAAJU"]
[Thu Apr 16 08:53:32.248672 2026] [:error] [pid 49094:tid 49118] [client 172.213.241.216:37128] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bjeni.php"] [unique_id "aeAzDDbDwvcXorHR_MzdQgAAAVY"]
[Thu Apr 16 08:53:33.781647 2026] [:error] [pid 57536:tid 57549] [client 172.213.241.216:31023] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bjeni.php"] [unique_id "aeAzDSQU4faGja6jpDua6AAAAAE"]
[Thu Apr 16 08:53:34.824734 2026] [:error] [pid 49094:tid 49109] [client 172.213.241.216:45423] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bjeni.php"] [unique_id "aeAzDjbDwvcXorHR_MzdTQAAAU0"]
[Thu Apr 16 08:53:37.014740 2026] [:error] [pid 57639:tid 57652] [client 172.213.241.216:37131] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bjeni.php"] [unique_id "aeAzEaMCQoTw7TsxWukPxgAAAMY"]
[Thu Apr 16 08:53:38.175658 2026] [:error] [pid 49094:tid 49102] [client 172.213.241.216:58055] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/export.php"] [unique_id "aeAzEjbDwvcXorHR_MzdZAAAAUY"]
[Thu Apr 16 08:53:39.113826 2026] [:error] [pid 57538:tid 57621] [client 172.213.241.216:35865] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/export.php"] [unique_id "aeAzE8uMaiEF5SVR2BdhiQAAAJM"]
[Thu Apr 16 08:53:40.217036 2026] [:error] [pid 49094:tid 49108] [client 172.213.241.216:28000] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/export.php"] [unique_id "aeAzFDbDwvcXorHR_MzdbgAAAUw"]
[Thu Apr 16 08:53:42.334394 2026] [:error] [pid 29603:tid 29621] [client 172.213.241.216:59120] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/export.php"] [unique_id "aeAzFlfGOR6fpTWUAzoCHQAAARA"]
[Thu Apr 16 08:53:44.150081 2026] [:error] [pid 57537:tid 57593] [client 172.213.241.216:31005] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tymi.php"] [unique_id "aeAzGFVQRS8nm73ENAlTZgAAAFI"]
[Thu Apr 16 08:53:48.571823 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:53:51.815692 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:53:54.190116 2026] [proxy_fcgi:error] [pid 49094:tid 49115] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:53:56.387288 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:53:58.573604 2026] [proxy_fcgi:error] [pid 49094:tid 49106] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:54:01.434676 2026] [proxy_fcgi:error] [pid 49094:tid 49103] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:54:03.827310 2026] [proxy_fcgi:error] [pid 49094:tid 49112] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:54:06.123830 2026] [proxy_fcgi:error] [pid 49094:tid 49113] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:54:08.311612 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 172.213.241.216:29212] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:44.933872 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:47.825739 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:50.266433 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:52.480465 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:54.735884 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:56.860253 2026] [proxy_fcgi:error] [pid 57639:tid 57662] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:55:59.072189 2026] [proxy_fcgi:error] [pid 57639:tid 57658] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:56:01.636615 2026] [proxy_fcgi:error] [pid 57639:tid 57648] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:56:03.788312 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:56:06.055850 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:56:08.297367 2026] [proxy_fcgi:error] [pid 57639:tid 57655] [client 172.213.241.216:57095] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:56:08.540897 2026] [:error] [pid 57639:tid 57670] [client 172.213.241.216:57095] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless5.php"] [unique_id "aeAzqKMCQoTw7TsxWukRwAAAANg"]
[Thu Apr 16 08:56:10.252565 2026] [:error] [pid 57537:tid 57599] [client 172.213.241.216:41457] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless5.php"] [unique_id "aeAzqlVQRS8nm73ENAlUKQAAAFg"]
[Thu Apr 16 08:56:11.193517 2026] [:error] [pid 57536:tid 57552] [client 172.213.241.216:5542] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless5.php"] [unique_id "aeAzqyQU4faGja6jpDubSgAAAAQ"]
[Thu Apr 16 08:56:12.398283 2026] [:error] [pid 57639:tid 57662] [client 172.213.241.216:59136] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless5.php"] [unique_id "aeAzrKMCQoTw7TsxWukR0AAAANA"]
[Thu Apr 16 08:56:14.250202 2026] [:error] [pid 49094:tid 49114] [client 172.213.241.216:34733] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lolz.php"] [unique_id "aeAzrjbDwvcXorHR_Mze9wAAAVI"]
[Thu Apr 16 08:56:15.088518 2026] [:error] [pid 49094:tid 49103] [client 172.213.241.216:5293] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lolz.php"] [unique_id "aeAzrzbDwvcXorHR_Mze_QAAAUc"]
[Thu Apr 16 08:56:17.439137 2026] [:error] [pid 49094:tid 49109] [client 172.213.241.216:57658] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lolz.php"] [unique_id "aeAzsTbDwvcXorHR_MzfCgAAAU0"]
[Thu Apr 16 08:56:19.156225 2026] [:error] [pid 57639:tid 57660] [client 172.213.241.216:35318] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lolz.php"] [unique_id "aeAzs6MCQoTw7TsxWukR2wAAAM4"]
[Thu Apr 16 08:56:20.634755 2026] [:error] [pid 29603:tid 29621] [client 172.213.241.216:35216] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "aeAztFfGOR6fpTWUAzoC8wAAARA"]
[Thu Apr 16 08:56:22.755542 2026] [:error] [pid 29603:tid 29619] [client 172.213.241.216:57135] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "aeAztlfGOR6fpTWUAzoC9gAAAQ4"]
[Thu Apr 16 08:56:23.632396 2026] [:error] [pid 49094:tid 49119] [client 172.213.241.216:35297] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "aeAztzbDwvcXorHR_MzfGAAAAVc"]
[Thu Apr 16 08:56:25.239365 2026] [:error] [pid 57639:tid 57654] [client 172.213.241.216:48890] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "aeAzuaMCQoTw7TsxWukR5AAAAMg"]
[Thu Apr 16 08:56:26.297646 2026] [:error] [pid 57639:tid 57659] [client 172.213.241.216:48867] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aeAzuqMCQoTw7TsxWukSEAAAAM0"]
[Thu Apr 16 08:56:27.479289 2026] [:error] [pid 29603:tid 29620] [client 172.213.241.216:45337] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aeAzu1fGOR6fpTWUAzoDJgAAAQ8"]
[Thu Apr 16 08:56:28.590349 2026] [:error] [pid 57538:tid 57623] [client 172.213.241.216:59144] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aeAzvMuMaiEF5SVR2BdiLAAAAJU"]
[Thu Apr 16 08:56:29.343596 2026] [:error] [pid 49094:tid 49104] [client 172.213.241.216:59152] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "aeAzvTbDwvcXorHR_MzfHwAAAUg"]
[Thu Apr 16 08:56:33.828666 2026] [:error] [pid 57538:tid 57619] [client 172.213.241.216:35227] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxcs.php"] [unique_id "aeAzwcuMaiEF5SVR2BdiLQAAAJE"]
[Thu Apr 16 08:56:35.910050 2026] [:error] [pid 29603:tid 29612] [client 172.213.241.216:35280] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxcs.php"] [unique_id "aeAzw1fGOR6fpTWUAzoDLwAAAQc"]
[Thu Apr 16 08:56:39.029363 2026] [:error] [pid 49094:tid 49115] [client 172.213.241.216:41449] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxcs.php"] [unique_id "aeAzxzbDwvcXorHR_MzfJQAAAVM"]
[Thu Apr 16 08:56:40.523040 2026] [:error] [pid 29603:tid 29623] [client 172.213.241.216:29891] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxcs.php"] [unique_id "aeAzyFfGOR6fpTWUAzoDMwAAARI"]
[Thu Apr 16 08:56:41.795288 2026] [:error] [pid 57639:tid 57666] [client 172.213.241.216:41435] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rea889y.php"] [unique_id "aeAzyaMCQoTw7TsxWukSKAAAANQ"]
[Thu Apr 16 08:56:43.896872 2026] [:error] [pid 57537:tid 57576] [client 172.213.241.216:62112] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rea889y.php"] [unique_id "aeAzy1VQRS8nm73ENAlUNwAAAEE"]
[Thu Apr 16 08:56:44.903209 2026] [:error] [pid 57639:tid 57648] [client 172.213.241.216:48836] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rea889y.php"] [unique_id "aeAzzKMCQoTw7TsxWukSLgAAAMI"]
[Thu Apr 16 08:56:46.311214 2026] [:error] [pid 49094:tid 49107] [client 172.213.241.216:57126] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rea889y.php"] [unique_id "aeAzzjbDwvcXorHR_MzfKgAAAUs"]
[Thu Apr 16 08:56:48.941596 2026] [:error] [pid 57639:tid 57664] [client 172.213.241.216:34697] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeAz0KMCQoTw7TsxWukSVgAAANI"]
[Thu Apr 16 08:56:50.689795 2026] [:error] [pid 57639:tid 57650] [client 172.213.241.216:34750] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeAz0qMCQoTw7TsxWukSWAAAAMQ"]
[Thu Apr 16 08:56:51.409336 2026] [:error] [pid 57639:tid 57665] [client 172.213.241.216:45315] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeAz06MCQoTw7TsxWukSWgAAANM"]
[Thu Apr 16 08:56:52.090002 2026] [:error] [pid 57538:tid 57608] [client 172.213.241.216:41456] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeAz1MuMaiEF5SVR2BdiMwAAAIY"]
[Thu Apr 16 08:56:53.275301 2026] [:error] [pid 57537:tid 57579] [client 172.213.241.216:41431] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosell2.php"] [unique_id "aeAz1VVQRS8nm73ENAlUPQAAAEQ"]
[Thu Apr 16 08:56:55.499924 2026] [:error] [pid 49094:tid 49110] [client 172.213.241.216:5547] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosell2.php"] [unique_id "aeAz1zbDwvcXorHR_MzfNgAAAU4"]
[Thu Apr 16 08:56:57.388598 2026] [:error] [pid 57536:tid 57550] [client 172.213.241.216:5514] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosell2.php"] [unique_id "aeAz2SQU4faGja6jpDubXAAAAAI"]
[Thu Apr 16 08:56:59.833604 2026] [:error] [pid 57538:tid 57609] [client 172.213.241.216:35243] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosell2.php"] [unique_id "aeAz28uMaiEF5SVR2BdiNQAAAIc"]
[Thu Apr 16 08:57:00.879221 2026] [:error] [pid 57536:tid 57548] [client 172.213.241.216:5517] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/22name.php"] [unique_id "aeAz3CQU4faGja6jpDubXgAAAAA"]
[Thu Apr 16 08:57:01.746454 2026] [:error] [pid 57538:tid 57605] [client 172.213.241.216:62110] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/22name.php"] [unique_id "aeAz3cuMaiEF5SVR2BdiOAAAAIM"]
[Thu Apr 16 08:57:02.701798 2026] [:error] [pid 57536:tid 57566] [client 172.213.241.216:59148] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/22name.php"] [unique_id "aeAz3iQU4faGja6jpDubZAAAABI"]
[Thu Apr 16 08:57:05.042892 2026] [:error] [pid 57538:tid 57603] [client 172.213.241.216:57648] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/22name.php"] [unique_id "aeAz4cuMaiEF5SVR2BdiQQAAAIE"]
[Thu Apr 16 08:57:05.913511 2026] [:error] [pid 57537:tid 57599] [client 172.213.241.216:45367] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs9.php"] [unique_id "aeAz4VVQRS8nm73ENAlUPwAAAFg"]
[Thu Apr 16 08:57:09.386942 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:12.346534 2026] [proxy_fcgi:error] [pid 57639:tid 57660] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:14.731379 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:16.890866 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:19.144624 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:21.552779 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:23.886860 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:26.431289 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:31.049299 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:33.312495 2026] [proxy_fcgi:error] [pid 57639:tid 57647] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:35.646285 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 172.213.241.216:5544] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:57:35.957884 2026] [:error] [pid 57639:tid 57649] [client 172.213.241.216:5544] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mas80.php"] [unique_id "aeAz_6MCQoTw7TsxWukSrgAAAMM"]
[Thu Apr 16 08:57:39.140583 2026] [:error] [pid 49094:tid 49110] [client 172.213.241.216:35200] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mas80.php"] [unique_id "aeA0AzbDwvcXorHR_MzfVQAAAU4"]
[Thu Apr 16 08:57:39.824342 2026] [:error] [pid 49094:tid 49103] [client 172.213.241.216:34711] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mas80.php"] [unique_id "aeA0AzbDwvcXorHR_MzfVgAAAUc"]
[Thu Apr 16 08:57:40.788758 2026] [:error] [pid 57537:tid 57582] [client 172.213.241.216:59180] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mas80.php"] [unique_id "aeA0BFVQRS8nm73ENAlUUAAAAEc"]
[Thu Apr 16 08:58:55.988278 2026] [proxy_fcgi:error] [pid 49094:tid 49104] [client 172.213.241.216:54475] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:58:58.090656 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:01.365750 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:03.680493 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:06.008951 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:08.248092 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:10.435910 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:13.619453 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:15.786012 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:18.033637 2026] [proxy_fcgi:error] [pid 57639:tid 57659] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:20.274904 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 172.213.241.216:5930] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 08:59:20.521016 2026] [:error] [pid 57639:tid 57652] [client 172.213.241.216:5930] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeA0aKMCQoTw7TsxWukTRgAAAMY"]
[Thu Apr 16 08:59:22.513011 2026] [:error] [pid 57536:tid 57568] [client 172.213.241.216:29935] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeA0aiQU4faGja6jpDubjgAAABQ"]
[Thu Apr 16 08:59:23.223132 2026] [:error] [pid 57639:tid 57651] [client 172.213.241.216:45328] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeA0a6MCQoTw7TsxWukTSgAAAMU"]
[Thu Apr 16 08:59:24.250711 2026] [:error] [pid 57538:tid 57608] [client 172.213.241.216:54483] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeA0bMuMaiEF5SVR2BdicwAAAIY"]
[Thu Apr 16 08:59:26.280926 2026] [:error] [pid 57639:tid 57656] [client 172.213.241.216:35278] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ahutr.php"] [unique_id "aeA0bqMCQoTw7TsxWukTUAAAAMo"]
[Thu Apr 16 08:59:27.616171 2026] [:error] [pid 57639:tid 57659] [client 172.213.241.216:45317] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ahutr.php"] [unique_id "aeA0b6MCQoTw7TsxWukTUwAAAM0"]
[Thu Apr 16 08:59:30.284292 2026] [:error] [pid 57639:tid 57655] [client 172.213.241.216:37201] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ahutr.php"] [unique_id "aeA0cqMCQoTw7TsxWukTXAAAAMk"]
[Thu Apr 16 08:59:32.110847 2026] [:error] [pid 49094:tid 49107] [client 172.213.241.216:62122] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ahutr.php"] [unique_id "aeA0dDbDwvcXorHR_MzfwQAAAUs"]
[Thu Apr 16 08:59:33.814963 2026] [:error] [pid 57537:tid 57590] [client 172.213.241.216:29897] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aeA0dVVQRS8nm73ENAlUhQAAAE8"]
[Thu Apr 16 08:59:35.114176 2026] [:error] [pid 29603:tid 29608] [client 172.213.241.216:5927] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aeA0d1fGOR6fpTWUAzoDvwAAAQM"]
[Thu Apr 16 08:59:36.320802 2026] [:error] [pid 57639:tid 57654] [client 172.213.241.216:34727] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aeA0eKMCQoTw7TsxWukTbQAAAMg"]
[Thu Apr 16 08:59:38.815712 2026] [:error] [pid 57639:tid 57669] [client 172.213.241.216:34739] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aeA0eqMCQoTw7TsxWukTegAAANc"]
[Thu Apr 16 08:59:41.132175 2026] [:error] [pid 57538:tid 57614] [client 172.213.241.216:29946] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bdktk.php"] [unique_id "aeA0fcuMaiEF5SVR2BdieAAAAIw"]
[Thu Apr 16 08:59:42.599824 2026] [:error] [pid 57536:tid 57560] [client 172.213.241.216:35308] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bdktk.php"] [unique_id "aeA0fiQU4faGja6jpDublAAAAAw"]
[Thu Apr 16 08:59:43.808716 2026] [:error] [pid 57639:tid 57670] [client 172.213.241.216:54493] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bdktk.php"] [unique_id "aeA0f6MCQoTw7TsxWukThQAAANg"]
[Thu Apr 16 08:59:50.268654 2026] [:error] [pid 57639:tid 57651] [client 172.213.241.216:5944] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bdktk.php"] [unique_id "aeA0hqMCQoTw7TsxWukTjgAAAMU"]
[Thu Apr 16 08:59:52.324760 2026] [:error] [pid 57537:tid 57580] [client 172.213.241.216:52156] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aeA0iFVQRS8nm73ENAlUsQAAAEU"]
[Thu Apr 16 08:59:54.256044 2026] [:error] [pid 57538:tid 57624] [client 172.213.241.216:41989] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aeA0isuMaiEF5SVR2BdinAAAAJY"]
[Thu Apr 16 08:59:55.012682 2026] [:error] [pid 57538:tid 57614] [client 172.213.241.216:5972] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aeA0i8uMaiEF5SVR2BdioQAAAIw"]
[Thu Apr 16 08:59:56.101414 2026] [:error] [pid 57538:tid 57623] [client 172.213.241.216:33142] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aeA0jMuMaiEF5SVR2BdiogAAAJU"]
[Thu Apr 16 08:59:57.347876 2026] [:error] [pid 49094:tid 49115] [client 172.213.241.216:5968] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeA0jTbDwvcXorHR_Mzf0gAAAVM"]
[Thu Apr 16 08:59:58.752535 2026] [:error] [pid 57536:tid 57569] [client 172.213.241.216:64930] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeA0jiQU4faGja6jpDubqgAAABU"]
[Thu Apr 16 08:59:59.793441 2026] [:error] [pid 57538:tid 57608] [client 172.213.241.216:29849] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeA0j8uMaiEF5SVR2BdiqgAAAIY"]
[Thu Apr 16 09:00:01.041964 2026] [:error] [pid 57537:tid 57575] [client 172.213.241.216:56639] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeA0kVVQRS8nm73ENAlUtwAAAEA"]
[Thu Apr 16 09:00:02.084772 2026] [:error] [pid 57537:tid 57579] [client 172.213.241.216:57074] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "aeA0klVQRS8nm73ENAlUuQAAAEQ"]
[Thu Apr 16 09:00:03.380408 2026] [:error] [pid 57537:tid 57586] [client 172.213.241.216:57079] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "aeA0k1VQRS8nm73ENAlUuwAAAEs"]
[Thu Apr 16 09:00:05.961695 2026] [:error] [pid 57639:tid 57658] [client 172.213.241.216:57033] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "aeA0laMCQoTw7TsxWukTnQAAAMw"]
[Thu Apr 16 09:00:10.676008 2026] [:error] [pid 49094:tid 49120] [client 172.213.241.216:58161] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "aeA0mjbDwvcXorHR_Mzf1wAAAVg"]
[Thu Apr 16 09:00:11.532468 2026] [:error] [pid 29603:tid 29628] [client 172.213.241.216:64607] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rujgeote.php"] [unique_id "aeA0m1fGOR6fpTWUAzoD7AAAARc"]
[Thu Apr 16 09:00:12.783019 2026] [:error] [pid 29603:tid 29606] [client 172.213.241.216:47143] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rujgeote.php"] [unique_id "aeA0nFfGOR6fpTWUAzoD7wAAAQE"]
[Thu Apr 16 09:00:14.432509 2026] [:error] [pid 57639:tid 57657] [client 172.213.241.216:39071] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rujgeote.php"] [unique_id "aeA0nqMCQoTw7TsxWukTogAAAMs"]
[Thu Apr 16 09:00:15.480577 2026] [:error] [pid 57639:tid 57646] [client 172.213.241.216:64528] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rujgeote.php"] [unique_id "aeA0n6MCQoTw7TsxWukTpwAAAMA"]
[Thu Apr 16 09:00:16.336249 2026] [:error] [pid 57639:tid 57653] [client 172.213.241.216:57043] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css/shlo.php"] [unique_id "aeA0oKMCQoTw7TsxWukTrAAAAMc"]
[Thu Apr 16 09:00:17.998747 2026] [:error] [pid 57536:tid 57561] [client 172.213.241.216:33123] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/css/shlo.php"] [unique_id "aeA0oSQU4faGja6jpDubrwAAAA0"]
[Thu Apr 16 09:00:22.698219 2026] [proxy_fcgi:error] [pid 57639:tid 57654] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:25.774481 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:28.188637 2026] [proxy_fcgi:error] [pid 57639:tid 57652] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:30.845393 2026] [proxy_fcgi:error] [pid 57639:tid 57646] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:33.359550 2026] [proxy_fcgi:error] [pid 57639:tid 57670] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:35.652249 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:37.993485 2026] [proxy_fcgi:error] [pid 57639:tid 57669] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:40.463644 2026] [proxy_fcgi:error] [pid 57639:tid 57663] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:42.781245 2026] [proxy_fcgi:error] [pid 57639:tid 57666] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:45.164120 2026] [proxy_fcgi:error] [pid 57639:tid 57657] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:47.696917 2026] [proxy_fcgi:error] [pid 57639:tid 57651] [client 172.213.241.216:5153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:00:47.968941 2026] [:error] [pid 57639:tid 57668] [client 172.213.241.216:5153] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/obfuscate.php"] [unique_id "aeA0v6MCQoTw7TsxWukT3gAAANY"]
[Thu Apr 16 09:01:44.775806 2026] [:error] [pid 29603:tid 29625] [client 172.213.241.216:60910] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww.php"] [unique_id "aeA0-FfGOR6fpTWUAzoEQwAAARQ"]
[Thu Apr 16 09:01:47.970808 2026] [proxy_fcgi:error] [pid 57537:tid 57584] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:01:50.795279 2026] [proxy_fcgi:error] [pid 57537:tid 57598] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:01:53.137810 2026] [proxy_fcgi:error] [pid 57537:tid 57595] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:01:55.360471 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:01:57.738175 2026] [proxy_fcgi:error] [pid 57537:tid 57592] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:00.044463 2026] [proxy_fcgi:error] [pid 57537:tid 57595] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:02.299958 2026] [proxy_fcgi:error] [pid 57537:tid 57591] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:04.839507 2026] [proxy_fcgi:error] [pid 57537:tid 57583] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:07.117089 2026] [proxy_fcgi:error] [pid 57537:tid 57590] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:09.412946 2026] [proxy_fcgi:error] [pid 57537:tid 57589] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:09.695134 2026] [authz_core:error] [pid 57537:tid 57594] [client 172.213.241.216:57039] AH01630: client denied by server configuration: /home/end2endh/public_html/.yuf.php
[Thu Apr 16 09:02:11.688779 2026] [proxy_fcgi:error] [pid 57537:tid 57594] [client 172.213.241.216:57039] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:02:11.995339 2026] [:error] [pid 57537:tid 57580] [client 172.213.241.216:57039] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "aeA1E1VQRS8nm73ENAlVCQAAAEU"]
[Thu Apr 16 09:02:13.824279 2026] [:error] [pid 49094:tid 49114] [client 172.213.241.216:5135] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "aeA1FTbDwvcXorHR_MzgpQAAAVI"]
[Thu Apr 16 09:02:14.471463 2026] [:error] [pid 57537:tid 57583] [client 172.213.241.216:27631] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "aeA1FlVQRS8nm73ENAlVCwAAAEg"]
[Thu Apr 16 09:02:15.734114 2026] [:error] [pid 57536:tid 57550] [client 172.213.241.216:5130] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wert.php"] [unique_id "aeA1FyQU4faGja6jpDucHAAAAAI"]
[Thu Apr 16 09:02:18.043275 2026] [:error] [pid 49094:tid 49107] [client 172.213.241.216:60901] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aeA1GjbDwvcXorHR_MzgpwAAAUs"]
[Thu Apr 16 09:02:19.830279 2026] [:error] [pid 49094:tid 49109] [client 172.213.241.216:27647] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aeA1GzbDwvcXorHR_MzgqQAAAU0"]
[Thu Apr 16 09:02:20.711448 2026] [:error] [pid 57639:tid 57647] [client 172.213.241.216:64956] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aeA1HKMCQoTw7TsxWukUOgAAAME"]
[Thu Apr 16 09:02:21.599941 2026] [:error] [pid 57639:tid 57670] [client 172.213.241.216:63558] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aeA1HaMCQoTw7TsxWukUPAAAANg"]
[Thu Apr 16 09:02:22.760968 2026] [:error] [pid 29603:tid 29611] [client 172.213.241.216:63571] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new4.php"] [unique_id "aeA1HlfGOR6fpTWUAzoEbgAAAQY"]
[Thu Apr 16 09:02:24.121401 2026] [:error] [pid 49094:tid 49110] [client 172.213.241.216:42043] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new4.php"] [unique_id "aeA1IDbDwvcXorHR_MzgrQAAAU4"]
[Thu Apr 16 09:02:25.789292 2026] [:error] [pid 49094:tid 49096] [client 172.213.241.216:58155] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new4.php"] [unique_id "aeA1ITbDwvcXorHR_MzgrwAAAUA"]
[Thu Apr 16 09:02:26.716650 2026] [:error] [pid 57537:tid 57595] [client 172.213.241.216:58119] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new4.php"] [unique_id "aeA1IlVQRS8nm73ENAlVEQAAAFQ"]
[Thu Apr 16 09:02:27.504680 2026] [:error] [pid 29603:tid 29620] [client 172.213.241.216:60894] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpb.php"] [unique_id "aeA1I1fGOR6fpTWUAzoEfQAAAQ8"]
[Thu Apr 16 09:02:28.982276 2026] [:error] [pid 57538:tid 57616] [client 172.213.241.216:48808] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpb.php"] [unique_id "aeA1JMuMaiEF5SVR2BdjKgAAAI4"]
[Thu Apr 16 09:02:30.743004 2026] [:error] [pid 57538:tid 57623] [client 172.213.241.216:56629] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpb.php"] [unique_id "aeA1JsuMaiEF5SVR2BdjMQAAAJU"]
[Thu Apr 16 09:02:31.712113 2026] [:error] [pid 29603:tid 29621] [client 172.213.241.216:48803] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpb.php"] [unique_id "aeA1J1fGOR6fpTWUAzoEhQAAARA"]
[Thu Apr 16 09:02:32.797223 2026] [:error] [pid 49094:tid 49111] [client 172.213.241.216:5134] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "aeA1KDbDwvcXorHR_MzgtwAAAU8"]
[Thu Apr 16 09:02:34.846363 2026] [:error] [pid 29603:tid 29612] [client 172.213.241.216:33140] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "aeA1KlfGOR6fpTWUAzoEigAAAQc"]
[Thu Apr 16 09:02:36.360715 2026] [:error] [pid 29603:tid 29622] [client 172.213.241.216:33762] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "aeA1LFfGOR6fpTWUAzoEjgAAARE"]
[Thu Apr 16 09:02:38.327841 2026] [:error] [pid 29603:tid 29614] [client 172.213.241.216:33097] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "aeA1LlfGOR6fpTWUAzoEjwAAAQk"]
[Thu Apr 16 09:02:39.730379 2026] [:error] [pid 57639:tid 57659] [client 172.213.241.216:33134] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bootstrap.php"] [unique_id "aeA1L6MCQoTw7TsxWukUVwAAAM0"]
[Thu Apr 16 09:02:40.656658 2026] [:error] [pid 29603:tid 29611] [client 172.213.241.216:56595] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bootstrap.php"] [unique_id "aeA1MFfGOR6fpTWUAzoEkwAAAQY"]
[Thu Apr 16 09:02:41.412025 2026] [:error] [pid 49094:tid 49107] [client 172.213.241.216:42014] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bootstrap.php"] [unique_id "aeA1MTbDwvcXorHR_MzgwAAAAUs"]
[Thu Apr 16 09:02:42.105983 2026] [:error] [pid 29603:tid 29607] [client 172.213.241.216:60908] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bootstrap.php"] [unique_id "aeA1MlfGOR6fpTWUAzoElgAAAQI"]
[Thu Apr 16 09:02:43.071651 2026] [:error] [pid 29603:tid 29629] [client 172.213.241.216:64957] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/index.php"] [unique_id "aeA1M1fGOR6fpTWUAzoElwAAARg"]
[Thu Apr 16 09:02:43.879489 2026] [:error] [pid 49094:tid 49102] [client 172.213.241.216:60875] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/index.php"] [unique_id "aeA1MzbDwvcXorHR_MzgzgAAAUY"]
[Thu Apr 16 09:02:44.754912 2026] [:error] [pid 49094:tid 49117] [client 172.213.241.216:60896] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/index.php"] [unique_id "aeA1NDbDwvcXorHR_Mzg1gAAAVU"]
[Thu Apr 16 09:02:46.850898 2026] [:error] [pid 57536:tid 57558] [client 172.213.241.216:5136] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/index.php"] [unique_id "aeA1NiQU4faGja6jpDucUwAAAAo"]
[Thu Apr 16 09:02:47.447030 2026] [:error] [pid 29603:tid 29628] [client 172.213.241.216:5155] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeA1N1fGOR6fpTWUAzoEnQAAARc"]
[Thu Apr 16 09:02:48.250897 2026] [:error] [pid 57538:tid 57608] [client 172.213.241.216:33782] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeA1OMuMaiEF5SVR2BdjRQAAAIY"]
[Thu Apr 16 09:02:49.716561 2026] [:error] [pid 29603:tid 29606] [client 172.213.241.216:60885] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeA1OVfGOR6fpTWUAzoEoAAAAQE"]
[Thu Apr 16 09:02:51.578334 2026] [:error] [pid 57639:tid 57657] [client 172.213.241.216:51646] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeA1O6MCQoTw7TsxWukUYwAAAMs"]
[Thu Apr 16 09:02:52.739205 2026] [:error] [pid 57639:tid 57662] [client 172.213.241.216:64954] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/haz.php"] [unique_id "aeA1PKMCQoTw7TsxWukUZwAAANA"]
[Thu Apr 16 09:02:54.415640 2026] [:error] [pid 29603:tid 29608] [client 172.213.241.216:42038] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/haz.php"] [unique_id "aeA1PlfGOR6fpTWUAzoEqQAAAQM"]
[Thu Apr 16 09:02:55.720144 2026] [:error] [pid 57639:tid 57650] [client 172.213.241.216:5156] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/haz.php"] [unique_id "aeA1P6MCQoTw7TsxWukUbgAAAMQ"]
[Thu Apr 16 09:02:57.423278 2026] [:error] [pid 57538:tid 57620] [client 172.213.241.216:51618] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/haz.php"] [unique_id "aeA1QcuMaiEF5SVR2BdjSAAAAJI"]
[Thu Apr 16 09:02:58.165954 2026] [:error] [pid 57538:tid 57618] [client 172.213.241.216:63613] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f222.php"] [unique_id "aeA1QsuMaiEF5SVR2BdjSQAAAJA"]
[Thu Apr 16 09:03:00.749849 2026] [:error] [pid 49094:tid 49119] [client 172.213.241.216:5169] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f222.php"] [unique_id "aeA1RDbDwvcXorHR_Mzg6QAAAVc"]
[Thu Apr 16 09:03:01.941947 2026] [:error] [pid 57538:tid 57602] [client 172.213.241.216:63578] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f222.php"] [unique_id "aeA1RcuMaiEF5SVR2BdjTAAAAIA"]
[Thu Apr 16 09:03:03.521252 2026] [:error] [pid 49094:tid 49102] [client 172.213.241.216:58125] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f222.php"] [unique_id "aeA1RzbDwvcXorHR_Mzg7gAAAUY"]
[Thu Apr 16 09:03:04.459193 2026] [:error] [pid 29603:tid 29618] [client 172.213.241.216:33125] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "aeA1SFfGOR6fpTWUAzoEsAAAAQ0"]
[Thu Apr 16 09:03:05.435796 2026] [:error] [pid 57537:tid 57581] [client 172.213.241.216:56630] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "aeA1SVVQRS8nm73ENAlVUQAAAEY"]
[Thu Apr 16 09:03:07.032053 2026] [:error] [pid 57537:tid 57584] [client 172.213.241.216:33786] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "aeA1S1VQRS8nm73ENAlVUwAAAEk"]
[Thu Apr 16 09:03:16.635439 2026] [proxy_fcgi:error] [pid 57537:tid 57583] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:19.445123 2026] [proxy_fcgi:error] [pid 57537:tid 57596] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:21.758079 2026] [proxy_fcgi:error] [pid 57537:tid 57575] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:24.056859 2026] [proxy_fcgi:error] [pid 57537:tid 57588] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:26.441943 2026] [proxy_fcgi:error] [pid 57537:tid 57579] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:28.711340 2026] [proxy_fcgi:error] [pid 57537:tid 57585] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:31.131067 2026] [proxy_fcgi:error] [pid 57537:tid 57577] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:33.285981 2026] [proxy_fcgi:error] [pid 57537:tid 57596] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:35.475851 2026] [proxy_fcgi:error] [pid 57537:tid 57598] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:37.759740 2026] [proxy_fcgi:error] [pid 57537:tid 57588] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:40.115624 2026] [proxy_fcgi:error] [pid 57537:tid 57586] [client 172.213.241.216:56582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:03:40.486722 2026] [:error] [pid 57537:tid 57593] [client 172.213.241.216:56582] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeA1bFVQRS8nm73ENAlVlAAAAFI"]
[Thu Apr 16 09:03:41.285285 2026] [:error] [pid 57538:tid 57616] [client 172.213.241.216:27602] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeA1bcuMaiEF5SVR2BdjZwAAAI4"]
[Thu Apr 16 09:03:42.251306 2026] [:error] [pid 57538:tid 57613] [client 172.213.241.216:33136] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeA1bsuMaiEF5SVR2BdjaQAAAIs"]
[Thu Apr 16 09:03:43.000885 2026] [:error] [pid 29603:tid 29612] [client 172.213.241.216:5139] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeA1blfGOR6fpTWUAzoEzgAAAQc"]
[Thu Apr 16 09:03:43.840658 2026] [:error] [pid 57639:tid 57654] [client 172.213.241.216:51631] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Eva.php"] [unique_id "aeA1b6MCQoTw7TsxWukUkwAAAMg"]
[Thu Apr 16 09:03:44.673915 2026] [:error] [pid 57536:tid 57550] [client 172.213.241.216:56620] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Eva.php"] [unique_id "aeA1cCQU4faGja6jpDucbAAAAAI"]
[Thu Apr 16 09:04:10.981703 2026] [:error] [pid 57639:tid 57664] [client 172.213.241.216:57054] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Eva.php"] [unique_id "aeA1iqMCQoTw7TsxWukU1gAAANI"]
[Thu Apr 16 09:04:55.330352 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:04:58.391243 2026] [proxy_fcgi:error] [pid 57538:tid 57618] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:01.085418 2026] [proxy_fcgi:error] [pid 57538:tid 57604] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:03.436284 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:05.642691 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:08.687553 2026] [proxy_fcgi:error] [pid 57538:tid 57615] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:10.829604 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:12.955925 2026] [proxy_fcgi:error] [pid 57538:tid 57624] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:15.097534 2026] [proxy_fcgi:error] [pid 57538:tid 57610] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:17.307020 2026] [proxy_fcgi:error] [pid 57538:tid 57626] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:19.718161 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 172.213.241.216:27086] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:05:19.972165 2026] [:error] [pid 57538:tid 57607] [client 172.213.241.216:27086] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeA1z8uMaiEF5SVR2BdjrAAAAIU"]
[Thu Apr 16 09:05:21.025603 2026] [:error] [pid 57639:tid 57667] [client 172.213.241.216:5690] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeA10aMCQoTw7TsxWukVoAAAANU"]
[Thu Apr 16 09:05:22.663301 2026] [:error] [pid 57537:tid 57596] [client 172.213.241.216:34766] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeA10lVQRS8nm73ENAlV7gAAAFU"]
[Thu Apr 16 09:05:26.158425 2026] [:error] [pid 57639:tid 57663] [client 172.213.241.216:46025] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeA11qMCQoTw7TsxWukVpgAAANE"]
[Thu Apr 16 09:05:29.405623 2026] [:error] [pid 57639:tid 57661] [client 172.213.241.216:5695] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ckk.php"] [unique_id "aeA12aMCQoTw7TsxWukVrQAAAM8"]
[Thu Apr 16 09:05:33.113841 2026] [:error] [pid 29603:tid 29606] [client 172.213.241.216:62072] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ckk.php"] [unique_id "aeA13VfGOR6fpTWUAzoFOQAAAQE"]
[Thu Apr 16 09:05:36.342835 2026] [:error] [pid 57639:tid 57660] [client 172.213.241.216:49991] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ckk.php"] [unique_id "aeA14KMCQoTw7TsxWukVtgAAAM4"]
[Thu Apr 16 09:05:37.160606 2026] [:error] [pid 57639:tid 57669] [client 172.213.241.216:34370] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ckk.php"] [unique_id "aeA14aMCQoTw7TsxWukVuwAAANc"]
[Thu Apr 16 09:05:41.753530 2026] [:error] [pid 29603:tid 29623] [client 172.213.241.216:51679] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeA15VfGOR6fpTWUAzoFTQAAARI"]
[Thu Apr 16 09:05:44.510546 2026] [:error] [pid 57536:tid 57554] [client 172.213.241.216:6111] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeA16CQU4faGja6jpDucxAAAAAY"]
[Thu Apr 16 09:05:46.470620 2026] [:error] [pid 29603:tid 29628] [client 172.213.241.216:44153] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeA16lfGOR6fpTWUAzoFVQAAARc"]
[Thu Apr 16 09:05:50.784037 2026] [:error] [pid 57639:tid 57669] [client 172.213.241.216:63136] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeA17qMCQoTw7TsxWukVywAAANc"]
[Thu Apr 16 09:05:51.861097 2026] [:error] [pid 57639:tid 57654] [client 172.213.241.216:26584] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zt2.php"] [unique_id "aeA176MCQoTw7TsxWukV6AAAAMg"]
[Thu Apr 16 09:05:52.865588 2026] [:error] [pid 57537:tid 57591] [client 172.213.241.216:34377] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zt2.php"] [unique_id "aeA18FVQRS8nm73ENAlWBQAAAFA"]
[Thu Apr 16 09:05:53.937256 2026] [:error] [pid 57639:tid 57659] [client 172.213.241.216:34429] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zt2.php"] [unique_id "aeA18aMCQoTw7TsxWukWDAAAAM0"]
[Thu Apr 16 09:05:55.088148 2026] [:error] [pid 57639:tid 57666] [client 172.213.241.216:50047] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zt2.php"] [unique_id "aeA186MCQoTw7TsxWukWGQAAANQ"]
[Thu Apr 16 09:05:58.105538 2026] [:error] [pid 57639:tid 57666] [client 172.213.241.216:34415] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-cc.php"] [unique_id "aeA19qMCQoTw7TsxWukWJAAAANQ"]
[Thu Apr 16 09:06:00.021730 2026] [:error] [pid 57537:tid 57576] [client 172.213.241.216:25834] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-cc.php"] [unique_id "aeA1-FVQRS8nm73ENAlWDgAAAEE"]
[Thu Apr 16 09:06:01.054639 2026] [:error] [pid 57536:tid 57549] [client 172.213.241.216:34774] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-cc.php"] [unique_id "aeA1-SQU4faGja6jpDuc4wAAAAE"]
[Thu Apr 16 09:06:02.944457 2026] [:error] [pid 57536:tid 57567] [client 172.213.241.216:50016] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-cc.php"] [unique_id "aeA1-iQU4faGja6jpDuc5QAAABM"]
[Thu Apr 16 09:06:05.138115 2026] [:error] [pid 57538:tid 57624] [client 172.213.241.216:34802] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeA1_cuMaiEF5SVR2Bdj7wAAAJY"]
[Thu Apr 16 09:06:08.523517 2026] [:error] [pid 49094:tid 49109] [client 172.213.241.216:56537] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeA2ADbDwvcXorHR_MzhkwAAAU0"]
[Thu Apr 16 09:06:10.052547 2026] [:error] [pid 49094:tid 49105] [client 172.213.241.216:34426] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeA2AjbDwvcXorHR_MzhlgAAAUk"]
[Thu Apr 16 09:06:11.098174 2026] [:error] [pid 57538:tid 57608] [client 172.213.241.216:26580] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-lvminl.php"] [unique_id "aeA2A8uMaiEF5SVR2Bdj8gAAAIY"]
[Thu Apr 16 09:06:12.271002 2026] [:error] [pid 57639:tid 57662] [client 172.213.241.216:5829] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bx.php"] [unique_id "aeA2BKMCQoTw7TsxWukWNQAAANA"]
[Thu Apr 16 09:06:16.908754 2026] [:error] [pid 57537:tid 57578] [client 172.213.241.216:34805] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bx.php"] [unique_id "aeA2CFVQRS8nm73ENAlWMAAAAEM"]
[Thu Apr 16 09:06:21.019679 2026] [proxy_fcgi:error] [pid 57538:tid 57621] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:24.132162 2026] [proxy_fcgi:error] [pid 57538:tid 57609] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:26.755309 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:28.917341 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:31.139299 2026] [proxy_fcgi:error] [pid 57538:tid 57626] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:33.364764 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:35.512075 2026] [proxy_fcgi:error] [pid 57538:tid 57613] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:37.779006 2026] [proxy_fcgi:error] [pid 57538:tid 57604] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:40.315305 2026] [proxy_fcgi:error] [pid 57538:tid 57611] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:42.654989 2026] [proxy_fcgi:error] [pid 57538:tid 57606] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:44.852316 2026] [proxy_fcgi:error] [pid 57538:tid 57626] [client 172.213.241.216:5219] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:06:45.121906 2026] [:error] [pid 57538:tid 57609] [client 172.213.241.216:5219] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classc.php"] [unique_id "aeA2JcuMaiEF5SVR2BdkMQAAAIc"]
[Thu Apr 16 09:06:48.015025 2026] [:error] [pid 49094:tid 49120] [client 172.213.241.216:5828] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classc.php"] [unique_id "aeA2KDbDwvcXorHR_MzhvAAAAVg"]
[Thu Apr 16 09:06:49.081397 2026] [:error] [pid 57536:tid 57557] [client 172.213.241.216:51678] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classc.php"] [unique_id "aeA2KSQU4faGja6jpDudaAAAAAk"]
[Thu Apr 16 09:06:50.212781 2026] [:error] [pid 57639:tid 57650] [client 172.213.241.216:5874] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classc.php"] [unique_id "aeA2KqMCQoTw7TsxWukWcAAAAMQ"]
[Thu Apr 16 09:06:51.272246 2026] [:error] [pid 57536:tid 57555] [client 172.213.241.216:27573] [client 172.213.241.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/HLA-dd.php"] [unique_id "aeA2KyQU4faGja6jpDudagAAAAc"]
[Thu Apr 16 09:07:47.061260 2026] [proxy_fcgi:error] [pid 57538:tid 57620] [client 172.213.241.216:5186] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 09:07:50.040096 2026] [proxy_fcgi:error] [pid 57538:tid 57614] [client 172.213.241.216:5186] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 11:04:57.117639 2026] [proxy_fcgi:error] [pid 49094:tid 49100] [client 8.229.32.53:51866] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 11:04:57.359769 2026] [proxy_fcgi:error] [pid 7880:tid 7887] [client 8.229.32.53:59582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 11:04:58.731746 2026] [proxy_fcgi:error] [pid 57639:tid 57653] [client 8.229.32.53:54734] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 16 11:04:59.362124 2026] [proxy_fcgi:error] [pid 29603:tid 29623] [client 8.229.32.53:4232] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 00:03:17.127337 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:17.127365 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 01:55:44.245245 2026] [proxy_fcgi:error] [pid 3245:tid 3286] [client 52.167.144.57:35906] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 01:55:45.769825 2026] [proxy_fcgi:error] [pid 3245:tid 3281] [client 52.167.144.57:35906] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 01:55:54.626617 2026] [proxy_fcgi:error] [pid 26480:tid 26501] [client 40.77.167.26:41025] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 03:21:41.251356 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:41.251383 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:43.297908 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:43.297933 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.503730 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.503766 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:02.378809 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:02.378837 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:13.206268 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:13.206296 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:15.211786 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:15.211811 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:46.095288 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:46.095321 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:48.104033 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:48.104058 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:46.811424 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:46.811461 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:48.873981 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:48.874006 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 04:28:46.047246 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 34.91.213.89:49152] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:14:40.557813 2026] [proxy_fcgi:error] [pid 9151:tid 9178] [client 34.83.29.27:54338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:14:40.567407 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 34.83.29.27:54322] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:14:40.699779 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 34.83.29.27:36990] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:14:40.723626 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 34.83.29.27:36992] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:15:25.884212 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 45.145.131.16:11833] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:15:28.934801 2026] [:error] [pid 51878:tid 51896] [client 213.232.123.148:27877] [client 213.232.123.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.txt"] [unique_id "aeFfgEnQhUtMbw9EsgaF-gAAARA"]
[Fri Apr 17 06:15:28.953564 2026] [:error] [pid 51878:tid 51887] [client 31.134.11.184:59663] [client 31.134.11.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.copy"] [unique_id "aeFfgEnQhUtMbw9EsgaF-wAAAQc"]
[Fri Apr 17 06:15:29.042051 2026] [:error] [pid 51878:tid 51893] [client 31.134.15.96:61357] [client 31.134.15.96] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aeFfgUnQhUtMbw9EsgaF_AAAAQ0"]
[Fri Apr 17 06:15:29.066313 2026] [:error] [pid 9263:tid 9275] [client 170.168.96.250:17615] [client 170.168.96.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.3"] [unique_id "aeFfgRP68VyHNvj1e54MqwAAAMo"]
[Fri Apr 17 06:15:29.095294 2026] [:error] [pid 51878:tid 51898] [client 122.8.95.20:17643] [client 122.8.95.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.backup"] [unique_id "aeFfgUnQhUtMbw9EsgaF_wAAARI"]
[Fri Apr 17 06:15:29.144338 2026] [:error] [pid 51878:tid 51900] [client 140.235.0.165:32493] [client 140.235.0.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.txt"] [unique_id "aeFfgUnQhUtMbw9EsgaGAAAAARQ"]
[Fri Apr 17 06:15:29.145810 2026] [:error] [pid 9152:tid 9199] [client 140.235.0.125:13469] [client 140.235.0.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.tmp" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.tmp"] [unique_id "aeFfgZJYca8I3TNCwIcajAAAAEk"]
[Fri Apr 17 06:15:29.219352 2026] [:error] [pid 9152:tid 9212] [client 185.77.220.208:36197] [client 185.77.220.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.bak"] [unique_id "aeFfgZJYca8I3TNCwIcajQAAAFY"]
[Fri Apr 17 06:15:29.228065 2026] [:error] [pid 9263:tid 9283] [client 89.19.34.33:25633] [client 89.19.34.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.swp"] [unique_id "aeFfgRP68VyHNvj1e54MrgAAANI"]
[Fri Apr 17 06:15:29.232263 2026] [:error] [pid 9152:tid 9191] [client 45.10.167.101:10657] [client 45.10.167.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.bak"] [unique_id "aeFfgZJYca8I3TNCwIcajgAAAEE"]
[Fri Apr 17 06:15:29.331165 2026] [:error] [pid 9152:tid 9193] [client 170.168.241.71:25563] [client 170.168.241.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/wp-config.php.orig"] [unique_id "aeFfgZJYca8I3TNCwIcajwAAAEM"]
[Fri Apr 17 06:15:30.476831 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 31.134.15.96:61357] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:15:30.541899 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 216.40.73.59:37801] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:15:31.350599 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 216.40.73.211:39713] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:15:35.121085 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 155.212.109.70:49015] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322', referer: https://end2end.hostone.com.au/wp-includes
[Fri Apr 17 06:15:56.133524 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 34.187.227.203:29275] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:15:56.537594 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 34.187.227.203:59580] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 06:52:39.611907 2026] [proxy_fcgi:error] [pid 51878:tid 51892] [client 35.188.121.110:58690] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:03.186505 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 51.103.163.175:54670] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:28.723534 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:31.925254 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:34.608635 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:36.778532 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:39.033850 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:41.221342 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:43.445993 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:45.857531 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:48.194252 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:50.550308 2026] [proxy_fcgi:error] [pid 9152:tid 9214] [client 51.103.163.175:8574] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:53:50.904694 2026] [:error] [pid 9152:tid 9213] [client 51.103.163.175:8574] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeF2jpJYca8I3TNCwIdQHwAAAFc"]
[Fri Apr 17 07:53:51.950322 2026] [:error] [pid 34273:tid 34281] [client 51.103.163.175:34305] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeF2j2uQDW686mK3dgEn3AAAAYY"]
[Fri Apr 17 07:53:54.820015 2026] [:error] [pid 51878:tid 51887] [client 51.103.163.175:51728] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeF2kknQhUtMbw9EsgbTBwAAAQc"]
[Fri Apr 17 07:53:56.855797 2026] [:error] [pid 9153:tid 9225] [client 51.103.163.175:61652] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeF2lOMHGxkTZX3c45dllwAAAIc"]
[Fri Apr 17 07:53:57.631738 2026] [:error] [pid 25010:tid 25033] [client 51.103.163.175:49015] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aeF2lY-7kkf42RarqQ3wBwAAAVQ"]
[Fri Apr 17 07:53:58.562865 2026] [:error] [pid 9153:tid 9241] [client 51.103.163.175:55208] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aeF2luMHGxkTZX3c45dlnQAAAJc"]
[Fri Apr 17 07:53:59.759278 2026] [:error] [pid 34273:tid 34275] [client 51.103.163.175:61737] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aeF2l2uQDW686mK3dgEn6gAAAYA"]
[Fri Apr 17 07:54:02.742802 2026] [:error] [pid 25010:tid 25037] [client 51.103.163.175:41977] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "aeF2mo-7kkf42RarqQ3wEAAAAVg"]
[Fri Apr 17 07:54:04.431406 2026] [:error] [pid 9152:tid 9203] [client 51.103.163.175:60993] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "aeF2nJJYca8I3TNCwIdQKgAAAE0"]
[Fri Apr 17 07:54:07.305465 2026] [:error] [pid 25010:tid 25020] [client 51.103.163.175:61024] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "aeF2n4-7kkf42RarqQ3wFgAAAUc"]
[Fri Apr 17 07:54:09.790439 2026] [:error] [pid 25010:tid 25030] [client 51.103.163.175:37145] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "aeF2oY-7kkf42RarqQ3wGQAAAVE"]
[Fri Apr 17 07:54:11.564604 2026] [:error] [pid 51878:tid 51900] [client 51.103.163.175:61747] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "aeF2o0nQhUtMbw9EsgbTFgAAARQ"]
[Fri Apr 17 07:54:15.637894 2026] [:error] [pid 34273:tid 34279] [client 51.103.163.175:40904] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeF2p2uQDW686mK3dgEoCAAAAYQ"]
[Fri Apr 17 07:54:18.038051 2026] [:error] [pid 9153:tid 9224] [client 51.103.163.175:36390] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeF2quMHGxkTZX3c45dl1wAAAIY"]
[Fri Apr 17 07:54:20.245099 2026] [:error] [pid 9263:tid 9279] [client 51.103.163.175:50788] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeF2rBP68VyHNvj1e55IGgAAAM4"]
[Fri Apr 17 07:54:21.258852 2026] [:error] [pid 9151:tid 9182] [client 51.103.163.175:37167] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeF2rchTVuRPkua22vTO6wAAABU"]
[Fri Apr 17 07:54:22.788616 2026] [:error] [pid 25010:tid 25028] [client 51.103.163.175:38534] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeF2ro-7kkf42RarqQ3wMQAAAU8"]
[Fri Apr 17 07:54:24.271474 2026] [:error] [pid 9153:tid 9228] [client 51.103.163.175:37142] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeF2sOMHGxkTZX3c45dl8gAAAIo"]
[Fri Apr 17 07:54:25.334926 2026] [:error] [pid 9153:tid 9221] [client 51.103.163.175:9192] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeF2seMHGxkTZX3c45dl-wAAAIM"]
[Fri Apr 17 07:54:26.351024 2026] [:error] [pid 9153:tid 9234] [client 51.103.163.175:37183] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeF2suMHGxkTZX3c45dmAAAAAJA"]
[Fri Apr 17 07:54:27.952004 2026] [:error] [pid 9152:tid 9193] [client 51.103.163.175:61012] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aeF2s5JYca8I3TNCwIdQPwAAAEM"]
[Fri Apr 17 07:54:29.250758 2026] [:error] [pid 9151:tid 9173] [client 51.103.163.175:36671] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aeF2tchTVuRPkua22vTO8gAAAAw"]
[Fri Apr 17 07:54:30.070482 2026] [:error] [pid 9152:tid 9207] [client 51.103.163.175:61745] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aeF2tpJYca8I3TNCwIdQSAAAAFE"]
[Fri Apr 17 07:54:31.156386 2026] [:error] [pid 9151:tid 9170] [client 51.103.163.175:36384] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aeF2t8hTVuRPkua22vTO8wAAAAk"]
[Fri Apr 17 07:54:32.339787 2026] [:error] [pid 25010:tid 25031] [client 51.103.163.175:37122] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tool.php"] [unique_id "aeF2uI-7kkf42RarqQ3wOwAAAVI"]
[Fri Apr 17 07:54:33.626515 2026] [:error] [pid 51878:tid 51900] [client 51.103.163.175:40952] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tool.php"] [unique_id "aeF2uUnQhUtMbw9EsgbTJQAAARQ"]
[Fri Apr 17 07:54:35.170334 2026] [:error] [pid 9151:tid 9180] [client 51.103.163.175:44288] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tool.php"] [unique_id "aeF2u8hTVuRPkua22vTO-wAAABM"]
[Fri Apr 17 07:54:37.602648 2026] [:error] [pid 34273:tid 34285] [client 51.103.163.175:41924] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tool.php"] [unique_id "aeF2vWuQDW686mK3dgEoMAAAAYo"]
[Fri Apr 17 07:54:39.019479 2026] [:error] [pid 34273:tid 34292] [client 51.103.163.175:50792] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aeF2v2uQDW686mK3dgEoOQAAAZE"]
[Fri Apr 17 07:54:40.317010 2026] [:error] [pid 34273:tid 34284] [client 51.103.163.175:37406] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aeF2wGuQDW686mK3dgEoRQAAAYk"]
[Fri Apr 17 07:54:41.375800 2026] [:error] [pid 34273:tid 34292] [client 51.103.163.175:36633] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aeF2wWuQDW686mK3dgEoSwAAAZE"]
[Fri Apr 17 07:54:43.106194 2026] [:error] [pid 34273:tid 34289] [client 51.103.163.175:37383] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blogs.php"] [unique_id "aeF2w2uQDW686mK3dgEoUgAAAY4"]
[Fri Apr 17 07:54:44.729961 2026] [:error] [pid 34273:tid 34280] [client 51.103.163.175:61042] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aeF2xGuQDW686mK3dgEoXgAAAYU"]
[Fri Apr 17 07:54:47.578618 2026] [:error] [pid 34273:tid 34278] [client 51.103.163.175:36630] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aeF2x2uQDW686mK3dgEoaQAAAYM"]
[Fri Apr 17 07:54:51.471890 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:54:54.437678 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:54:56.701382 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:54:58.950453 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:01.362249 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:03.608114 2026] [proxy_fcgi:error] [pid 9152:tid 9201] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:05.898303 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:08.338375 2026] [proxy_fcgi:error] [pid 9152:tid 9202] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:10.559948 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:13.639591 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:16.044466 2026] [proxy_fcgi:error] [pid 9152:tid 9192] [client 51.103.163.175:37163] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:55:16.506004 2026] [:error] [pid 9152:tid 9197] [client 51.103.163.175:37163] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aeF25JJYca8I3TNCwIdQuQAAAEc"]
[Fri Apr 17 07:55:17.976048 2026] [:error] [pid 9152:tid 9212] [client 51.103.163.175:61701] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aeF25ZJYca8I3TNCwIdQvQAAAFY"]
[Fri Apr 17 07:55:18.789188 2026] [:error] [pid 9153:tid 9231] [client 51.103.163.175:61039] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aeF25uMHGxkTZX3c45dmPAAAAI0"]
[Fri Apr 17 07:55:20.500864 2026] [:error] [pid 9263:tid 9288] [client 51.103.163.175:40939] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aeF26BP68VyHNvj1e55IOQAAANc"]
[Fri Apr 17 07:55:22.863466 2026] [:error] [pid 9153:tid 9232] [client 51.103.163.175:44302] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aeF26uMHGxkTZX3c45dmRwAAAI4"]
[Fri Apr 17 07:55:25.663053 2026] [:error] [pid 9153:tid 9230] [client 51.103.163.175:37160] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aeF27eMHGxkTZX3c45dmVgAAAIw"]
[Fri Apr 17 07:55:32.698307 2026] [:error] [pid 34273:tid 34291] [client 51.103.163.175:37155] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aeF29GuQDW686mK3dgEo5wAAAZA"]
[Fri Apr 17 07:55:35.422347 2026] [:error] [pid 34273:tid 34285] [client 51.103.163.175:36374] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aeF292uQDW686mK3dgEo8AAAAYo"]
[Fri Apr 17 07:55:37.472740 2026] [:error] [pid 34273:tid 34275] [client 51.103.163.175:40935] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "aeF2-WuQDW686mK3dgEo_QAAAYA"]
[Fri Apr 17 07:55:39.227407 2026] [:error] [pid 34273:tid 34291] [client 51.103.163.175:9191] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "aeF2-2uQDW686mK3dgEpBgAAAZA"]
[Fri Apr 17 07:55:41.447467 2026] [:error] [pid 9263:tid 9277] [client 51.103.163.175:61723] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "aeF2_RP68VyHNvj1e55IQAAAAMw"]
[Fri Apr 17 07:55:44.253839 2026] [:error] [pid 34273:tid 34294] [client 51.103.163.175:36650] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s.php"] [unique_id "aeF3AGuQDW686mK3dgEpDwAAAZM"]
[Fri Apr 17 07:55:45.865206 2026] [:error] [pid 9151:tid 9162] [client 51.103.163.175:44315] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/first.php"] [unique_id "aeF3AchTVuRPkua22vTPUwAAAAE"]
[Fri Apr 17 07:55:47.219178 2026] [:error] [pid 34273:tid 34290] [client 51.103.163.175:52715] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/first.php"] [unique_id "aeF3A2uQDW686mK3dgEpJgAAAY8"]
[Fri Apr 17 07:55:48.811506 2026] [:error] [pid 9151:tid 9164] [client 51.103.163.175:40915] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/first.php"] [unique_id "aeF3BMhTVuRPkua22vTPVAAAAAM"]
[Fri Apr 17 07:55:51.309496 2026] [:error] [pid 51878:tid 51899] [client 51.103.163.175:61709] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/first.php"] [unique_id "aeF3B0nQhUtMbw9EsgbTQAAAARM"]
[Fri Apr 17 07:55:52.925100 2026] [:error] [pid 9263:tid 9269] [client 51.103.163.175:40902] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeF3CBP68VyHNvj1e55IQwAAAMQ"]
[Fri Apr 17 07:55:54.963555 2026] [:error] [pid 9263:tid 9274] [client 51.103.163.175:61742] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeF3ChP68VyHNvj1e55IRgAAAMk"]
[Fri Apr 17 07:55:56.155223 2026] [:error] [pid 34273:tid 34286] [client 51.103.163.175:52790] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeF3DGuQDW686mK3dgEpMQAAAYs"]
[Fri Apr 17 07:55:57.199220 2026] [:error] [pid 25010:tid 25016] [client 51.103.163.175:36663] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeF3DY-7kkf42RarqQ3wsQAAAUM"]
[Fri Apr 17 07:55:58.330460 2026] [:error] [pid 9153:tid 9219] [client 51.103.163.175:58594] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeF3DuMHGxkTZX3c45dmbwAAAIE"]
[Fri Apr 17 07:56:00.212893 2026] [:error] [pid 51878:tid 51881] [client 51.103.163.175:40950] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeF3EEnQhUtMbw9EsgbTQQAAAQE"]
[Fri Apr 17 07:56:01.904445 2026] [:error] [pid 9153:tid 9224] [client 51.103.163.175:37439] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeF3EeMHGxkTZX3c45dmdAAAAIY"]
[Fri Apr 17 07:56:03.211669 2026] [:error] [pid 9263:tid 9278] [client 51.103.163.175:58567] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeF3ExP68VyHNvj1e55IUwAAAM0"]
[Fri Apr 17 07:56:04.562933 2026] [:error] [pid 9153:tid 9229] [client 51.103.163.175:48115] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asd.php"] [unique_id "aeF3FOMHGxkTZX3c45dmfgAAAIs"]
[Fri Apr 17 07:56:05.981009 2026] [:error] [pid 9151:tid 9171] [client 51.103.163.175:58563] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asd.php"] [unique_id "aeF3FchTVuRPkua22vTPZQAAAAo"]
[Fri Apr 17 07:56:07.111311 2026] [:error] [pid 25010:tid 25032] [client 51.103.163.175:40097] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asd.php"] [unique_id "aeF3F4-7kkf42RarqQ3wugAAAVM"]
[Fri Apr 17 07:56:08.765434 2026] [:error] [pid 51878:tid 51889] [client 51.103.163.175:48104] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asd.php"] [unique_id "aeF3GEnQhUtMbw9EsgbTRAAAAQk"]
[Fri Apr 17 07:56:09.472214 2026] [:error] [pid 9263:tid 9271] [client 51.103.163.175:52749] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/vx.php"] [unique_id "aeF3GRP68VyHNvj1e55IWwAAAMY"]
[Fri Apr 17 07:56:10.732823 2026] [:error] [pid 25010:tid 25013] [client 51.103.163.175:48110] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/vx.php"] [unique_id "aeF3Go-7kkf42RarqQ3wvgAAAUA"]
[Fri Apr 17 07:56:11.716768 2026] [:error] [pid 9152:tid 9207] [client 51.103.163.175:50362] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/vx.php"] [unique_id "aeF3G5JYca8I3TNCwIdQ6wAAAFE"]
[Fri Apr 17 07:56:12.992360 2026] [:error] [pid 9153:tid 9240] [client 51.103.163.175:43534] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/vx.php"] [unique_id "aeF3HOMHGxkTZX3c45dmkwAAAJY"]
[Fri Apr 17 07:56:16.807161 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:19.633301 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:21.960256 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:24.102422 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:26.188282 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:28.253300 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:30.883254 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:33.149517 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:36.203377 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:38.584755 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:40.734510 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 51.103.163.175:40075] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:56:41.632294 2026] [:error] [pid 9151:tid 9163] [client 51.103.163.175:40075] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aeF3OchTVuRPkua22vTPgQAAAAI"]
[Fri Apr 17 07:56:45.237299 2026] [:error] [pid 9263:tid 9281] [client 51.103.163.175:43315] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aeF3PRP68VyHNvj1e55IawAAANA"]
[Fri Apr 17 07:56:48.378855 2026] [:error] [pid 9152:tid 9197] [client 51.103.163.175:8865] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aeF3QJJYca8I3TNCwIdRDwAAAEc"]
[Fri Apr 17 07:56:50.118526 2026] [:error] [pid 9151:tid 9185] [client 51.103.163.175:8837] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aboutc.php"] [unique_id "aeF3QshTVuRPkua22vTPhgAAABg"]
[Fri Apr 17 07:56:51.222595 2026] [:error] [pid 34273:tid 34295] [client 51.103.163.175:37876] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeF3Q2uQDW686mK3dgEpcwAAAZQ"]
[Fri Apr 17 07:56:53.013979 2026] [:error] [pid 9153:tid 9223] [client 51.103.163.175:37664] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeF3ReMHGxkTZX3c45dmxQAAAIU"]
[Fri Apr 17 07:56:54.781268 2026] [:error] [pid 51878:tid 51891] [client 51.103.163.175:8882] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeF3RknQhUtMbw9EsgbTgQAAAQs"]
[Fri Apr 17 07:56:56.204166 2026] [:error] [pid 9152:tid 9190] [client 51.103.163.175:61056] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeF3SJJYca8I3TNCwIdREwAAAEA"]
[Fri Apr 17 07:56:58.107081 2026] [:error] [pid 9151:tid 9163] [client 51.103.163.175:47085] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws82.php"] [unique_id "aeF3SshTVuRPkua22vTPlAAAAAI"]
[Fri Apr 17 07:56:59.680027 2026] [:error] [pid 25010:tid 25015] [client 51.103.163.175:61105] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws82.php"] [unique_id "aeF3S4-7kkf42RarqQ3w9gAAAUI"]
[Fri Apr 17 07:57:01.357742 2026] [:error] [pid 51878:tid 51904] [client 51.103.163.175:8861] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws82.php"] [unique_id "aeF3TUnQhUtMbw9EsgbTlgAAARg"]
[Fri Apr 17 07:57:03.634163 2026] [:error] [pid 9152:tid 9202] [client 51.103.163.175:8653] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws82.php"] [unique_id "aeF3T5JYca8I3TNCwIdRGAAAAEw"]
[Fri Apr 17 07:57:04.420884 2026] [:error] [pid 51878:tid 51898] [client 51.103.163.175:45966] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeF3UEnQhUtMbw9EsgbTmQAAARI"]
[Fri Apr 17 07:57:05.885459 2026] [:error] [pid 9152:tid 9198] [client 51.103.163.175:47677] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeF3UZJYca8I3TNCwIdRHAAAAEg"]
[Fri Apr 17 07:57:06.724199 2026] [:error] [pid 25010:tid 25033] [client 51.103.163.175:37578] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeF3Uo-7kkf42RarqQ3xBwAAAVQ"]
[Fri Apr 17 07:57:10.690776 2026] [:error] [pid 9151:tid 9184] [client 51.103.163.175:41526] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeF3VshTVuRPkua22vTPqQAAABc"]
[Fri Apr 17 07:57:12.126093 2026] [:error] [pid 9151:tid 9181] [client 51.103.163.175:49560] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws48.php"] [unique_id "aeF3WMhTVuRPkua22vTPsQAAABQ"]
[Fri Apr 17 07:57:13.324071 2026] [:error] [pid 9152:tid 9194] [client 51.103.163.175:8727] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws48.php"] [unique_id "aeF3WZJYca8I3TNCwIdRHwAAAEQ"]
[Fri Apr 17 07:57:14.139079 2026] [:error] [pid 9152:tid 9212] [client 51.103.163.175:34712] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws48.php"] [unique_id "aeF3WpJYca8I3TNCwIdRIQAAAFY"]
[Fri Apr 17 07:57:15.315881 2026] [:error] [pid 34273:tid 34299] [client 51.103.163.175:8843] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws48.php"] [unique_id "aeF3W2uQDW686mK3dgEpjQAAAZg"]
[Fri Apr 17 07:57:16.688497 2026] [:error] [pid 9152:tid 9202] [client 51.103.163.175:37582] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "aeF3XJJYca8I3TNCwIdRKQAAAEw"]
[Fri Apr 17 07:57:17.864009 2026] [:error] [pid 34273:tid 34290] [client 51.103.163.175:8763] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "aeF3XWuQDW686mK3dgEpmQAAAY8"]
[Fri Apr 17 07:57:19.636415 2026] [:error] [pid 51878:tid 51904] [client 51.103.163.175:47046] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "aeF3X0nQhUtMbw9EsgbTqAAAARg"]
[Fri Apr 17 07:57:20.510850 2026] [:error] [pid 34273:tid 34288] [client 51.103.163.175:34669] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "aeF3YGuQDW686mK3dgEppQAAAY0"]
[Fri Apr 17 07:57:21.573923 2026] [:error] [pid 51878:tid 51897] [client 51.103.163.175:8717] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp5.php"] [unique_id "aeF3YUnQhUtMbw9EsgbTqQAAARE"]
[Fri Apr 17 07:57:24.298856 2026] [:error] [pid 9152:tid 9195] [client 51.103.163.175:8740] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp5.php"] [unique_id "aeF3ZJJYca8I3TNCwIdRNAAAAEU"]
[Fri Apr 17 07:57:32.897748 2026] [:error] [pid 34273:tid 34280] [client 51.103.163.175:37628] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp5.php"] [unique_id "aeF3bGuQDW686mK3dgEp_wAAAYU"]
[Fri Apr 17 07:57:42.326425 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:45.402528 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:47.938186 2026] [proxy_fcgi:error] [pid 9151:tid 9162] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:50.117729 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:52.352689 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:54.568264 2026] [proxy_fcgi:error] [pid 9151:tid 9179] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:56.805556 2026] [proxy_fcgi:error] [pid 9151:tid 9163] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:57:59.096819 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:58:01.461217 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:58:03.667735 2026] [proxy_fcgi:error] [pid 9151:tid 9176] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:58:06.010448 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 51.103.163.175:65008] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:58:06.298512 2026] [:error] [pid 9151:tid 9175] [client 51.103.163.175:65008] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abc.php"] [unique_id "aeF3jshTVuRPkua22vTQAwAAAA4"]
[Fri Apr 17 07:58:07.145038 2026] [:error] [pid 9152:tid 9199] [client 51.103.163.175:9103] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abc.php"] [unique_id "aeF3j5JYca8I3TNCwIdRggAAAEk"]
[Fri Apr 17 07:58:08.831889 2026] [:error] [pid 9152:tid 9195] [client 51.103.163.175:34349] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abc.php"] [unique_id "aeF3kJJYca8I3TNCwIdRjAAAAEU"]
[Fri Apr 17 07:58:09.601731 2026] [:error] [pid 51878:tid 51903] [client 51.103.163.175:9100] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abc.php"] [unique_id "aeF3kUnQhUtMbw9EsgbT6gAAARc"]
[Fri Apr 17 07:58:12.322692 2026] [:error] [pid 9152:tid 9190] [client 51.103.163.175:36336] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeF3lJJYca8I3TNCwIdRkQAAAEA"]
[Fri Apr 17 07:58:15.053677 2026] [:error] [pid 9151:tid 9164] [client 51.103.163.175:41987] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeF3l8hTVuRPkua22vTQEAAAAAM"]
[Fri Apr 17 07:58:16.085135 2026] [:error] [pid 9152:tid 9194] [client 51.103.163.175:61723] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeF3mJJYca8I3TNCwIdRpQAAAEQ"]
[Fri Apr 17 07:58:19.150531 2026] [:error] [pid 34273:tid 34291] [client 51.103.163.175:55979] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeF3m2uQDW686mK3dgEqmgAAAZA"]
[Fri Apr 17 07:58:21.825892 2026] [:error] [pid 9153:tid 9237] [client 51.103.163.175:59162] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeF3neMHGxkTZX3c45dnEwAAAJM"]
[Fri Apr 17 07:58:23.191771 2026] [:error] [pid 9152:tid 9203] [client 51.103.163.175:9138] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeF3n5JYca8I3TNCwIdRsgAAAE0"]
[Fri Apr 17 07:58:25.216891 2026] [:error] [pid 9152:tid 9193] [client 51.103.163.175:34271] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeF3oZJYca8I3TNCwIdRuAAAAEM"]
[Fri Apr 17 07:58:28.908085 2026] [:error] [pid 9153:tid 9225] [client 51.103.163.175:48606] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeF3pOMHGxkTZX3c45dnIgAAAIc"]
[Fri Apr 17 07:58:30.757450 2026] [:error] [pid 9152:tid 9193] [client 51.103.163.175:56048] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeF3ppJYca8I3TNCwIdRygAAAEM"]
[Fri Apr 17 07:58:32.971304 2026] [:error] [pid 34273:tid 34281] [client 51.103.163.175:9150] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeF3qGuQDW686mK3dgEquQAAAYY"]
[Fri Apr 17 07:58:34.665923 2026] [:error] [pid 9152:tid 9211] [client 51.103.163.175:8283] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeF3qpJYca8I3TNCwIdR0AAAAFU"]
[Fri Apr 17 07:58:36.933471 2026] [:error] [pid 34273:tid 34277] [client 51.103.163.175:8930] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeF3rGuQDW686mK3dgEqzQAAAYI"]
[Fri Apr 17 07:58:40.853597 2026] [:error] [pid 9151:tid 9168] [client 51.103.163.175:42342] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aeF3sMhTVuRPkua22vTQGAAAAAc"]
[Fri Apr 17 07:58:45.312166 2026] [:error] [pid 34273:tid 34292] [client 51.103.163.175:57943] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aeF3tWuQDW686mK3dgEq-wAAAZE"]
[Fri Apr 17 07:58:46.550064 2026] [:error] [pid 34273:tid 34296] [client 51.103.163.175:8989] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aeF3tmuQDW686mK3dgErBQAAAZU"]
[Fri Apr 17 07:58:48.208313 2026] [:error] [pid 51878:tid 51881] [client 51.103.163.175:37082] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aeF3uEnQhUtMbw9EsgbUAQAAAQE"]
[Fri Apr 17 07:58:49.780821 2026] [:error] [pid 51878:tid 51880] [client 51.103.163.175:36591] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeF3uUnQhUtMbw9EsgbUBQAAAQA"]
[Fri Apr 17 07:58:50.977069 2026] [:error] [pid 51878:tid 51892] [client 51.103.163.175:37066] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeF3uknQhUtMbw9EsgbUCgAAAQw"]
[Fri Apr 17 07:58:52.358580 2026] [:error] [pid 34273:tid 34297] [client 51.103.163.175:8917] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeF3vGuQDW686mK3dgErGgAAAZY"]
[Fri Apr 17 07:58:54.799207 2026] [:error] [pid 9152:tid 9210] [client 51.103.163.175:37110] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeF3vpJYca8I3TNCwIdR4gAAAFQ"]
[Fri Apr 17 07:58:56.581667 2026] [:error] [pid 9153:tid 9228] [client 51.103.163.175:42397] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aeF3wOMHGxkTZX3c45dnWQAAAIo"]
[Fri Apr 17 07:58:57.943294 2026] [:error] [pid 34273:tid 34287] [client 51.103.163.175:45614] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aeF3wWuQDW686mK3dgErIwAAAYw"]
[Fri Apr 17 07:59:07.082899 2026] [proxy_fcgi:error] [pid 34273:tid 34277] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:10.089886 2026] [proxy_fcgi:error] [pid 34273:tid 34276] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:13.063104 2026] [proxy_fcgi:error] [pid 34273:tid 34293] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:15.519391 2026] [proxy_fcgi:error] [pid 34273:tid 34276] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:17.783749 2026] [proxy_fcgi:error] [pid 34273:tid 34289] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:19.937006 2026] [proxy_fcgi:error] [pid 34273:tid 34286] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:22.198162 2026] [proxy_fcgi:error] [pid 34273:tid 34291] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:24.738698 2026] [proxy_fcgi:error] [pid 34273:tid 34293] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:27.056729 2026] [proxy_fcgi:error] [pid 34273:tid 34296] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:29.522253 2026] [proxy_fcgi:error] [pid 34273:tid 34286] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:32.037604 2026] [proxy_fcgi:error] [pid 34273:tid 34275] [client 51.103.163.175:44495] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 17 07:59:32.330126 2026] [:error] [pid 34273:tid 34295] [client 51.103.163.175:44495] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mk.php"] [unique_id "aeF35GuQDW686mK3dgErxQAAAZQ"]
[Fri Apr 17 07:59:34.007001 2026] [:error] [pid 34273:tid 34286] [client 51.103.163.175:44988] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mk.php"] [unique_id "aeF35muQDW686mK3dgEryAAAAYs"]
[Fri Apr 17 07:59:39.286300 2026] [:error] [pid 9153:tid 9238] [client 51.103.163.175:8467] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mk.php"] [unique_id "aeF36-MHGxkTZX3c45dnkAAAAJQ"]
[Fri Apr 17 07:59:40.953149 2026] [:error] [pid 9152:tid 9204] [client 51.103.163.175:8456] [client 51.103.163.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mk.php"] [unique_id "aeF37JJYca8I3TNCwIdSbwAAAE4"]
[Fri Apr 17 07:59:42.855614 2026] [:error] [pid 34273:tid 34290] [client 51.103.163.175:39176] [client 51.103.163.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "end2end.hostone.com.au"] [uri "/fm.php"] [unique_id "aeF37muQDW686mK3dgEr5AAAAY8"]
[Fri Apr 17 19:35:01.979885 2026] [proxy_fcgi:error] [pid 9153:tid 9240] [client 85.137.49.10:63876] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 00:02:18.532643 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:18.532670 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.707232 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.707289 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.713176 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.713225 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:56.114178 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:56.114204 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:05.055542 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:05.055566 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:13.854656 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:13.854721 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:15.864561 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:15.864589 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.796216 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.796280 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.803305 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.803330 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:56.034017 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:56.034044 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:58.064987 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:58.065014 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 06:03:29.196274 2026] [proxy_fcgi:error] [pid 9864:tid 9917] [client 34.53.78.122:42676] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 06:03:29.396433 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 34.53.78.122:41408] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 07:58:42.254127 2026] [:error] [pid 9864:tid 9912] [client 118.107.44.122:27465] [client 118.107.44.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||end2end.hostone.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aeLJMoCFeowknfXHM7lWJgAAAEY"], referer: https://www.linkedin.com/
[Sat Apr 18 07:58:44.433494 2026] [proxy_fcgi:error] [pid 9864:tid 9912] [client 118.107.44.122:27465] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322', referer: https://www.linkedin.com/
[Sat Apr 18 10:53:25.014489 2026] [proxy_fcgi:error] [pid 9863:tid 9893] [client 20.215.244.72:15453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:53:27.910028 2026] [proxy_fcgi:error] [pid 9863:tid 9885] [client 20.215.244.72:15453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:53:30.295600 2026] [proxy_fcgi:error] [pid 9863:tid 9884] [client 20.215.244.72:15453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:53:32.497100 2026] [proxy_fcgi:error] [pid 9863:tid 9881] [client 20.215.244.72:15453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:53:34.721004 2026] [proxy_fcgi:error] [pid 9863:tid 9873] [client 20.215.244.72:15453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:53:36.855188 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 20.215.244.72:15453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:53:37.156384 2026] [:error] [pid 9863:tid 9894] [client 20.215.244.72:15453] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "aeLyMTjjiypiFrTucbJejwAAABU"]
[Sat Apr 18 10:53:37.976683 2026] [:error] [pid 9865:tid 9937] [client 20.215.244.72:15447] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "aeLyMazb5knECIY-C-j_SwAAAIA"]
[Sat Apr 18 10:53:38.520536 2026] [:error] [pid 34290:tid 34340] [client 20.215.244.72:15468] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "aeLyMhqX6WpmmAXOBi-chAAAAdU"]
[Sat Apr 18 10:53:39.268086 2026] [:error] [pid 9970:tid 9979] [client 20.215.244.72:15480] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "aeLyMyYdRLRhVmaIMx01SQAAAMU"]
[Sat Apr 18 10:53:39.958024 2026] [:error] [pid 9864:tid 9923] [client 20.215.244.72:15443] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aeLyM4CFeowknfXHM7lw7AAAAFE"]
[Sat Apr 18 10:53:40.713663 2026] [:error] [pid 34290:tid 34330] [client 20.215.244.72:15475] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aeLyNBqX6WpmmAXOBi-chwAAAcs"]
[Sat Apr 18 10:53:41.833360 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:15375] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aeLyNRqX6WpmmAXOBi-ciQAAAdA"]
[Sat Apr 18 10:53:42.466382 2026] [:error] [pid 34290:tid 34327] [client 20.215.244.72:15472] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xs.php"] [unique_id "aeLyNhqX6WpmmAXOBi-ciwAAAcg"]
[Sat Apr 18 10:53:43.027222 2026] [:error] [pid 9865:tid 9944] [client 20.215.244.72:15370] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "aeLyN6zb5knECIY-C-j_TAAAAIc"]
[Sat Apr 18 10:53:43.813601 2026] [:error] [pid 34288:tid 34297] [client 20.215.244.72:15440] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "aeLyN-TIiy__PtiLmpl-qgAAAYU"]
[Sat Apr 18 10:53:45.304027 2026] [:error] [pid 34290:tid 34342] [client 20.215.244.72:15366] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "aeLyORqX6WpmmAXOBi-clgAAAdc"]
[Sat Apr 18 10:53:47.410046 2026] [:error] [pid 9970:tid 9989] [client 20.215.244.72:15368] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "aeLyOyYdRLRhVmaIMx01UgAAAM8"]
[Sat Apr 18 10:53:49.461626 2026] [:error] [pid 9970:tid 9997] [client 20.215.244.72:15476] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeLyPSYdRLRhVmaIMx01WQAAANc"]
[Sat Apr 18 10:53:50.603299 2026] [:error] [pid 9863:tid 9886] [client 20.215.244.72:15451] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "aeLyPjjjiypiFrTucbJelwAAAA0"]
[Sat Apr 18 10:53:52.446616 2026] [:error] [pid 9970:tid 9992] [client 20.215.244.72:15454] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "aeLyQCYdRLRhVmaIMx01YAAAANI"]
[Sat Apr 18 10:53:53.503043 2026] [:error] [pid 34290:tid 34334] [client 20.215.244.72:15455] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aboute.php"] [unique_id "aeLyQRqX6WpmmAXOBi-cngAAAc8"]
[Sat Apr 18 10:53:55.672563 2026] [:error] [pid 34290:tid 34333] [client 20.215.244.72:15463] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aeLyQxqX6WpmmAXOBi-cqQAAAc4"]
[Sat Apr 18 10:53:56.726471 2026] [:error] [pid 34290:tid 34330] [client 20.215.244.72:15478] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aeLyRBqX6WpmmAXOBi-crAAAAcs"]
[Sat Apr 18 10:53:57.527795 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:15461] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aeLyRRqX6WpmmAXOBi-crgAAAdA"]
[Sat Apr 18 10:53:59.298772 2026] [:error] [pid 34237:tid 34262] [client 20.215.244.72:15474] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "aeLyRxBmX4Wq5a6rxfYb-gAAAVc"]
[Sat Apr 18 10:54:00.282888 2026] [:error] [pid 34290:tid 34327] [client 20.215.244.72:15436] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "aeLySBqX6WpmmAXOBi-csAAAAcg"]
[Sat Apr 18 10:54:01.608869 2026] [:error] [pid 9970:tid 9977] [client 20.215.244.72:15373] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "aeLySSYdRLRhVmaIMx01ZAAAAMM"]
[Sat Apr 18 10:54:02.524247 2026] [:error] [pid 13023:tid 13036] [client 20.215.244.72:15376] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "aeLySv1e7hG8DAeABB99YAAAAQs"]
[Sat Apr 18 10:54:03.156729 2026] [:error] [pid 34288:tid 34306] [client 20.215.244.72:15428] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "aeLyS-TIiy__PtiLmpl-uAAAAY4"]
[Sat Apr 18 10:54:04.174416 2026] [:error] [pid 34288:tid 34310] [client 20.215.244.72:15432] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tiny2.php"] [unique_id "aeLyTOTIiy__PtiLmpl-ugAAAZI"]
[Sat Apr 18 10:54:05.896126 2026] [:error] [pid 9863:tid 9894] [client 20.215.244.72:15415] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tiny2.php"] [unique_id "aeLyTTjjiypiFrTucbJerQAAABU"]
[Sat Apr 18 10:54:07.813682 2026] [:error] [pid 13023:tid 13039] [client 20.215.244.72:15367] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tiny2.php"] [unique_id "aeLyT_1e7hG8DAeABB99bAAAAQ4"]
[Sat Apr 18 10:54:10.040116 2026] [:error] [pid 13023:tid 13040] [client 20.215.244.72:15482] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tiny2.php"] [unique_id "aeLyUv1e7hG8DAeABB99cAAAAQ8"]
[Sat Apr 18 10:54:12.316182 2026] [:error] [pid 9970:tid 9979] [client 20.215.244.72:15437] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/state.php"] [unique_id "aeLyVCYdRLRhVmaIMx01dQAAAMU"]
[Sat Apr 18 10:54:13.313169 2026] [:error] [pid 34290:tid 34321] [client 20.215.244.72:15425] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/state.php"] [unique_id "aeLyVRqX6WpmmAXOBi-cwgAAAcI"]
[Sat Apr 18 10:54:14.119910 2026] [:error] [pid 9970:tid 9981] [client 20.215.244.72:15400] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/state.php"] [unique_id "aeLyViYdRLRhVmaIMx01eAAAAMc"]
[Sat Apr 18 10:54:14.710251 2026] [:error] [pid 9864:tid 9916] [client 20.215.244.72:15435] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/state.php"] [unique_id "aeLyVoCFeowknfXHM7lw8wAAAEo"]
[Sat Apr 18 10:54:15.569999 2026] [:error] [pid 9864:tid 9913] [client 20.215.244.72:15426] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeLyV4CFeowknfXHM7lw9gAAAEc"]
[Sat Apr 18 10:54:16.469578 2026] [:error] [pid 9865:tid 9957] [client 20.215.244.72:15391] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeLyWKzb5knECIY-C-j_UAAAAJQ"]
[Sat Apr 18 10:54:17.142091 2026] [:error] [pid 9970:tid 9984] [client 20.215.244.72:15439] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeLyWSYdRLRhVmaIMx01gQAAAMo"]
[Sat Apr 18 10:54:18.929328 2026] [:error] [pid 9970:tid 9982] [client 20.215.244.72:15431] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeLyWiYdRLRhVmaIMx01ggAAAMg"]
[Sat Apr 18 10:54:19.947436 2026] [:error] [pid 9970:tid 9976] [client 20.215.244.72:15479] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wps.php"] [unique_id "aeLyWyYdRLRhVmaIMx01hAAAAMI"]
[Sat Apr 18 10:54:21.581733 2026] [:error] [pid 34237:tid 34240] [client 20.215.244.72:15464] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wps.php"] [unique_id "aeLyXRBmX4Wq5a6rxfYcAwAAAUE"]
[Sat Apr 18 10:54:22.555420 2026] [:error] [pid 34288:tid 34306] [client 20.215.244.72:15456] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wps.php"] [unique_id "aeLyXuTIiy__PtiLmpl-yAAAAY4"]
[Sat Apr 18 10:54:23.392391 2026] [:error] [pid 9970:tid 9996] [client 20.215.244.72:15438] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wps.php"] [unique_id "aeLyXyYdRLRhVmaIMx01iwAAANY"]
[Sat Apr 18 10:54:24.125760 2026] [:error] [pid 9970:tid 9976] [client 20.215.244.72:15427] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "aeLyYCYdRLRhVmaIMx01kQAAAMI"]
[Sat Apr 18 10:54:25.405936 2026] [:error] [pid 13023:tid 13034] [client 20.215.244.72:15438] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "aeLyYf1e7hG8DAeABB99fQAAAQk"]
[Sat Apr 18 10:54:27.064528 2026] [:error] [pid 34237:tid 34242] [client 20.215.244.72:15481] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "aeLyYxBmX4Wq5a6rxfYcBgAAAUM"]
[Sat Apr 18 10:54:28.109044 2026] [:error] [pid 34290:tid 34320] [client 20.215.244.72:15448] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "aeLyZBqX6WpmmAXOBi-czAAAAcE"]
[Sat Apr 18 10:54:28.830289 2026] [:error] [pid 9863:tid 9890] [client 20.215.244.72:15363] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wgift1.php"] [unique_id "aeLyZDjjiypiFrTucbJeyAAAABE"]
[Sat Apr 18 10:54:30.224328 2026] [:error] [pid 13023:tid 13040] [client 20.215.244.72:15460] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wgift1.php"] [unique_id "aeLyZv1e7hG8DAeABB99ggAAAQ8"]
[Sat Apr 18 10:54:30.905135 2026] [:error] [pid 9865:tid 9946] [client 20.215.244.72:15377] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wgift1.php"] [unique_id "aeLyZqzb5knECIY-C-j_WQAAAIk"]
[Sat Apr 18 10:54:31.831946 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:15387] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wgift1.php"] [unique_id "aeLyZ-TIiy__PtiLmpl-0gAAAYQ"]
[Sat Apr 18 10:54:33.372767 2026] [:error] [pid 34290:tid 34329] [client 20.215.244.72:15374] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "aeLyaRqX6WpmmAXOBi-c1AAAAco"]
[Sat Apr 18 10:54:37.258001 2026] [proxy_fcgi:error] [pid 9863:tid 9883] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:40.114203 2026] [proxy_fcgi:error] [pid 9863:tid 9876] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:42.447723 2026] [proxy_fcgi:error] [pid 9863:tid 9892] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:44.690876 2026] [proxy_fcgi:error] [pid 9863:tid 9890] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:46.829816 2026] [proxy_fcgi:error] [pid 9863:tid 9888] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:48.943351 2026] [proxy_fcgi:error] [pid 9863:tid 9886] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:51.042023 2026] [proxy_fcgi:error] [pid 9863:tid 9893] [client 20.215.244.72:15380] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:51.307969 2026] [:error] [pid 9863:tid 9881] [client 20.215.244.72:15380] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.end2end.hostone.com.au"] [uri "/tiny.php"] [unique_id "aeLyezjjiypiFrTucbJe3wAAAAg"]
[Sat Apr 18 10:54:54.615823 2026] [proxy_fcgi:error] [pid 34288:tid 34298] [client 20.215.244.72:15445] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:57.541813 2026] [proxy_fcgi:error] [pid 34288:tid 34312] [client 20.215.244.72:15445] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:54:59.639720 2026] [proxy_fcgi:error] [pid 34288:tid 34299] [client 20.215.244.72:15445] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:55:02.018093 2026] [proxy_fcgi:error] [pid 34288:tid 34311] [client 20.215.244.72:15445] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:55:02.282611 2026] [:error] [pid 34288:tid 34298] [client 20.215.244.72:15445] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/footer.php"] [unique_id "aeLyhuTIiy__PtiLmpl-8AAAAYY"]
[Sat Apr 18 10:55:05.373898 2026] [:error] [pid 9970:tid 9987] [client 20.215.244.72:15483] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/footer.php"] [unique_id "aeLyiSYdRLRhVmaIMx01xQAAAM0"]
[Sat Apr 18 10:55:08.264861 2026] [:error] [pid 9865:tid 9950] [client 20.215.244.72:15484] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/footer.php"] [unique_id "aeLyjKzb5knECIY-C-j_cQAAAI0"]
[Sat Apr 18 10:55:10.864405 2026] [:error] [pid 34237:tid 34244] [client 20.215.244.72:15471] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/footer.php"] [unique_id "aeLyjhBmX4Wq5a6rxfYcKwAAAUU"]
[Sat Apr 18 10:55:12.638230 2026] [:error] [pid 9863:tid 9878] [client 20.215.244.72:15424] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeLykDjjiypiFrTucbJe7gAAAAU"]
[Sat Apr 18 10:55:15.163775 2026] [:error] [pid 34288:tid 34312] [client 20.215.244.72:15449] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeLyk-TIiy__PtiLmpl-9AAAAZQ"]
[Sat Apr 18 10:55:20.306967 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:15392] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/img.php"] [unique_id "aeLymCYdRLRhVmaIMx012QAAANU"]
[Sat Apr 18 10:55:27.077644 2026] [:error] [pid 9863:tid 9873] [client 20.215.244.72:15422] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aeLynzjjiypiFrTucbJe_QAAAAA"]
[Sat Apr 18 10:55:28.261790 2026] [:error] [pid 9865:tid 9955] [client 20.215.244.72:15364] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aeLyoKzb5knECIY-C-j_hwAAAJI"]
[Sat Apr 18 10:55:29.325096 2026] [:error] [pid 34237:tid 34255] [client 20.215.244.72:15365] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aeLyoRBmX4Wq5a6rxfYcOAAAAVA"]
[Sat Apr 18 10:55:30.182483 2026] [:error] [pid 9863:tid 9892] [client 20.215.244.72:15378] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/12.php"] [unique_id "aeLyojjjiypiFrTucbJe_gAAABM"]
[Sat Apr 18 10:55:31.299088 2026] [:error] [pid 9863:tid 9885] [client 20.215.244.72:15458] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeLyozjjiypiFrTucbJfBAAAAAw"]
[Sat Apr 18 10:55:32.859779 2026] [:error] [pid 9863:tid 9878] [client 20.215.244.72:15297] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeLypDjjiypiFrTucbJfDAAAAAU"]
[Sat Apr 18 10:55:34.363064 2026] [:error] [pid 34290:tid 34326] [client 20.215.244.72:15405] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeLyphqX6WpmmAXOBi-dOAAAAcc"]
[Sat Apr 18 10:55:35.072339 2026] [:error] [pid 9970:tid 9983] [client 20.215.244.72:15434] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeLypyYdRLRhVmaIMx015AAAAMk"]
[Sat Apr 18 10:55:36.060823 2026] [:error] [pid 9863:tid 9894] [client 20.215.244.72:15407] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aeLyqDjjiypiFrTucbJfHgAAABU"]
[Sat Apr 18 10:55:36.704034 2026] [:error] [pid 9970:tid 9997] [client 20.215.244.72:15487] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aeLyqCYdRLRhVmaIMx015gAAANc"]
[Sat Apr 18 10:55:37.539284 2026] [:error] [pid 13023:tid 13037] [client 20.215.244.72:15360] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aeLyqf1e7hG8DAeABB993wAAAQw"]
[Sat Apr 18 10:55:38.212212 2026] [:error] [pid 9970:tid 9990] [client 20.215.244.72:15371] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aeLyqiYdRLRhVmaIMx017AAAANA"]
[Sat Apr 18 10:55:38.791512 2026] [:error] [pid 34237:tid 34245] [client 20.215.244.72:15381] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeLyqhBmX4Wq5a6rxfYcSAAAAUY"]
[Sat Apr 18 10:55:39.743815 2026] [:error] [pid 13023:tid 13027] [client 20.215.244.72:15308] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeLyq_1e7hG8DAeABB995gAAAQI"]
[Sat Apr 18 10:55:40.728416 2026] [:error] [pid 34290:tid 34325] [client 20.215.244.72:15411] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeLyrBqX6WpmmAXOBi-dQwAAAcY"]
[Sat Apr 18 10:55:42.145961 2026] [:error] [pid 13023:tid 13041] [client 20.215.244.72:15420] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "aeLyrv1e7hG8DAeABB996wAAARA"]
[Sat Apr 18 10:55:42.910078 2026] [:error] [pid 13023:tid 13033] [client 20.215.244.72:15296] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/roksad1.php"] [unique_id "aeLyrv1e7hG8DAeABB998AAAAQg"]
[Sat Apr 18 10:55:43.550457 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:15385] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/roksad1.php"] [unique_id "aeLyryYdRLRhVmaIMx019gAAAMs"]
[Sat Apr 18 10:55:44.336654 2026] [:error] [pid 9864:tid 9908] [client 20.215.244.72:15303] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/roksad1.php"] [unique_id "aeLysICFeowknfXHM7lxOQAAAEM"]
[Sat Apr 18 10:55:45.115055 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:15345] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/roksad1.php"] [unique_id "aeLysSYdRLRhVmaIMx01-QAAANU"]
[Sat Apr 18 10:55:45.742550 2026] [:error] [pid 13023:tid 13032] [client 20.215.244.72:15384] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aeLysf1e7hG8DAeABB999QAAAQc"]
[Sat Apr 18 10:55:46.399563 2026] [:error] [pid 34288:tid 34298] [client 20.215.244.72:15396] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aeLysuTIiy__PtiLmpl_CAAAAYY"]
[Sat Apr 18 10:55:47.187899 2026] [:error] [pid 9970:tid 9974] [client 20.215.244.72:15389] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aeLysyYdRLRhVmaIMx01_wAAAMA"]
[Sat Apr 18 10:55:47.762720 2026] [:error] [pid 9970:tid 9978] [client 20.215.244.72:15485] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aeLysyYdRLRhVmaIMx02AQAAAMQ"]
[Sat Apr 18 10:55:48.789575 2026] [:error] [pid 34290:tid 34332] [client 20.215.244.72:15379] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeLytBqX6WpmmAXOBi-dSwAAAc0"]
[Sat Apr 18 10:55:49.586898 2026] [:error] [pid 34290:tid 34339] [client 20.215.244.72:15414] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeLytRqX6WpmmAXOBi-dTQAAAdQ"]
[Sat Apr 18 10:55:50.470855 2026] [:error] [pid 13023:tid 13048] [client 20.215.244.72:15410] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeLytv1e7hG8DAeABB9-AwAAARc"]
[Sat Apr 18 10:55:52.222477 2026] [:error] [pid 34290:tid 34332] [client 20.215.244.72:15462] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeLyuBqX6WpmmAXOBi-dXAAAAc0"]
[Sat Apr 18 10:55:53.347632 2026] [:error] [pid 9864:tid 9928] [client 20.215.244.72:15470] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeLyuYCFeowknfXHM7lxOwAAAFY"]
[Sat Apr 18 10:55:55.358728 2026] [:error] [pid 34237:tid 34261] [client 20.215.244.72:15316] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeLyuxBmX4Wq5a6rxfYcVwAAAVY"]
[Sat Apr 18 10:55:57.328593 2026] [:error] [pid 9864:tid 9918] [client 20.215.244.72:15465] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeLyvYCFeowknfXHM7lxPAAAAEw"]
[Sat Apr 18 10:55:58.518711 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:15459] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeLyvv1e7hG8DAeABB9-DAAAARg"]
[Sat Apr 18 10:56:03.058765 2026] [proxy_fcgi:error] [pid 34288:tid 34307] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:05.909060 2026] [proxy_fcgi:error] [pid 34288:tid 34294] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:08.162058 2026] [proxy_fcgi:error] [pid 34288:tid 34300] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:11.372689 2026] [proxy_fcgi:error] [pid 34288:tid 34313] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:13.495322 2026] [proxy_fcgi:error] [pid 34288:tid 34309] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:15.538782 2026] [proxy_fcgi:error] [pid 34288:tid 34301] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:17.583959 2026] [proxy_fcgi:error] [pid 34288:tid 34299] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:19.713889 2026] [proxy_fcgi:error] [pid 34288:tid 34295] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:21.776136 2026] [proxy_fcgi:error] [pid 34288:tid 34315] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:23.824319 2026] [proxy_fcgi:error] [pid 34288:tid 34304] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:25.880967 2026] [proxy_fcgi:error] [pid 34288:tid 34310] [client 20.215.244.72:15338] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:56:26.712129 2026] [:error] [pid 34288:tid 34309] [client 20.215.244.72:15338] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "aeLy2uTIiy__PtiLmpl_MgAAAZE"]
[Sat Apr 18 10:56:28.138298 2026] [:error] [pid 9863:tid 9878] [client 20.215.244.72:15417] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "aeLy3DjjiypiFrTucbJfNAAAAAU"]
[Sat Apr 18 10:56:29.508652 2026] [:error] [pid 34290:tid 34338] [client 20.215.244.72:15452] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "aeLy3RqX6WpmmAXOBi-deAAAAdM"]
[Sat Apr 18 10:56:31.582734 2026] [:error] [pid 9970:tid 9992] [client 20.215.244.72:15418] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "aeLy3yYdRLRhVmaIMx02DQAAANI"]
[Sat Apr 18 10:56:32.437962 2026] [:error] [pid 34290:tid 34332] [client 20.215.244.72:15361] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/r2.php"] [unique_id "aeLy4BqX6WpmmAXOBi-dfQAAAc0"]
[Sat Apr 18 10:56:33.316727 2026] [:error] [pid 34290:tid 34324] [client 20.215.244.72:15469] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/r2.php"] [unique_id "aeLy4RqX6WpmmAXOBi-dggAAAcU"]
[Sat Apr 18 10:56:35.265388 2026] [:error] [pid 34237:tid 34255] [client 20.215.244.72:15372] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/r2.php"] [unique_id "aeLy4xBmX4Wq5a6rxfYceAAAAVA"]
[Sat Apr 18 10:56:36.248017 2026] [:error] [pid 34290:tid 34341] [client 20.215.244.72:15299] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/r2.php"] [unique_id "aeLy5BqX6WpmmAXOBi-dhgAAAdY"]
[Sat Apr 18 10:56:37.843041 2026] [:error] [pid 34290:tid 34339] [client 20.215.244.72:15419] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ah25.php"] [unique_id "aeLy5RqX6WpmmAXOBi-djwAAAdQ"]
[Sat Apr 18 10:56:39.542642 2026] [:error] [pid 34237:tid 34242] [client 20.215.244.72:15351] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ah25.php"] [unique_id "aeLy5xBmX4Wq5a6rxfYceQAAAUM"]
[Sat Apr 18 10:56:41.359345 2026] [:error] [pid 34288:tid 34293] [client 20.215.244.72:15395] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ah25.php"] [unique_id "aeLy6eTIiy__PtiLmpl_MwAAAYE"]
[Sat Apr 18 10:56:42.346588 2026] [:error] [pid 9864:tid 9917] [client 20.215.244.72:15406] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ah25.php"] [unique_id "aeLy6oCFeowknfXHM7lxTQAAAEs"]
[Sat Apr 18 10:56:43.710477 2026] [:error] [pid 34290:tid 34329] [client 20.215.244.72:15318] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/006.php"] [unique_id "aeLy6xqX6WpmmAXOBi-dnAAAAco"]
[Sat Apr 18 10:56:44.418721 2026] [:error] [pid 9863:tid 9877] [client 20.215.244.72:15397] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/006.php"] [unique_id "aeLy7DjjiypiFrTucbJfOQAAAAQ"]
[Sat Apr 18 10:56:45.342557 2026] [:error] [pid 34288:tid 34301] [client 20.215.244.72:15320] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/006.php"] [unique_id "aeLy7eTIiy__PtiLmpl_NQAAAYk"]
[Sat Apr 18 10:56:45.921366 2026] [:error] [pid 34288:tid 34307] [client 20.215.244.72:15307] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/006.php"] [unique_id "aeLy7eTIiy__PtiLmpl_NgAAAY8"]
[Sat Apr 18 10:56:46.543597 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:15338] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "aeLy7hqX6WpmmAXOBi-dnwAAAdA"]
[Sat Apr 18 10:56:47.523388 2026] [:error] [pid 34288:tid 34308] [client 20.215.244.72:15321] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "aeLy7-TIiy__PtiLmpl_OAAAAZA"]
[Sat Apr 18 10:56:48.714641 2026] [:error] [pid 34290:tid 34332] [client 20.215.244.72:15314] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "aeLy8BqX6WpmmAXOBi-dpAAAAc0"]
[Sat Apr 18 10:56:49.969459 2026] [:error] [pid 34290:tid 34341] [client 20.215.244.72:15327] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "aeLy8RqX6WpmmAXOBi-dqQAAAdY"]
[Sat Apr 18 10:56:50.640339 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:15429] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zogy1.php"] [unique_id "aeLy8hqX6WpmmAXOBi-drAAAAdA"]
[Sat Apr 18 10:56:51.624400 2026] [:error] [pid 34290:tid 34326] [client 20.215.244.72:15390] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zogy1.php"] [unique_id "aeLy8xqX6WpmmAXOBi-dtgAAAcc"]
[Sat Apr 18 10:56:53.486336 2026] [:error] [pid 34290:tid 34325] [client 20.215.244.72:15329] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zogy1.php"] [unique_id "aeLy9RqX6WpmmAXOBi-dwgAAAcY"]
[Sat Apr 18 10:56:55.054189 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:15348] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zogy1.php"] [unique_id "aeLy9-TIiy__PtiLmpl_OQAAAYQ"]
[Sat Apr 18 10:56:56.056693 2026] [:error] [pid 34290:tid 34326] [client 20.215.244.72:15413] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLy-BqX6WpmmAXOBi-dxwAAAcc"]
[Sat Apr 18 10:56:58.823062 2026] [:error] [pid 9864:tid 9910] [client 20.215.244.72:15306] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLy-oCFeowknfXHM7lxVAAAAEU"]
[Sat Apr 18 10:57:00.574649 2026] [:error] [pid 9970:tid 9990] [client 20.215.244.72:15351] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLy_CYdRLRhVmaIMx02HgAAANA"]
[Sat Apr 18 10:57:02.059448 2026] [:error] [pid 9970:tid 9982] [client 20.215.244.72:15323] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLy_iYdRLRhVmaIMx02IgAAAMg"]
[Sat Apr 18 10:57:03.650232 2026] [:error] [pid 34237:tid 34258] [client 20.215.244.72:15235] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeLy_xBmX4Wq5a6rxfYcfAAAAVM"]
[Sat Apr 18 10:57:05.136842 2026] [:error] [pid 13023:tid 13036] [client 20.215.244.72:15388] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeLzAf1e7hG8DAeABB9-MAAAAQs"]
[Sat Apr 18 10:57:07.141004 2026] [:error] [pid 13023:tid 13031] [client 20.215.244.72:15386] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeLzA_1e7hG8DAeABB9-WQAAAQY"]
[Sat Apr 18 10:57:08.005328 2026] [:error] [pid 9863:tid 9884] [client 20.215.244.72:15369] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "aeLzBDjjiypiFrTucbJfPwAAAAs"]
[Sat Apr 18 10:57:09.046762 2026] [:error] [pid 34237:tid 34253] [client 20.215.244.72:15301] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gz.php"] [unique_id "aeLzBRBmX4Wq5a6rxfYc3gAAAU4"]
[Sat Apr 18 10:57:09.655934 2026] [:error] [pid 9864:tid 9918] [client 20.215.244.72:15356] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gz.php"] [unique_id "aeLzBYCFeowknfXHM7lxWAAAAEw"]
[Sat Apr 18 10:57:10.453301 2026] [:error] [pid 34288:tid 34292] [client 20.215.244.72:15309] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gz.php"] [unique_id "aeLzBuTIiy__PtiLmpl_YgAAAYA"]
[Sat Apr 18 10:57:11.613271 2026] [:error] [pid 34290:tid 34338] [client 20.215.244.72:15467] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gz.php"] [unique_id "aeLzBxqX6WpmmAXOBi-d1wAAAdM"]
[Sat Apr 18 10:57:13.175821 2026] [:error] [pid 9863:tid 9895] [client 20.215.244.72:15258] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gelio1.php"] [unique_id "aeLzCTjjiypiFrTucbJfRAAAABY"]
[Sat Apr 18 10:57:13.882002 2026] [:error] [pid 13023:tid 13042] [client 20.215.244.72:15311] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gelio1.php"] [unique_id "aeLzCf1e7hG8DAeABB9-YwAAARE"]
[Sat Apr 18 10:57:14.482223 2026] [:error] [pid 9970:tid 9998] [client 20.215.244.72:15344] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gelio1.php"] [unique_id "aeLzCiYdRLRhVmaIMx02TgAAANg"]
[Sat Apr 18 10:57:15.212807 2026] [:error] [pid 13023:tid 13035] [client 20.215.244.72:15241] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gelio1.php"] [unique_id "aeLzC_1e7hG8DAeABB9-awAAAQo"]
[Sat Apr 18 10:57:15.857389 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:15423] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/areak1.php"] [unique_id "aeLzC_1e7hG8DAeABB9-bgAAARg"]
[Sat Apr 18 10:57:16.642873 2026] [:error] [pid 34290:tid 34334] [client 20.215.244.72:15398] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/areak1.php"] [unique_id "aeLzDBqX6WpmmAXOBi-d3gAAAc8"]
[Sat Apr 18 10:57:17.666968 2026] [:error] [pid 13023:tid 13044] [client 20.215.244.72:15362] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/areak1.php"] [unique_id "aeLzDf1e7hG8DAeABB9-cgAAARM"]
[Sat Apr 18 10:57:18.633281 2026] [:error] [pid 9863:tid 9880] [client 20.215.244.72:15319] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/areak1.php"] [unique_id "aeLzDjjjiypiFrTucbJfSAAAAAc"]
[Sat Apr 18 10:57:19.386348 2026] [:error] [pid 13023:tid 13025] [client 20.215.244.72:15401] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/qqa.php"] [unique_id "aeLzD_1e7hG8DAeABB9-eAAAAQA"]
[Sat Apr 18 10:57:19.995097 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:15394] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/qqa.php"] [unique_id "aeLzD_1e7hG8DAeABB9-fQAAARg"]
[Sat Apr 18 10:57:20.570115 2026] [:error] [pid 13023:tid 13033] [client 20.215.244.72:15383] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/qqa.php"] [unique_id "aeLzEP1e7hG8DAeABB9-gAAAAQg"]
[Sat Apr 18 10:57:21.172058 2026] [:error] [pid 13023:tid 13026] [client 20.215.244.72:15239] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/qqa.php"] [unique_id "aeLzEf1e7hG8DAeABB9-hAAAAQE"]
[Sat Apr 18 10:57:21.807850 2026] [:error] [pid 9970:tid 9988] [client 20.215.244.72:15393] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeLzESYdRLRhVmaIMx02UwAAAM4"]
[Sat Apr 18 10:57:22.442989 2026] [:error] [pid 9970:tid 9986] [client 20.215.244.72:15322] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeLzEiYdRLRhVmaIMx02VwAAAMw"]
[Sat Apr 18 10:57:23.430223 2026] [:error] [pid 13023:tid 13032] [client 20.215.244.72:15343] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeLzE_1e7hG8DAeABB9-iAAAAQc"]
[Sat Apr 18 10:57:26.453393 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:29.330936 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:31.652688 2026] [proxy_fcgi:error] [pid 13023:tid 13029] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:33.861955 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:36.114808 2026] [proxy_fcgi:error] [pid 13023:tid 13041] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:38.248739 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:40.318670 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:42.548292 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:44.651573 2026] [proxy_fcgi:error] [pid 13023:tid 13027] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:46.697217 2026] [proxy_fcgi:error] [pid 13023:tid 13028] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:48.735350 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 20.215.244.72:15433] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:57:49.000026 2026] [:error] [pid 13023:tid 13033] [client 20.215.244.72:15433] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aeLzLP1e7hG8DAeABB9-qAAAAQg"]
[Sat Apr 18 10:57:49.536268 2026] [:error] [pid 13023:tid 13031] [client 20.215.244.72:15480] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aeLzLf1e7hG8DAeABB9-qQAAAQY"]
[Sat Apr 18 10:57:50.059740 2026] [:error] [pid 9865:tid 9961] [client 20.215.244.72:15250] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aeLzLqzb5knECIY-C-j_sAAAAJg"]
[Sat Apr 18 10:57:50.681048 2026] [:error] [pid 34288:tid 34309] [client 20.215.244.72:15416] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aeLzLuTIiy__PtiLmpl_dgAAAZE"]
[Sat Apr 18 10:57:51.226963 2026] [:error] [pid 13023:tid 13041] [client 20.215.244.72:15312] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLzL_1e7hG8DAeABB9-qwAAARA"]
[Sat Apr 18 10:57:51.799697 2026] [:error] [pid 9863:tid 9885] [client 20.215.244.72:15172] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLzLzjjiypiFrTucbJfggAAAAw"]
[Sat Apr 18 10:57:52.311319 2026] [:error] [pid 13023:tid 13034] [client 20.215.244.72:15259] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLzMP1e7hG8DAeABB9-rgAAAQk"]
[Sat Apr 18 10:57:52.875466 2026] [:error] [pid 34288:tid 34311] [client 20.215.244.72:15337] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yuzuru1.php"] [unique_id "aeLzMOTIiy__PtiLmpl_eQAAAZM"]
[Sat Apr 18 10:57:53.419536 2026] [:error] [pid 13023:tid 13037] [client 20.215.244.72:15368] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wglum1.php"] [unique_id "aeLzMf1e7hG8DAeABB9-sAAAAQw"]
[Sat Apr 18 10:57:53.997448 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:15366] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wglum1.php"] [unique_id "aeLzMf1e7hG8DAeABB9-sgAAARg"]
[Sat Apr 18 10:57:54.580198 2026] [:error] [pid 9863:tid 9897] [client 20.215.244.72:15408] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wglum1.php"] [unique_id "aeLzMjjjiypiFrTucbJfhgAAABg"]
[Sat Apr 18 10:57:55.209677 2026] [:error] [pid 13023:tid 13029] [client 20.215.244.72:15342] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wglum1.php"] [unique_id "aeLzM_1e7hG8DAeABB9-uAAAAQQ"]
[Sat Apr 18 10:57:55.817922 2026] [:error] [pid 9863:tid 9880] [client 20.215.244.72:15476] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aeLzMzjjiypiFrTucbJfjQAAAAc"]
[Sat Apr 18 10:57:56.374734 2026] [:error] [pid 9863:tid 9885] [client 20.215.244.72:15233] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aeLzNDjjiypiFrTucbJfkwAAAAw"]
[Sat Apr 18 10:57:56.945862 2026] [:error] [pid 9970:tid 9984] [client 20.215.244.72:15286] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aeLzNCYdRLRhVmaIMx02bgAAAMo"]
[Sat Apr 18 10:57:57.459037 2026] [:error] [pid 9970:tid 9974] [client 20.215.244.72:15305] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aeLzNSYdRLRhVmaIMx02cQAAAMA"]
[Sat Apr 18 10:57:58.148661 2026] [:error] [pid 9970:tid 9997] [client 20.215.244.72:15232] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper.php"] [unique_id "aeLzNiYdRLRhVmaIMx02dgAAANc"]
[Sat Apr 18 10:57:58.744722 2026] [:error] [pid 9970:tid 9977] [client 20.215.244.72:15279] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper.php"] [unique_id "aeLzNiYdRLRhVmaIMx02eAAAAMM"]
[Sat Apr 18 10:57:59.332417 2026] [:error] [pid 13023:tid 13034] [client 20.215.244.72:15486] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper.php"] [unique_id "aeLzN_1e7hG8DAeABB9-vgAAAQk"]
[Sat Apr 18 10:57:59.890350 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:15325] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper.php"] [unique_id "aeLzN_1e7hG8DAeABB9-wQAAARg"]
[Sat Apr 18 10:58:00.569608 2026] [:error] [pid 13023:tid 13035] [client 20.215.244.72:15261] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wxpass.php"] [unique_id "aeLzOP1e7hG8DAeABB9-xQAAAQo"]
[Sat Apr 18 10:58:01.121284 2026] [:error] [pid 9970:tid 9983] [client 20.215.244.72:15451] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wxpass.php"] [unique_id "aeLzOSYdRLRhVmaIMx02gAAAAMk"]
[Sat Apr 18 10:58:01.650925 2026] [:error] [pid 9970:tid 9982] [client 20.215.244.72:15472] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wxpass.php"] [unique_id "aeLzOSYdRLRhVmaIMx02gQAAAMg"]
[Sat Apr 18 10:58:02.220289 2026] [:error] [pid 34290:tid 34329] [client 20.215.244.72:15455] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wxpass.php"] [unique_id "aeLzOhqX6WpmmAXOBi-eXwAAAco"]
[Sat Apr 18 10:58:02.739104 2026] [:error] [pid 34290:tid 34341] [client 20.215.244.72:15284] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aeLzOhqX6WpmmAXOBi-eYQAAAdY"]
[Sat Apr 18 10:58:03.253085 2026] [:error] [pid 34237:tid 34259] [client 20.215.244.72:15315] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aeLzOxBmX4Wq5a6rxfYdPgAAAVQ"]
[Sat Apr 18 10:58:03.795697 2026] [:error] [pid 34290:tid 34340] [client 20.215.244.72:15447] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aeLzOxqX6WpmmAXOBi-eZQAAAdU"]
[Sat Apr 18 10:58:04.692173 2026] [:error] [pid 34290:tid 34333] [client 20.215.244.72:15440] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/000.php"] [unique_id "aeLzPBqX6WpmmAXOBi-eaQAAAc4"]
[Sat Apr 18 10:58:05.396627 2026] [:error] [pid 13023:tid 13036] [client 20.215.244.72:15244] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/config.php"] [unique_id "aeLzPf1e7hG8DAeABB9-ywAAAQs"]
[Sat Apr 18 10:58:05.916944 2026] [:error] [pid 34290:tid 34331] [client 20.215.244.72:15375] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/config.php"] [unique_id "aeLzPRqX6WpmmAXOBi-eagAAAcw"]
[Sat Apr 18 10:58:06.548598 2026] [:error] [pid 13023:tid 13029] [client 20.215.244.72:15255] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/config.php"] [unique_id "aeLzPv1e7hG8DAeABB9-zQAAAQQ"]
[Sat Apr 18 10:58:07.124794 2026] [:error] [pid 34290:tid 34319] [client 20.215.244.72:15264] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/config.php"] [unique_id "aeLzPxqX6WpmmAXOBi-ecAAAAcA"]
[Sat Apr 18 10:58:07.661104 2026] [:error] [pid 34237:tid 34249] [client 20.215.244.72:15339] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x3x.php"] [unique_id "aeLzPxBmX4Wq5a6rxfYdQAAAAUo"]
[Sat Apr 18 10:58:08.342619 2026] [:error] [pid 34237:tid 34242] [client 20.215.244.72:15446] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x3x.php"] [unique_id "aeLzQBBmX4Wq5a6rxfYdQQAAAUM"]
[Sat Apr 18 10:58:08.870180 2026] [:error] [pid 9863:tid 9877] [client 20.215.244.72:15340] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x3x.php"] [unique_id "aeLzQDjjiypiFrTucbJfrAAAAAQ"]
[Sat Apr 18 10:58:09.633472 2026] [:error] [pid 9864:tid 9926] [client 20.215.244.72:15475] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/x3x.php"] [unique_id "aeLzQYCFeowknfXHM7lxgwAAAFQ"]
[Sat Apr 18 10:58:10.277699 2026] [:error] [pid 9863:tid 9887] [client 20.215.244.72:15478] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aeLzQjjjiypiFrTucbJfrwAAAA4"]
[Sat Apr 18 10:58:11.639647 2026] [:error] [pid 34237:tid 34250] [client 20.215.244.72:15277] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aeLzQxBmX4Wq5a6rxfYdRAAAAUs"]
[Sat Apr 18 10:58:12.852225 2026] [:error] [pid 13023:tid 13030] [client 20.215.244.72:15466] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aeLzRP1e7hG8DAeABB9-1wAAAQU"]
[Sat Apr 18 10:58:14.504326 2026] [:error] [pid 13023:tid 13035] [client 20.215.244.72:15310] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "aeLzRv1e7hG8DAeABB9-2wAAAQo"]
[Sat Apr 18 10:58:15.187456 2026] [:error] [pid 9970:tid 9992] [client 20.215.244.72:15281] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/global.php"] [unique_id "aeLzRyYdRLRhVmaIMx02iwAAANI"]
[Sat Apr 18 10:58:15.974115 2026] [:error] [pid 9970:tid 9978] [client 20.215.244.72:15441] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/global.php"] [unique_id "aeLzRyYdRLRhVmaIMx02jgAAAMQ"]
[Sat Apr 18 10:58:16.673399 2026] [:error] [pid 9863:tid 9877] [client 20.215.244.72:15280] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/global.php"] [unique_id "aeLzSDjjiypiFrTucbJftwAAAAQ"]
[Sat Apr 18 10:58:17.255800 2026] [:error] [pid 9970:tid 9974] [client 20.215.244.72:15382] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/global.php"] [unique_id "aeLzSSYdRLRhVmaIMx02kwAAAMA"]
[Sat Apr 18 10:58:17.957575 2026] [:error] [pid 9970:tid 9993] [client 20.215.244.72:15263] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeLzSSYdRLRhVmaIMx02lgAAANM"]
[Sat Apr 18 10:58:18.500177 2026] [:error] [pid 9864:tid 9922] [client 20.215.244.72:15252] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeLzSoCFeowknfXHM7lxhAAAAFA"]
[Sat Apr 18 10:58:19.165788 2026] [:error] [pid 9863:tid 9895] [client 20.215.244.72:15242] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeLzSzjjiypiFrTucbJfuQAAABY"]
[Sat Apr 18 10:58:19.788635 2026] [:error] [pid 34237:tid 34248] [client 20.215.244.72:15330] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeLzSxBmX4Wq5a6rxfYdRwAAAUk"]
[Sat Apr 18 10:58:20.495178 2026] [:error] [pid 9970:tid 9977] [client 20.215.244.72:15415] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/link.php"] [unique_id "aeLzTCYdRLRhVmaIMx02mgAAAMM"]
[Sat Apr 18 10:58:21.258945 2026] [:error] [pid 9865:tid 9939] [client 20.215.244.72:15347] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/link.php"] [unique_id "aeLzTazb5knECIY-C-j_zwAAAII"]
[Sat Apr 18 10:58:21.855596 2026] [:error] [pid 9970:tid 9983] [client 20.215.244.72:15376] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/link.php"] [unique_id "aeLzTSYdRLRhVmaIMx02nAAAAMk"]
[Sat Apr 18 10:58:22.419866 2026] [:error] [pid 34237:tid 34249] [client 20.215.244.72:15293] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/link.php"] [unique_id "aeLzThBmX4Wq5a6rxfYdSQAAAUo"]
[Sat Apr 18 10:58:22.950249 2026] [:error] [pid 34290:tid 34332] [client 20.215.244.72:15326] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLzThqX6WpmmAXOBi-efwAAAc0"]
[Sat Apr 18 10:58:23.478317 2026] [:error] [pid 34290:tid 34324] [client 20.215.244.72:15399] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLzTxqX6WpmmAXOBi-eggAAAcU"]
[Sat Apr 18 10:58:24.004658 2026] [:error] [pid 34290:tid 34338] [client 20.215.244.72:15453] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLzUBqX6WpmmAXOBi-ehAAAAdM"]
[Sat Apr 18 10:58:24.632610 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:15428] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLzUCYdRLRhVmaIMx02oAAAAMs"]
[Sat Apr 18 10:58:25.281817 2026] [:error] [pid 9970:tid 9975] [client 20.215.244.72:15474] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "aeLzUSYdRLRhVmaIMx02oQAAAME"]
[Sat Apr 18 10:58:25.817078 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:15468] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "aeLzUSYdRLRhVmaIMx02owAAANU"]
[Sat Apr 18 10:58:26.354665 2026] [:error] [pid 13023:tid 13045] [client 20.215.244.72:15442] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "aeLzUv1e7hG8DAeABB9-6AAAARQ"]
[Sat Apr 18 10:58:27.142225 2026] [:error] [pid 9970:tid 9980] [client 20.215.244.72:15440] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "aeLzUyYdRLRhVmaIMx02pQAAAMY"]
[Sat Apr 18 10:58:27.686177 2026] [:error] [pid 9970:tid 9991] [client 20.215.244.72:15403] [client 20.215.244.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeLzUyYdRLRhVmaIMx02pgAAANE"]
[Sat Apr 18 10:58:28.271968 2026] [:error] [pid 34237:tid 34244] [client 20.215.244.72:15352] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeLzVBBmX4Wq5a6rxfYdSwAAAUU"]
[Sat Apr 18 10:58:28.803578 2026] [:error] [pid 34290:tid 34340] [client 20.215.244.72:15479] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeLzVBqX6WpmmAXOBi-ehgAAAdU"]
[Sat Apr 18 10:58:29.478446 2026] [:error] [pid 13023:tid 13028] [client 20.215.244.72:15331] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeLzVf1e7hG8DAeABB9-7QAAAQM"]
[Sat Apr 18 10:58:30.149647 2026] [:error] [pid 13023:tid 13036] [client 20.215.244.72:15204] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeLzVv1e7hG8DAeABB9-7gAAAQs"]
[Sat Apr 18 10:58:30.706422 2026] [:error] [pid 34290:tid 34330] [client 20.215.244.72:15272] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeLzVhqX6WpmmAXOBi-eiQAAAcs"]
[Sat Apr 18 10:58:31.309832 2026] [:error] [pid 13023:tid 13049] [client 20.215.244.72:15432] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeLzV_1e7hG8DAeABB9-8AAAARg"]
[Sat Apr 18 10:58:31.823742 2026] [:error] [pid 13023:tid 13034] [client 20.215.244.72:15437] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "aeLzV_1e7hG8DAeABB9-8QAAAQk"]
[Sat Apr 18 10:58:32.350848 2026] [:error] [pid 13023:tid 13025] [client 20.215.244.72:15425] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "aeLzWP1e7hG8DAeABB9-8wAAAQA"]
[Sat Apr 18 10:58:32.874298 2026] [:error] [pid 9864:tid 9918] [client 20.215.244.72:15473] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "aeLzWICFeowknfXHM7lxjQAAAEw"]
[Sat Apr 18 10:58:33.426060 2026] [:error] [pid 34237:tid 34254] [client 20.215.244.72:15349] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "aeLzWRBmX4Wq5a6rxfYdTQAAAU8"]
[Sat Apr 18 10:58:33.997989 2026] [:error] [pid 9863:tid 9876] [client 20.215.244.72:15182] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "aeLzWTjjiypiFrTucbJfvgAAAAM"]
[Sat Apr 18 10:58:34.520196 2026] [:error] [pid 13023:tid 13026] [client 20.215.244.72:15391] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeLzWv1e7hG8DAeABB9-9wAAAQE"]
[Sat Apr 18 10:58:35.277769 2026] [:error] [pid 13023:tid 13035] [client 20.215.244.72:15477] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeLzW_1e7hG8DAeABB9--gAAAQo"]
[Sat Apr 18 10:58:35.874638 2026] [:error] [pid 9970:tid 9990] [client 20.215.244.72:15448] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeLzWyYdRLRhVmaIMx02qgAAANA"]
[Sat Apr 18 10:58:36.438915 2026] [:error] [pid 9864:tid 9913] [client 20.215.244.72:15370] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws57.php"] [unique_id "aeLzXICFeowknfXHM7lxjwAAAEc"]
[Sat Apr 18 10:58:36.992837 2026] [:error] [pid 13023:tid 13043] [client 20.215.244.72:15292] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws61.php"] [unique_id "aeLzXP1e7hG8DAeABB9-_AAAARI"]
[Sat Apr 18 10:58:37.516063 2026] [:error] [pid 9970:tid 9988] [client 20.215.244.72:15427] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws61.php"] [unique_id "aeLzXSYdRLRhVmaIMx02rAAAAM4"]
[Sat Apr 18 10:58:38.027469 2026] [:error] [pid 9970:tid 9985] [client 20.215.244.72:15456] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws61.php"] [unique_id "aeLzXiYdRLRhVmaIMx02rgAAAMs"]
[Sat Apr 18 10:58:38.541115 2026] [:error] [pid 9970:tid 9995] [client 20.215.244.72:15265] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws61.php"] [unique_id "aeLzXiYdRLRhVmaIMx02sAAAANU"]
[Sat Apr 18 10:58:39.250853 2026] [:error] [pid 34288:tid 34294] [client 20.215.244.72:15354] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeLzX-TIiy__PtiLmpl_kwAAAYI"]
[Sat Apr 18 10:58:39.939524 2026] [:error] [pid 9863:tid 9877] [client 20.215.244.72:15186] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeLzXzjjiypiFrTucbJfwAAAAAQ"]
[Sat Apr 18 10:58:40.576338 2026] [:error] [pid 9864:tid 9915] [client 20.215.244.72:15287] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeLzYICFeowknfXHM7lxkQAAAEk"]
[Sat Apr 18 10:58:41.529623 2026] [:error] [pid 9970:tid 9978] [client 20.215.244.72:15237] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws66.php"] [unique_id "aeLzYSYdRLRhVmaIMx02sQAAAMQ"]
[Sat Apr 18 10:58:42.148802 2026] [:error] [pid 9970:tid 9980] [client 20.215.244.72:15421] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "aeLzYiYdRLRhVmaIMx02swAAAMY"]
[Sat Apr 18 10:58:42.719730 2026] [:error] [pid 9864:tid 9906] [client 20.215.244.72:15450] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "aeLzYoCFeowknfXHM7lxlAAAAEE"]
[Sat Apr 18 10:58:43.412974 2026] [:error] [pid 9970:tid 9986] [client 20.215.244.72:15207] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "aeLzYyYdRLRhVmaIMx02twAAAMw"]
[Sat Apr 18 10:58:44.125884 2026] [:error] [pid 9863:tid 9874] [client 20.215.244.72:15402] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "aeLzZDjjiypiFrTucbJfwgAAAAE"]
[Sat Apr 18 10:58:44.658439 2026] [:error] [pid 9970:tid 9993] [client 20.215.244.72:15374] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xynz.php"] [unique_id "aeLzZCYdRLRhVmaIMx02uQAAANM"]
[Sat Apr 18 10:58:45.384913 2026] [:error] [pid 9864:tid 9928] [client 20.215.244.72:15350] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xynz.php"] [unique_id "aeLzZYCFeowknfXHM7lxmQAAAFY"]
[Sat Apr 18 10:58:48.399740 2026] [proxy_fcgi:error] [pid 34288:tid 34303] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:58:51.343757 2026] [proxy_fcgi:error] [pid 34288:tid 34309] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:58:53.630710 2026] [proxy_fcgi:error] [pid 34288:tid 34293] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:58:55.746519 2026] [proxy_fcgi:error] [pid 34288:tid 34301] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:58:57.983392 2026] [proxy_fcgi:error] [pid 34288:tid 34313] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:00.169514 2026] [proxy_fcgi:error] [pid 34288:tid 34312] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:02.343698 2026] [proxy_fcgi:error] [pid 34288:tid 34303] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:04.468741 2026] [proxy_fcgi:error] [pid 34288:tid 34307] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:06.632729 2026] [proxy_fcgi:error] [pid 34288:tid 34306] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:08.764781 2026] [proxy_fcgi:error] [pid 34288:tid 34313] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:11.015535 2026] [proxy_fcgi:error] [pid 34288:tid 34296] [client 20.215.244.72:15288] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 10:59:11.475425 2026] [:error] [pid 34288:tid 34297] [client 20.215.244.72:15288] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/curl.php"] [unique_id "aeLzf-TIiy__PtiLmpl_8AAAAYU"]
[Sat Apr 18 10:59:12.227599 2026] [:error] [pid 34290:tid 34338] [client 20.215.244.72:15300] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/curl.php"] [unique_id "aeLzgBqX6WpmmAXOBi-e3AAAAdM"]
[Sat Apr 18 10:59:12.807930 2026] [:error] [pid 9864:tid 9912] [client 20.215.244.72:15380] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/curl.php"] [unique_id "aeLzgICFeowknfXHM7lyGgAAAEY"]
[Sat Apr 18 10:59:13.446332 2026] [:error] [pid 34288:tid 34316] [client 20.215.244.72:15444] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/curl.php"] [unique_id "aeLzgeTIiy__PtiLmpl_9wAAAZg"]
[Sat Apr 18 10:59:14.244275 2026] [:error] [pid 34288:tid 34304] [client 20.215.244.72:15460] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "aeLzguTIiy__PtiLmpmAIwAAAYw"]
[Sat Apr 18 10:59:15.014140 2026] [:error] [pid 34288:tid 34301] [client 20.215.244.72:15236] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "aeLzg-TIiy__PtiLmpmAJgAAAYk"]
[Sat Apr 18 10:59:15.912098 2026] [:error] [pid 9863:tid 9879] [client 20.215.244.72:15358] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "aeLzgzjjiypiFrTucbJgDAAAAAY"]
[Sat Apr 18 10:59:16.850560 2026] [:error] [pid 13023:tid 13045] [client 20.215.244.72:15438] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "aeLzhP1e7hG8DAeABB9_gAAAARQ"]
[Sat Apr 18 10:59:17.833754 2026] [:error] [pid 9863:tid 9892] [client 20.215.244.72:15256] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeLzhTjjiypiFrTucbJgEQAAABM"]
[Sat Apr 18 10:59:19.055200 2026] [:error] [pid 9863:tid 9889] [client 20.215.244.72:15328] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeLzhzjjiypiFrTucbJgEgAAABA"]
[Sat Apr 18 10:59:20.033571 2026] [:error] [pid 34288:tid 34304] [client 20.215.244.72:15461] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeLziOTIiy__PtiLmpmARAAAAYw"]
[Sat Apr 18 10:59:20.818448 2026] [:error] [pid 34288:tid 34305] [client 20.215.244.72:15336] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeLziOTIiy__PtiLmpmARgAAAY0"]
[Sat Apr 18 10:59:21.737877 2026] [:error] [pid 13023:tid 13042] [client 20.215.244.72:15234] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeLzif1e7hG8DAeABB9_hwAAARE"]
[Sat Apr 18 10:59:22.433948 2026] [:error] [pid 9864:tid 9921] [client 20.215.244.72:15324] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeLzioCFeowknfXHM7lyMwAAAE8"]
[Sat Apr 18 10:59:23.216830 2026] [:error] [pid 13023:tid 13038] [client 20.215.244.72:15335] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeLzi_1e7hG8DAeABB9_jQAAAQ0"]
[Sat Apr 18 10:59:24.253807 2026] [:error] [pid 34290:tid 34335] [client 20.215.244.72:15262] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeLzjBqX6WpmmAXOBi-e6QAAAdA"]
[Sat Apr 18 10:59:25.116468 2026] [:error] [pid 9865:tid 9943] [client 20.215.244.72:15257] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aa.php"] [unique_id "aeLzjazb5knECIY-C-j_-wAAAIY"]
[Sat Apr 18 10:59:26.356481 2026] [:error] [pid 9865:tid 9959] [client 20.215.244.72:15400] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aa.php"] [unique_id "aeLzjqzb5knECIY-C-gAAAAAAJY"]
[Sat Apr 18 10:59:28.034093 2026] [:error] [pid 9864:tid 9924] [client 20.215.244.72:15168] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aa.php"] [unique_id "aeLzkICFeowknfXHM7lyOgAAAFI"]
[Sat Apr 18 10:59:29.218440 2026] [:error] [pid 34237:tid 34239] [client 20.215.244.72:15404] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aa.php"] [unique_id "aeLzkRBmX4Wq5a6rxfYdlQAAAUA"]
[Sat Apr 18 10:59:29.940571 2026] [:error] [pid 34288:tid 34296] [client 20.215.244.72:15316] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeLzkeTIiy__PtiLmpmATwAAAYQ"]
[Sat Apr 18 10:59:30.898504 2026] [:error] [pid 9864:tid 9922] [client 20.215.244.72:15464] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeLzkoCFeowknfXHM7lyQAAAAFA"]
[Sat Apr 18 10:59:31.599589 2026] [:error] [pid 9865:tid 9955] [client 20.215.244.72:15482] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeLzk6zb5knECIY-C-gABAAAAJI"]
[Sat Apr 18 10:59:32.264637 2026] [:error] [pid 13023:tid 13038] [client 20.215.244.72:15267] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeLzlP1e7hG8DAeABB9_lgAAAQ0"]
[Sat Apr 18 10:59:33.140387 2026] [:error] [pid 34288:tid 34292] [client 20.215.244.72:15179] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLzleTIiy__PtiLmpmAVQAAAYA"]
[Sat Apr 18 10:59:33.895422 2026] [:error] [pid 9864:tid 9919] [client 20.215.244.72:15249] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLzlYCFeowknfXHM7lySAAAAE0"]
[Sat Apr 18 10:59:34.676186 2026] [:error] [pid 13023:tid 13037] [client 20.215.244.72:15268] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLzlv1e7hG8DAeABB9_mAAAAQw"]
[Sat Apr 18 10:59:35.391278 2026] [:error] [pid 9864:tid 9925] [client 20.215.244.72:15355] [client 20.215.244.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLzl4CFeowknfXHM7lyTQAAAFM"]
[Sat Apr 18 14:16:40.292987 2026] [proxy_fcgi:error] [pid 34290:tid 34335] [client 52.167.144.57:37582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 14:16:41.744868 2026] [proxy_fcgi:error] [pid 34290:tid 34324] [client 52.167.144.57:37582] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 18 14:16:52.096404 2026] [proxy_fcgi:error] [pid 9865:tid 9946] [client 52.167.144.166:27470] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 19 00:02:31.702904 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:31.702932 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:50.173533 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:50.173561 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:52.252748 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:52.252748 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.710146 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.710183 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.626065 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.626096 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.477153 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.477180 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.544112 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.544138 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:43.674014 2026] [proxy_fcgi:error] [pid 40227:tid 40239] [client 158.173.67.29:44517] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 19 03:47:51.025385 2026] [proxy_fcgi:error] [pid 40524:tid 40665] [client 158.173.67.227:40819] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 19 04:04:07.958836 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:07.958862 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:10.002837 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:10.002864 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:45.064380 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:45.064407 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:47.112190 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:47.112227 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 11:43:34.716308 2026] [proxy_fcgi:error] [pid 47773:tid 47840] [client 34.182.82.1:64252] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 19 11:43:34.786633 2026] [proxy_fcgi:error] [pid 15764:tid 15836] [client 34.182.82.1:60592] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Mon Apr 20 03:12:52.334188 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:52.334215 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.516634 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.516660 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:11.271960 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:11.271984 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.665463 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.665489 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.560823 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.560850 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.545056 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.545084 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:14.137965 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:14.137994 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:16.165930 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:16.165956 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.677224 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.677280 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.735974 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.736001 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 07:42:57.493630 2026] [proxy_fcgi:error] [pid 60072:tid 60085] [client 32.194.215.91:15179] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Mon Apr 20 10:09:52.593826 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:52.593858 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:53.606163 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:53.606190 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.788288 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.788314 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:10.981590 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:10.981598 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:20.864684 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:20.864710 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:26.811506 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:26.811532 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:28.893759 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:28.893772 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:47.117846 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:47.117873 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:49.175383 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:49.175409 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.537395 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.537422 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.689222 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.689293 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 12:57:53.198483 2026] [proxy_fcgi:error] [pid 35320:tid 35352] [client 34.182.92.74:50024] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Tue Apr 21 12:57:53.306601 2026] [proxy_fcgi:error] [pid 35322:tid 35360] [client 34.182.92.74:35320] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 22 01:31:23.754905 2026] [proxy_fcgi:error] [pid 54080:tid 54097] [client 34.32.247.234:49152] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 22 03:06:45.762630 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:45.762669 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:48.010786 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:48.010821 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:03.264919 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:03.264951 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:12.803292 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:12.803318 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.708702 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.708727 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:21.818829 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:21.818868 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:31.155208 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:31.155271 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:33.242321 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:33.242362 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:03.338979 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:03.339015 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:05.421783 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:05.421808 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 12:25:23.171042 2026] [proxy_fcgi:error] [pid 21682:tid 21724] [client 74.50.70.222:54208] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 22 13:25:49.128875 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:49.128912 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 14:05:52.850412 2026] [proxy_fcgi:error] [pid 6384:tid 6404] [client 129.150.44.188:57110] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 22 14:05:55.494820 2026] [proxy_fcgi:error] [pid 9085:tid 9107] [client 129.150.44.188:54735] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Wed Apr 22 21:46:19.298644 2026] [proxy_fcgi:error] [pid 6252:tid 6318] [client 89.222.112.81:54063] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 00:25:13.982558 2026] [:error] [pid 9085:tid 9089] [client 168.144.81.250:61477] [client 168.144.81.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aej2ad-_-or9vQnlWnr_nAAAAUI"]
[Thu Apr 23 00:25:33.915287 2026] [:error] [pid 6252:tid 6326] [client 168.144.81.250:49422] [client 168.144.81.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aej2fetGYuiYb1nWBpR0qwAAAQ4"]
[Thu Apr 23 00:25:34.887386 2026] [:error] [pid 6252:tid 6322] [client 168.144.81.250:49643] [client 168.144.81.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aej2futGYuiYb1nWBpR0sQAAAQo"]
[Thu Apr 23 00:25:52.858365 2026] [:error] [pid 9085:tid 9087] [client 168.144.81.250:54378] [client 168.144.81.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "aej2kN-_-or9vQnlWnoA3QAAAUA"]
[Thu Apr 23 00:25:53.888753 2026] [:error] [pid 6384:tid 6394] [client 168.144.81.250:54713] [client 168.144.81.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aej2kT58M3t15ICeWHWuoAAAAMc"]
[Thu Apr 23 00:26:13.099910 2026] [:error] [pid 6384:tid 6399] [client 168.144.81.250:59229] [client 168.144.81.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 168.144.81.250, counter = 6"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aej2pT58M3t15ICeWHWu_gAAAMw"]
[Thu Apr 23 03:10:44.558743 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:44.558769 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.730908 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.730931 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:04.087777 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:04.087804 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:13.382914 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:13.382939 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:27.402482 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:27.402508 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:29.452002 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:29.452029 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:41.877883 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:41.877891 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:43.896521 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:43.896567 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.732490 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.732516 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.706571 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.706596 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 16:59:45.279457 2026] [proxy_fcgi:error] [pid 42973:tid 43045] [client 20.216.153.175:38926] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 16:59:48.442136 2026] [proxy_fcgi:error] [pid 42973:tid 43051] [client 20.216.153.175:38926] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 16:59:48.844172 2026] [:error] [pid 42973:tid 43046] [client 20.216.153.175:38926] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "aenfhG6I0QqmmmLTHE3RhAAAAIM"]
[Thu Apr 23 16:59:50.221917 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:42900] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "aenfhr6vRb9j6psK2ZbSzAAAAgU"]
[Thu Apr 23 16:59:51.575062 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:42915] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "aenfh4V5EysYcTLjmwj7HwAAAcE"]
[Thu Apr 23 16:59:52.908682 2026] [:error] [pid 64998:tid 65018] [client 20.216.153.175:34261] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "aenfiIV5EysYcTLjmwj7IgAAAdA"]
[Thu Apr 23 16:59:53.880120 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:38401] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "aenfiW6I0QqmmmLTHE3RiQAAAJM"]
[Thu Apr 23 16:59:55.446801 2026] [:error] [pid 64998:tid 65008] [client 20.216.153.175:30298] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "aenfi4V5EysYcTLjmwj7KgAAAcY"]
[Thu Apr 23 16:59:56.826329 2026] [:error] [pid 42971:tid 42986] [client 20.216.153.175:45575] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "aenfjDEP2_5RswrH8bEPOwAAAAA"]
[Thu Apr 23 16:59:57.777914 2026] [:error] [pid 64998:tid 65004] [client 20.216.153.175:38417] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "aenfjYV5EysYcTLjmwj7NAAAAcI"]
[Thu Apr 23 16:59:58.838279 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:5990] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.sghb.php"] [unique_id "aenfjsOAb-3sOknsk4fZmgAAAEM"]
[Thu Apr 23 17:00:00.288583 2026] [:error] [pid 46953:tid 46969] [client 20.216.153.175:14526] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.sghb.php"] [unique_id "aenfkEnlpdHh-P6wKboNbQAAAk0"]
[Thu Apr 23 17:00:01.329588 2026] [:error] [pid 46953:tid 46964] [client 20.216.153.175:36203] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.sghb.php"] [unique_id "aenfkUnlpdHh-P6wKboNcwAAAkg"]
[Thu Apr 23 17:00:02.266611 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:38429] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.sghb.php"] [unique_id "aenfkoV5EysYcTLjmwj7PwAAAdI"]
[Thu Apr 23 17:00:03.739974 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:64505] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoko.php"] [unique_id "aenfk4V5EysYcTLjmwj7SQAAAcE"]
[Thu Apr 23 17:00:06.291902 2026] [:error] [pid 65000:tid 65030] [client 20.216.153.175:17847] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoko.php"] [unique_id "aenflr6vRb9j6psK2ZbS8wAAAgE"]
[Thu Apr 23 17:00:07.457775 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:34248] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoko.php"] [unique_id "aenfl26I0QqmmmLTHE3RkwAAAIE"]
[Thu Apr 23 17:00:09.581850 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:36201] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoko.php"] [unique_id "aenfmYV5EysYcTLjmwj7cQAAAcQ"]
[Thu Apr 23 17:00:11.678037 2026] [:error] [pid 64998:tid 65011] [client 20.216.153.175:13484] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/solo1.php"] [unique_id "aenfm4V5EysYcTLjmwj7egAAAck"]
[Thu Apr 23 17:00:12.726156 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:36174] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/solo1.php"] [unique_id "aenfnL6vRb9j6psK2ZbTEQAAAgc"]
[Thu Apr 23 17:00:13.942565 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:36208] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/solo1.php"] [unique_id "aenfncOAb-3sOknsk4fZsgAAAEU"]
[Thu Apr 23 17:00:15.337673 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:45522] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/solo1.php"] [unique_id "aenfn8OAb-3sOknsk4fZswAAAE4"]
[Thu Apr 23 17:00:16.790271 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:30275] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/locales.php"] [unique_id "aenfoIV5EysYcTLjmwj7hAAAAc4"]
[Thu Apr 23 17:00:17.593112 2026] [:error] [pid 42971:tid 42998] [client 20.216.153.175:17395] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/locales.php"] [unique_id "aenfoTEP2_5RswrH8bEPQAAAAAw"]
[Thu Apr 23 17:00:18.350172 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:5766] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/locales.php"] [unique_id "aenfosOAb-3sOknsk4fZuAAAAFg"]
[Thu Apr 23 17:00:19.183099 2026] [:error] [pid 64998:tid 65005] [client 20.216.153.175:17365] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/locales.php"] [unique_id "aenfo4V5EysYcTLjmwj7jAAAAcM"]
[Thu Apr 23 17:00:20.063667 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:16575] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aenfpIV5EysYcTLjmwj7jwAAAcA"]
[Thu Apr 23 17:00:20.786569 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:12301] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aenfpL6vRb9j6psK2ZbTJwAAAgM"]
[Thu Apr 23 17:00:22.030645 2026] [:error] [pid 25635:tid 25647] [client 20.216.153.175:21321] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aenfpsRxv6UsgRGKB3IgcAAAAQg"]
[Thu Apr 23 17:00:23.674109 2026] [:error] [pid 64998:tid 65005] [client 20.216.153.175:28331] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "aenfp4V5EysYcTLjmwj7lgAAAcM"]
[Thu Apr 23 17:00:24.768292 2026] [:error] [pid 46953:tid 46966] [client 20.216.153.175:21354] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pucci.php"] [unique_id "aenfqEnlpdHh-P6wKboNeQAAAko"]
[Thu Apr 23 17:00:25.496799 2026] [:error] [pid 65000:tid 65049] [client 20.216.153.175:41160] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pucci.php"] [unique_id "aenfqb6vRb9j6psK2ZbTNQAAAhA"]
[Thu Apr 23 17:00:26.227526 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:12293] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pucci.php"] [unique_id "aenfqr6vRb9j6psK2ZbTOwAAAhU"]
[Thu Apr 23 17:00:26.860144 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:35870] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pucci.php"] [unique_id "aenfqr6vRb9j6psK2ZbTQwAAAhQ"]
[Thu Apr 23 17:00:27.814159 2026] [:error] [pid 65000:tid 65047] [client 20.216.153.175:41882] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aenfq76vRb9j6psK2ZbTTAAAAg4"]
[Thu Apr 23 17:00:29.319215 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:30305] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aenfrcOAb-3sOknsk4fZwwAAAE0"]
[Thu Apr 23 17:00:30.209369 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:22022] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aenfroV5EysYcTLjmwj7ngAAAcU"]
[Thu Apr 23 17:00:31.143756 2026] [:error] [pid 46953:tid 46959] [client 20.216.153.175:41191] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aenfr0nlpdHh-P6wKboNewAAAkM"]
[Thu Apr 23 17:00:31.822459 2026] [:error] [pid 64967:tid 64987] [client 20.216.153.175:36924] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aenfr4AV4GfOOdX8QzpcDwAAAZI"]
[Thu Apr 23 17:00:32.605829 2026] [:error] [pid 59700:tid 59713] [client 20.216.153.175:22045] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aenfsJXyGZJFeAIDWtnxrAAAAUs"]
[Thu Apr 23 17:00:33.553265 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:36202] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aenfsb6vRb9j6psK2ZbTYAAAAhM"]
[Thu Apr 23 17:00:34.871078 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:29275] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aenfsoV5EysYcTLjmwj7pgAAAdc"]
[Thu Apr 23 17:00:35.821100 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:48486] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenfs26I0QqmmmLTHE3RqQAAAI0"]
[Thu Apr 23 17:00:36.617148 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:36890] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenftL6vRb9j6psK2ZbTcQAAAhE"]
[Thu Apr 23 17:00:38.332913 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:17379] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenftsOAb-3sOknsk4fZ0wAAAE8"]
[Thu Apr 23 17:00:39.250871 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:41165] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aenft76vRb9j6psK2ZbTiAAAAgM"]
[Thu Apr 23 17:00:40.655780 2026] [:error] [pid 64998:tid 65015] [client 20.216.153.175:13034] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aenfuIV5EysYcTLjmwj7rgAAAc0"]
[Thu Apr 23 17:00:42.114066 2026] [:error] [pid 59700:tid 59719] [client 20.216.153.175:48471] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aenfupXyGZJFeAIDWtnxsAAAAVE"]
[Thu Apr 23 17:00:43.256952 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:11517] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aenfu76vRb9j6psK2ZbTlwAAAgU"]
[Thu Apr 23 17:00:44.280431 2026] [:error] [pid 65000:tid 65043] [client 20.216.153.175:64675] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aenfvL6vRb9j6psK2ZbTnAAAAgo"]
[Thu Apr 23 17:00:45.605857 2026] [:error] [pid 42972:tid 43031] [client 20.216.153.175:11504] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/one.php"] [unique_id "aenfvcOAb-3sOknsk4fZ2wAAAE8"]
[Thu Apr 23 17:00:49.146343 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:00:52.170302 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:00:54.597067 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:00:56.799755 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:00:58.986036 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:01:01.359507 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:01:02.982761 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:01:05.246289 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 20.216.153.175:22855] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:01:06.385582 2026] [:error] [pid 65000:tid 65037] [client 20.216.153.175:22855] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aenf0r6vRb9j6psK2ZbTywAAAgQ"]
[Thu Apr 23 17:01:07.771998 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:25433] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aenf076vRb9j6psK2ZbTzgAAAhY"]
[Thu Apr 23 17:01:09.106810 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:22480] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aenf1b6vRb9j6psK2ZbT1gAAAgU"]
[Thu Apr 23 17:01:10.408010 2026] [:error] [pid 42972:tid 43035] [client 20.216.153.175:46666] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aenf1sOAb-3sOknsk4fZ-AAAAFM"]
[Thu Apr 23 17:01:12.282534 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:28823] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aenf2L6vRb9j6psK2ZbT4gAAAhQ"]
[Thu Apr 23 17:01:13.493118 2026] [:error] [pid 64998:tid 65022] [client 20.216.153.175:5131] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aenf2YV5EysYcTLjmwj74gAAAdQ"]
[Thu Apr 23 17:01:14.398174 2026] [:error] [pid 59700:tid 59704] [client 20.216.153.175:20250] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aenf2pXyGZJFeAIDWtnxzQAAAUI"]
[Thu Apr 23 17:01:16.286923 2026] [:error] [pid 42973:tid 43047] [client 20.216.153.175:22490] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aenf3G6I0QqmmmLTHE3R7AAAAIQ"]
[Thu Apr 23 17:01:17.345777 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:28234] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aenf3b6vRb9j6psK2ZbT8AAAAgg"]
[Thu Apr 23 17:01:19.309775 2026] [:error] [pid 64998:tid 65011] [client 20.216.153.175:18806] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aenf34V5EysYcTLjmwj77wAAAck"]
[Thu Apr 23 17:01:21.243562 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:5148] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aenf4b6vRb9j6psK2ZbUAAAAAgw"]
[Thu Apr 23 17:01:22.376395 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:23944] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aenf4r6vRb9j6psK2ZbUBQAAAgk"]
[Thu Apr 23 17:01:23.387116 2026] [:error] [pid 25635:tid 25639] [client 20.216.153.175:20247] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aenf48Rxv6UsgRGKB3IgcwAAAQA"]
[Thu Apr 23 17:01:24.229148 2026] [:error] [pid 42973:tid 43066] [client 20.216.153.175:64109] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aenf5G6I0QqmmmLTHE3R9QAAAJc"]
[Thu Apr 23 17:01:24.778739 2026] [:error] [pid 42973:tid 43049] [client 20.216.153.175:20281] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aenf5G6I0QqmmmLTHE3R9gAAAIY"]
[Thu Apr 23 17:01:25.733778 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:41801] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aenf5b6vRb9j6psK2ZbUDwAAAgk"]
[Thu Apr 23 17:01:26.426459 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:28764] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenf5oV5EysYcTLjmwj8BQAAAcc"]
[Thu Apr 23 17:01:27.572279 2026] [:error] [pid 42973:tid 43053] [client 20.216.153.175:18794] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenf526I0QqmmmLTHE3R_AAAAIo"]
[Thu Apr 23 17:01:28.342990 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:28746] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenf6L6vRb9j6psK2ZbUFwAAAgw"]
[Thu Apr 23 17:01:29.157687 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:46713] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aenf6b6vRb9j6psK2ZbUHQAAAgM"]
[Thu Apr 23 17:01:29.828618 2026] [:error] [pid 42973:tid 43064] [client 20.216.153.175:41807] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenf6W6I0QqmmmLTHE3SAQAAAJU"]
[Thu Apr 23 17:01:30.914070 2026] [:error] [pid 42973:tid 43052] [client 20.216.153.175:22508] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenf6m6I0QqmmmLTHE3SBAAAAIk"]
[Thu Apr 23 17:01:31.669060 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:18309] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenf676vRb9j6psK2ZbUKAAAAhc"]
[Thu Apr 23 17:01:32.580963 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:21286] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aenf7L6vRb9j6psK2ZbUKgAAAgw"]
[Thu Apr 23 17:01:33.442508 2026] [:error] [pid 64967:tid 64992] [client 20.216.153.175:41806] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aenf7YAV4GfOOdX8QzpcFgAAAZc"]
[Thu Apr 23 17:01:34.329591 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:23962] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aenf7r6vRb9j6psK2ZbUMAAAAgg"]
[Thu Apr 23 17:01:35.161892 2026] [:error] [pid 42973:tid 43059] [client 20.216.153.175:28825] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aenf726I0QqmmmLTHE3SDAAAAJA"]
[Thu Apr 23 17:01:36.011872 2026] [:error] [pid 64998:tid 65013] [client 20.216.153.175:64090] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aenf8IV5EysYcTLjmwj8GgAAAcs"]
[Thu Apr 23 17:01:36.818797 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:18312] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aenf8MOAb-3sOknsk4faCQAAAFQ"]
[Thu Apr 23 17:01:37.730852 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:28835] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aenf8YV5EysYcTLjmwj8IwAAAcc"]
[Thu Apr 23 17:01:38.938862 2026] [:error] [pid 64998:tid 65021] [client 20.216.153.175:22493] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aenf8oV5EysYcTLjmwj8KgAAAdM"]
[Thu Apr 23 17:01:55.527472 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:46687] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aengA4V5EysYcTLjmwj8WAAAAcA"]
[Thu Apr 23 17:01:56.472611 2026] [:error] [pid 42973:tid 43057] [client 20.216.153.175:28828] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aengBG6I0QqmmmLTHE3SIAAAAI4"]
[Thu Apr 23 17:01:57.676079 2026] [:error] [pid 46953:tid 46974] [client 20.216.153.175:28233] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aengBUnlpdHh-P6wKboNswAAAlI"]
[Thu Apr 23 17:01:58.397317 2026] [:error] [pid 65000:tid 65039] [client 20.216.153.175:64098] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aengBr6vRb9j6psK2ZbUYAAAAgY"]
[Thu Apr 23 17:01:59.039243 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:22476] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aengB76vRb9j6psK2ZbUYQAAAgU"]
[Thu Apr 23 17:01:59.811040 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:22470] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aengB76vRb9j6psK2ZbUZgAAAgc"]
[Thu Apr 23 17:02:00.513728 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:22500] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aengCIV5EysYcTLjmwj8XgAAAcU"]
[Thu Apr 23 17:02:01.213597 2026] [:error] [pid 64998:tid 65010] [client 20.216.153.175:21304] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aengCYV5EysYcTLjmwj8YAAAAcg"]
[Thu Apr 23 17:02:01.840749 2026] [:error] [pid 46953:tid 46965] [client 20.216.153.175:21248] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xme.php"] [unique_id "aengCUnlpdHh-P6wKboNwwAAAkk"]
[Thu Apr 23 17:02:02.512068 2026] [:error] [pid 42971:tid 42994] [client 20.216.153.175:46679] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xme.php"] [unique_id "aengCjEP2_5RswrH8bEPTgAAAAg"]
[Thu Apr 23 17:02:07.334145 2026] [proxy_fcgi:error] [pid 64998:tid 65015] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:10.331327 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:13.646874 2026] [proxy_fcgi:error] [pid 64998:tid 65004] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:15.874758 2026] [proxy_fcgi:error] [pid 64998:tid 65017] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:18.041924 2026] [proxy_fcgi:error] [pid 64998:tid 65008] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:20.342883 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:22.558093 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:24.084397 2026] [proxy_fcgi:error] [pid 64998:tid 65023] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:26.289642 2026] [proxy_fcgi:error] [pid 64998:tid 65026] [client 20.216.153.175:14573] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:02:26.551456 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:14573] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengIoV5EysYcTLjmwj8ogAAAdI"]
[Thu Apr 23 17:02:27.175358 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:5174] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengI4V5EysYcTLjmwj8pAAAAcU"]
[Thu Apr 23 17:02:28.001496 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:28859] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengJMOAb-3sOknsk4faNQAAAEA"]
[Thu Apr 23 17:02:28.626801 2026] [:error] [pid 65000:tid 65037] [client 20.216.153.175:46704] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengJL6vRb9j6psK2ZbU-gAAAgQ"]
[Thu Apr 23 17:02:29.327108 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:46088] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aengJb6vRb9j6psK2ZbU_AAAAhQ"]
[Thu Apr 23 17:02:30.101153 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:33025] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aengJr6vRb9j6psK2ZbVAwAAAgg"]
[Thu Apr 23 17:02:30.865020 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:28845] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aengJsOAb-3sOknsk4faQgAAAEA"]
[Thu Apr 23 17:02:31.536936 2026] [:error] [pid 59700:tid 59706] [client 20.216.153.175:64119] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aengJ5XyGZJFeAIDWtnyFAAAAUQ"]
[Thu Apr 23 17:02:32.277274 2026] [:error] [pid 42973:tid 43055] [client 20.216.153.175:37189] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aengKG6I0QqmmmLTHE3SUAAAAIw"]
[Thu Apr 23 17:02:33.112346 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:25426] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aengKb6vRb9j6psK2ZbVEAAAAhE"]
[Thu Apr 23 17:02:33.722987 2026] [:error] [pid 46953:tid 46969] [client 20.216.153.175:60034] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aengKUnlpdHh-P6wKboN8AAAAk0"]
[Thu Apr 23 17:02:34.402537 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:20254] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aengKr6vRb9j6psK2ZbVFgAAAgU"]
[Thu Apr 23 17:02:35.113173 2026] [:error] [pid 65000:tid 65047] [client 20.216.153.175:20243] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aengK76vRb9j6psK2ZbVHgAAAg4"]
[Thu Apr 23 17:02:35.798346 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:25440] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aengK76vRb9j6psK2ZbVIgAAAhM"]
[Thu Apr 23 17:02:36.477891 2026] [:error] [pid 64998:tid 65013] [client 20.216.153.175:19746] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aengLIV5EysYcTLjmwj8uAAAAcs"]
[Thu Apr 23 17:02:37.224895 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:18306] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aengLb6vRb9j6psK2ZbVKQAAAgk"]
[Thu Apr 23 17:02:37.805922 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:23983] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aengLcOAb-3sOknsk4faRAAAAFI"]
[Thu Apr 23 17:02:38.565954 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:25441] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aengLr6vRb9j6psK2ZbVLAAAAhM"]
[Thu Apr 23 17:02:40.807070 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:20228] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aengML6vRb9j6psK2ZbVNwAAAhE"]
[Thu Apr 23 17:02:41.627580 2026] [:error] [pid 42973:tid 43045] [client 20.216.153.175:19309] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aengMW6I0QqmmmLTHE3SXQAAAII"]
[Thu Apr 23 17:02:42.487928 2026] [:error] [pid 42973:tid 43062] [client 20.216.153.175:23973] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ewp.php"] [unique_id "aengMm6I0QqmmmLTHE3SYAAAAJM"]
[Thu Apr 23 17:02:43.667681 2026] [:error] [pid 42971:tid 42999] [client 20.216.153.175:28277] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ewp.php"] [unique_id "aengMzEP2_5RswrH8bEPVQAAAA0"]
[Thu Apr 23 17:02:44.713054 2026] [:error] [pid 42973:tid 43064] [client 20.216.153.175:33049] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ewp.php"] [unique_id "aengNG6I0QqmmmLTHE3SYgAAAJU"]
[Thu Apr 23 17:02:45.528335 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:19741] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ewp.php"] [unique_id "aengNcOAb-3sOknsk4faUAAAAEQ"]
[Thu Apr 23 17:02:46.847102 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:28860] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kikikoko.php"] [unique_id "aengNm6I0QqmmmLTHE3SZQAAAJg"]
[Thu Apr 23 17:02:47.833035 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:64104] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kikikoko.php"] [unique_id "aengN8OAb-3sOknsk4faXgAAAFc"]
[Thu Apr 23 17:02:49.878155 2026] [:error] [pid 64998:tid 65019] [client 20.216.153.175:6118] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kikikoko.php"] [unique_id "aengOYV5EysYcTLjmwj8wwAAAdE"]
[Thu Apr 23 17:02:50.792040 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:32315] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kikikoko.php"] [unique_id "aengOm6I0QqmmmLTHE3SZgAAAIE"]
[Thu Apr 23 17:02:51.593060 2026] [:error] [pid 42973:tid 43049] [client 20.216.153.175:14574] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengO26I0QqmmmLTHE3SaQAAAIY"]
[Thu Apr 23 17:02:52.772040 2026] [:error] [pid 64998:tid 65020] [client 20.216.153.175:13508] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengPIV5EysYcTLjmwj8ygAAAdI"]
[Thu Apr 23 17:02:53.945434 2026] [:error] [pid 42971:tid 43006] [client 20.216.153.175:60561] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengPTEP2_5RswrH8bEPYAAAABQ"]
[Thu Apr 23 17:02:55.241705 2026] [:error] [pid 64998:tid 65023] [client 20.216.153.175:60043] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aengP4V5EysYcTLjmwj8zAAAAdU"]
[Thu Apr 23 17:02:56.201639 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:61044] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aengQIV5EysYcTLjmwj8zgAAAcE"]
[Thu Apr 23 17:02:57.053482 2026] [:error] [pid 64998:tid 65013] [client 20.216.153.175:36633] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aengQYV5EysYcTLjmwj80wAAAcs"]
[Thu Apr 23 17:02:57.750196 2026] [:error] [pid 64967:tid 64980] [client 20.216.153.175:61026] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aengQYAV4GfOOdX8QzpcMQAAAYs"]
[Thu Apr 23 17:02:58.481998 2026] [:error] [pid 46953:tid 46958] [client 20.216.153.175:61006] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "aengQknlpdHh-P6wKboOAwAAAkI"]
[Thu Apr 23 17:02:59.785645 2026] [:error] [pid 64967:tid 64978] [client 20.216.153.175:36230] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aengQ4AV4GfOOdX8QzpcOQAAAYk"]
[Thu Apr 23 17:03:00.949570 2026] [:error] [pid 46953:tid 46970] [client 20.216.153.175:11504] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aengREnlpdHh-P6wKboOBwAAAk4"]
[Thu Apr 23 17:03:02.230128 2026] [:error] [pid 64967:tid 64984] [client 20.216.153.175:48512] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aengRoAV4GfOOdX8QzpcPQAAAY8"]
[Thu Apr 23 17:03:02.940999 2026] [:error] [pid 59700:tid 59702] [client 20.216.153.175:61028] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lupo.php"] [unique_id "aengRpXyGZJFeAIDWtnyHQAAAUA"]
[Thu Apr 23 17:03:03.810513 2026] [:error] [pid 59700:tid 59706] [client 20.216.153.175:64689] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "aengR5XyGZJFeAIDWtnyHwAAAUQ"]
[Thu Apr 23 17:03:04.402762 2026] [:error] [pid 59700:tid 59707] [client 20.216.153.175:51855] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "aengSJXyGZJFeAIDWtnyIQAAAUU"]
[Thu Apr 23 17:03:05.172365 2026] [:error] [pid 59700:tid 59714] [client 20.216.153.175:29297] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "aengSZXyGZJFeAIDWtnyJAAAAUw"]
[Thu Apr 23 17:03:06.064013 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:17377] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/awa.php"] [unique_id "aengSm6I0QqmmmLTHE3SkAAAAJQ"]
[Thu Apr 23 17:03:06.744063 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:30317] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "aengSm6I0QqmmmLTHE3SkQAAAIc"]
[Thu Apr 23 17:03:07.395006 2026] [:error] [pid 59700:tid 59719] [client 20.216.153.175:12318] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "aengS5XyGZJFeAIDWtnyKQAAAVE"]
[Thu Apr 23 17:03:09.422600 2026] [:error] [pid 46953:tid 46975] [client 20.216.153.175:21337] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "aengTUnlpdHh-P6wKboODQAAAlM"]
[Thu Apr 23 17:03:11.084596 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:51348] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/popo.php"] [unique_id "aengT8OAb-3sOknsk4fagAAAAEk"]
[Thu Apr 23 17:03:12.161580 2026] [:error] [pid 59700:tid 59717] [client 20.216.153.175:51339] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aengUJXyGZJFeAIDWtnyOwAAAU8"]
[Thu Apr 23 17:03:13.242750 2026] [:error] [pid 46953:tid 46976] [client 20.216.153.175:14525] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aengUUnlpdHh-P6wKboOEwAAAlQ"]
[Thu Apr 23 17:03:14.370044 2026] [:error] [pid 46953:tid 46958] [client 20.216.153.175:50847] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aengUknlpdHh-P6wKboOHAAAAkI"]
[Thu Apr 23 17:03:15.125896 2026] [:error] [pid 59700:tid 59710] [client 20.216.153.175:50830] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/13.php"] [unique_id "aengU5XyGZJFeAIDWtnyPQAAAUg"]
[Thu Apr 23 17:03:16.288446 2026] [:error] [pid 46953:tid 46976] [client 20.216.153.175:63564] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aengVEnlpdHh-P6wKboOJgAAAlQ"]
[Thu Apr 23 17:03:17.028338 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:5593] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aengVW6I0QqmmmLTHE3SrgAAAI0"]
[Thu Apr 23 17:03:18.517903 2026] [:error] [pid 65000:tid 65039] [client 20.216.153.175:27330] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aengVr6vRb9j6psK2ZbVUgAAAgY"]
[Thu Apr 23 17:03:20.526762 2026] [:error] [pid 46953:tid 46971] [client 20.216.153.175:27328] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "aengWEnlpdHh-P6wKboOLAAAAk8"]
[Thu Apr 23 17:03:21.911868 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:39382] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "aengWb6vRb9j6psK2ZbVWQAAAgc"]
[Thu Apr 23 17:03:23.390744 2026] [:error] [pid 43083:tid 43094] [client 20.216.153.175:18710] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "aengWzC5hrvNXosL83JXwwAAAMk"]
[Thu Apr 23 17:03:24.675291 2026] [:error] [pid 43083:tid 43086] [client 20.216.153.175:57171] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/p.php"] [unique_id "aengXDC5hrvNXosL83JXxAAAAME"]
[Thu Apr 23 17:03:29.018624 2026] [proxy_fcgi:error] [pid 43083:tid 43100] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:31.436658 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:33.823945 2026] [proxy_fcgi:error] [pid 43083:tid 43088] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:36.020743 2026] [proxy_fcgi:error] [pid 43083:tid 43105] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:37.577822 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:39.769215 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:41.934553 2026] [proxy_fcgi:error] [pid 43083:tid 43107] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:44.111018 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:46.696875 2026] [proxy_fcgi:error] [pid 43083:tid 43086] [client 20.216.153.175:57153] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:03:46.969898 2026] [:error] [pid 43083:tid 43099] [client 20.216.153.175:57153] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aengcjC5hrvNXosL83JX5gAAAM4"]
[Thu Apr 23 17:03:49.024609 2026] [:error] [pid 64998:tid 65014] [client 20.216.153.175:15421] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aengdYV5EysYcTLjmwj9AAAAAcw"]
[Thu Apr 23 17:03:53.427174 2026] [:error] [pid 42973:tid 43054] [client 20.216.153.175:5661] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aengeW6I0QqmmmLTHE3SvgAAAIs"]
[Thu Apr 23 17:03:55.720427 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:19232] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aenge8OAb-3sOknsk4fayQAAAEs"]
[Thu Apr 23 17:03:56.601389 2026] [:error] [pid 25635:tid 25643] [client 20.216.153.175:34361] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aengfMRxv6UsgRGKB3IgnQAAAQQ"]
[Thu Apr 23 17:03:57.693667 2026] [:error] [pid 64967:tid 64990] [client 20.216.153.175:5687] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aengfYAV4GfOOdX8QzpcRwAAAZU"]
[Thu Apr 23 17:03:58.487102 2026] [:error] [pid 43083:tid 43108] [client 20.216.153.175:40006] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aengfjC5hrvNXosL83JX8AAAANc"]
[Thu Apr 23 17:04:04.239096 2026] [:error] [pid 25635:tid 25657] [client 20.216.153.175:46135] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aenghMRxv6UsgRGKB3IgnwAAARI"]
[Thu Apr 23 17:04:06.032178 2026] [:error] [pid 42971:tid 42988] [client 20.216.153.175:27388] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aenghjEP2_5RswrH8bEPewAAAAI"]
[Thu Apr 23 17:04:07.549718 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:53183] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aengh26I0QqmmmLTHE3SygAAAJQ"]
[Thu Apr 23 17:04:08.874329 2026] [:error] [pid 42971:tid 43005] [client 20.216.153.175:15483] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aengiDEP2_5RswrH8bEPfgAAABM"]
[Thu Apr 23 17:04:10.888683 2026] [:error] [pid 59700:tid 59712] [client 20.216.153.175:41234] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aengipXyGZJFeAIDWtnyVwAAAUo"]
[Thu Apr 23 17:04:12.518898 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:24652] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aengjG6I0QqmmmLTHE3SzwAAAIg"]
[Thu Apr 23 17:04:14.506956 2026] [:error] [pid 64998:tid 65005] [client 20.216.153.175:40057] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aengjoV5EysYcTLjmwj9EQAAAcM"]
[Thu Apr 23 17:04:15.289743 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:20313] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aengj8OAb-3sOknsk4fa9AAAAFU"]
[Thu Apr 23 17:04:16.265196 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:23875] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aengkL6vRb9j6psK2ZbVqgAAAhg"]
[Thu Apr 23 17:04:17.186144 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:20290] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aengkb6vRb9j6psK2ZbVrgAAAhY"]
[Thu Apr 23 17:04:17.891108 2026] [:error] [pid 59700:tid 59703] [client 20.216.153.175:35117] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aengkZXyGZJFeAIDWtnyYAAAAUE"]
[Thu Apr 23 17:04:18.615380 2026] [:error] [pid 25635:tid 25660] [client 20.216.153.175:5651] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aengksRxv6UsgRGKB3IgowAAARU"]
[Thu Apr 23 17:04:20.748857 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:35484] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aenglIV5EysYcTLjmwj9HwAAAcc"]
[Thu Apr 23 17:04:25.003004 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:5541] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aengmb6vRb9j6psK2ZbVuwAAAgk"]
[Thu Apr 23 17:04:27.463728 2026] [:error] [pid 43083:tid 43100] [client 20.216.153.175:35465] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aengmzC5hrvNXosL83JX9QAAAM8"]
[Thu Apr 23 17:04:28.942763 2026] [:error] [pid 42972:tid 43034] [client 20.216.153.175:40051] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aengnMOAb-3sOknsk4fbIAAAAFI"]
[Thu Apr 23 17:04:30.017408 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:33906] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aengnsOAb-3sOknsk4fbJgAAAFU"]
[Thu Apr 23 17:04:32.361525 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:37251] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aengoL6vRb9j6psK2ZbVyAAAAgU"]
[Thu Apr 23 17:04:34.800143 2026] [:error] [pid 25635:tid 25659] [client 20.216.153.175:35513] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aengosRxv6UsgRGKB3IgqQAAARQ"]
[Thu Apr 23 17:04:39.244309 2026] [:error] [pid 65000:tid 65030] [client 20.216.153.175:44440] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aengp76vRb9j6psK2ZbV2gAAAgE"]
[Thu Apr 23 17:04:40.391611 2026] [:error] [pid 42973:tid 43048] [client 20.216.153.175:5421] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aengqG6I0QqmmmLTHE3S-wAAAIU"]
[Thu Apr 23 17:04:41.659077 2026] [:error] [pid 42971:tid 42997] [client 20.216.153.175:40023] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/9.php"] [unique_id "aengqTEP2_5RswrH8bEPhwAAAAs"]
[Thu Apr 23 17:04:43.671617 2026] [:error] [pid 43083:tid 43090] [client 20.216.153.175:30886] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/9.php"] [unique_id "aengqzC5hrvNXosL83JX-AAAAMU"]
[Thu Apr 23 17:04:46.811573 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:04:49.869577 2026] [proxy_fcgi:error] [pid 65000:tid 65041] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:04:52.210366 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:04:54.757720 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:04:56.969814 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:04:59.087938 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:05:02.033045 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:05:03.553431 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 20.216.153.175:5700] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:05:03.787987 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:5700] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aengv76vRb9j6psK2ZbWZAAAAgw"]
[Thu Apr 23 17:05:05.587599 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:17289] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aengwb6vRb9j6psK2ZbWaQAAAhY"]
[Thu Apr 23 17:05:11.646963 2026] [:error] [pid 59700:tid 59716] [client 20.216.153.175:20743] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aengx5XyGZJFeAIDWtnymwAAAU4"]
[Thu Apr 23 17:05:14.197133 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:30371] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aengyr6vRb9j6psK2ZbWjgAAAg0"]
[Thu Apr 23 17:05:16.793439 2026] [:error] [pid 25635:tid 25649] [client 20.216.153.175:38390] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aengzMRxv6UsgRGKB3IgtwAAAQo"]
[Thu Apr 23 17:05:17.956493 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:30381] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aengzcOAb-3sOknsk4fbdwAAAEU"]
[Thu Apr 23 17:05:19.145686 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:5307] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aengz26I0QqmmmLTHE3TNgAAAIA"]
[Thu Apr 23 17:05:19.929037 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:36607] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aengz76vRb9j6psK2ZbWqQAAAgw"]
[Thu Apr 23 17:05:21.482206 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:21680] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeng0b6vRb9j6psK2ZbWswAAAgc"]
[Thu Apr 23 17:05:22.316447 2026] [:error] [pid 46953:tid 46969] [client 20.216.153.175:38399] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeng0knlpdHh-P6wKboOpgAAAk0"]
[Thu Apr 23 17:05:23.304524 2026] [:error] [pid 65000:tid 65043] [client 20.216.153.175:19256] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeng076vRb9j6psK2ZbWuQAAAgo"]
[Thu Apr 23 17:05:24.960213 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:19206] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeng1L6vRb9j6psK2ZbWwgAAAgw"]
[Thu Apr 23 17:05:27.367201 2026] [:error] [pid 64998:tid 65004] [client 20.216.153.175:20856] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeng14V5EysYcTLjmwj9pAAAAcI"]
[Thu Apr 23 17:05:29.453889 2026] [:error] [pid 42972:tid 43021] [client 20.216.153.175:24382] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeng2cOAb-3sOknsk4fblAAAAEU"]
[Thu Apr 23 17:05:32.017281 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:48021] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeng3MOAb-3sOknsk4fbnQAAAE4"]
[Thu Apr 23 17:05:34.063415 2026] [:error] [pid 46953:tid 46970] [client 20.216.153.175:25500] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeng3knlpdHh-P6wKboOrAAAAk4"]
[Thu Apr 23 17:05:36.530860 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:15973] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeng4IV5EysYcTLjmwj9zwAAAcA"]
[Thu Apr 23 17:05:38.599767 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:24377] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeng4oV5EysYcTLjmwj92wAAAdc"]
[Thu Apr 23 17:05:40.176803 2026] [:error] [pid 43083:tid 43088] [client 20.216.153.175:63615] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeng5DC5hrvNXosL83JYDgAAAMM"]
[Thu Apr 23 17:05:41.057357 2026] [:error] [pid 64998:tid 65003] [client 20.216.153.175:19237] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeng5YV5EysYcTLjmwj95gAAAcE"]
[Thu Apr 23 17:05:42.404734 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:24330] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeng5oV5EysYcTLjmwj96wAAAdg"]
[Thu Apr 23 17:05:44.139517 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:38354] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeng6L6vRb9j6psK2ZbW-AAAAhg"]
[Thu Apr 23 17:05:45.265492 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:15050] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeng6W6I0QqmmmLTHE3TRwAAAJI"]
[Thu Apr 23 17:05:46.760731 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:5658] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeng6oV5EysYcTLjmwj99gAAAco"]
[Thu Apr 23 17:05:48.613027 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:31733] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeng7MOAb-3sOknsk4fbsQAAAFc"]
[Thu Apr 23 17:05:51.137150 2026] [:error] [pid 59700:tid 59704] [client 20.216.153.175:63595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeng75XyGZJFeAIDWtny4wAAAUI"]
[Thu Apr 23 17:05:51.915246 2026] [:error] [pid 59700:tid 59702] [client 20.216.153.175:15941] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeng75XyGZJFeAIDWtny6AAAAUA"]
[Thu Apr 23 17:05:52.971082 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:29250] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeng8G6I0QqmmmLTHE3TUQAAAIc"]
[Thu Apr 23 17:05:53.759858 2026] [:error] [pid 42972:tid 43039] [client 20.216.153.175:25495] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeng8cOAb-3sOknsk4fbxwAAAFc"]
[Thu Apr 23 17:05:54.830440 2026] [:error] [pid 65000:tid 65047] [client 20.216.153.175:30348] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeng8r6vRb9j6psK2ZbXGQAAAg4"]
[Thu Apr 23 17:05:56.848801 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:34311] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeng9IV5EysYcTLjmwj-EAAAAdg"]
[Thu Apr 23 17:05:57.616131 2026] [:error] [pid 64998:tid 65012] [client 20.216.153.175:5541] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeng9YV5EysYcTLjmwj-EgAAAco"]
[Thu Apr 23 17:05:58.858596 2026] [:error] [pid 64998:tid 65017] [client 20.216.153.175:36837] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "aeng9oV5EysYcTLjmwj-GAAAAc8"]
[Thu Apr 23 17:06:05.031908 2026] [proxy_fcgi:error] [pid 59700:tid 59702] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:08.413695 2026] [proxy_fcgi:error] [pid 59700:tid 59726] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:11.006896 2026] [proxy_fcgi:error] [pid 59700:tid 59720] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:13.492122 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:16.024301 2026] [proxy_fcgi:error] [pid 59700:tid 59714] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:18.536085 2026] [proxy_fcgi:error] [pid 59700:tid 59715] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:20.936588 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:22.555540 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:25.131095 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:28.110427 2026] [proxy_fcgi:error] [pid 59700:tid 59709] [client 20.216.153.175:29311] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:06:28.461482 2026] [:error] [pid 59700:tid 59703] [client 20.216.153.175:29311] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aenhFJXyGZJFeAIDWtnzEwAAAUE"]
[Thu Apr 23 17:06:30.195128 2026] [:error] [pid 65000:tid 65055] [client 20.216.153.175:64549] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aenhFr6vRb9j6psK2ZbXdQAAAhY"]
[Thu Apr 23 17:06:31.604871 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:17802] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aenhF8OAb-3sOknsk4fcJwAAAEQ"]
[Thu Apr 23 17:06:33.509932 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:36833] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aenhGb6vRb9j6psK2ZbXfwAAAhM"]
[Thu Apr 23 17:06:36.706762 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:13464] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aenhHIV5EysYcTLjmwj_BQAAAdY"]
[Thu Apr 23 17:06:37.972853 2026] [:error] [pid 59700:tid 59713] [client 20.216.153.175:34244] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aenhHZXyGZJFeAIDWtnzFAAAAUs"]
[Thu Apr 23 17:06:40.288865 2026] [:error] [pid 42973:tid 43060] [client 20.216.153.175:19778] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aenhIG6I0QqmmmLTHE3ThAAAAJE"]
[Thu Apr 23 17:06:41.108098 2026] [:error] [pid 64998:tid 65018] [client 20.216.153.175:19833] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aenhIYV5EysYcTLjmwj_FwAAAdA"]
[Thu Apr 23 17:06:42.904194 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:29285] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aenhIm6I0QqmmmLTHE3TiQAAAJY"]
[Thu Apr 23 17:06:46.353972 2026] [:error] [pid 42973:tid 43064] [client 20.216.153.175:14466] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aenhJm6I0QqmmmLTHE3TjwAAAJU"]
[Thu Apr 23 17:06:48.565323 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:64529] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aenhKL6vRb9j6psK2ZbXogAAAgI"]
[Thu Apr 23 17:06:49.568823 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:33942] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aenhKcOAb-3sOknsk4fcQQAAAE0"]
[Thu Apr 23 17:06:51.432405 2026] [:error] [pid 59700:tid 59725] [client 20.216.153.175:45555] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aenhK5XyGZJFeAIDWtnzHAAAAVc"]
[Thu Apr 23 17:06:52.550541 2026] [:error] [pid 65000:tid 65052] [client 20.216.153.175:31747] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aenhLL6vRb9j6psK2ZbXtQAAAhM"]
[Thu Apr 23 17:06:53.472181 2026] [:error] [pid 65000:tid 65050] [client 20.216.153.175:34242] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aenhLb6vRb9j6psK2ZbXvAAAAhE"]
[Thu Apr 23 17:06:54.695062 2026] [:error] [pid 65000:tid 65030] [client 20.216.153.175:34259] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aenhLr6vRb9j6psK2ZbXwQAAAgE"]
[Thu Apr 23 17:06:56.233114 2026] [:error] [pid 65000:tid 65039] [client 20.216.153.175:18753] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aenhML6vRb9j6psK2ZbXzwAAAgY"]
[Thu Apr 23 17:06:59.598051 2026] [:error] [pid 65000:tid 65057] [client 20.216.153.175:14522] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aenhM76vRb9j6psK2ZbX5AAAAhg"]
[Thu Apr 23 17:07:01.302374 2026] [:error] [pid 64967:tid 64981] [client 20.216.153.175:64566] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aenhNYAV4GfOOdX8QzpcbgAAAYw"]
[Thu Apr 23 17:07:04.678913 2026] [:error] [pid 64967:tid 64970] [client 20.216.153.175:34265] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aenhOIAV4GfOOdX8QzpcbwAAAYE"]
[Thu Apr 23 17:07:06.036615 2026] [:error] [pid 59700:tid 59716] [client 20.216.153.175:46058] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aenhOpXyGZJFeAIDWtnzIQAAAU4"]
[Thu Apr 23 17:07:09.320537 2026] [:error] [pid 42972:tid 43032] [client 20.216.153.175:28753] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aenhPcOAb-3sOknsk4fcUQAAAFA"]
[Thu Apr 23 17:07:10.241891 2026] [:error] [pid 64998:tid 65009] [client 20.216.153.175:61082] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aenhPoV5EysYcTLjmwj_OAAAAcc"]
[Thu Apr 23 17:07:11.286370 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:6090] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aenhP4V5EysYcTLjmwj_OwAAAc4"]
[Thu Apr 23 17:07:13.312915 2026] [:error] [pid 64998:tid 65007] [client 20.216.153.175:51893] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aenhQYV5EysYcTLjmwj_PgAAAcU"]
[Thu Apr 23 17:07:14.694289 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:48467] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aenhQsOAb-3sOknsk4fcVgAAAFQ"]
[Thu Apr 23 17:07:15.511798 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:41207] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aenhQ8OAb-3sOknsk4fcWAAAAEM"]
[Thu Apr 23 17:07:16.570856 2026] [:error] [pid 46953:tid 46956] [client 20.216.153.175:53076] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aenhREnlpdHh-P6wKboO9QAAAkA"]
[Thu Apr 23 17:07:17.656086 2026] [:error] [pid 64967:tid 64981] [client 20.216.153.175:23583] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenhRYAV4GfOOdX8QzpceQAAAYw"]
[Thu Apr 23 17:07:18.633698 2026] [:error] [pid 64998:tid 65008] [client 20.216.153.175:21323] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenhRoV5EysYcTLjmwj_TAAAAcY"]
[Thu Apr 23 17:07:19.866758 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:64499] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenhR76vRb9j6psK2ZbX-AAAAhc"]
[Thu Apr 23 17:07:21.148732 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:45005] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenhScOAb-3sOknsk4fcYgAAAFU"]
[Thu Apr 23 17:07:22.348248 2026] [:error] [pid 42973:tid 43044] [client 20.216.153.175:5877] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenhSm6I0QqmmmLTHE3TtgAAAIE"]
[Thu Apr 23 17:07:23.221910 2026] [:error] [pid 42973:tid 43043] [client 20.216.153.175:45590] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenhS26I0QqmmmLTHE3TugAAAIA"]
[Thu Apr 23 17:07:25.221917 2026] [:error] [pid 46953:tid 46962] [client 20.216.153.175:41888] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aenhTUnlpdHh-P6wKboO_AAAAkY"]
[Thu Apr 23 17:07:28.666796 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:31.636762 2026] [proxy_fcgi:error] [pid 65000:tid 65049] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:34.623199 2026] [proxy_fcgi:error] [pid 65000:tid 65054] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:36.116672 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:38.339250 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:41.159657 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:43.433990 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:45.652561 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:47.768661 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 20.216.153.175:61020] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:07:48.074498 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:61020] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aenhZL6vRb9j6psK2ZbYMAAAAg0"]
[Thu Apr 23 17:07:48.947444 2026] [:error] [pid 59700:tid 59709] [client 20.216.153.175:23946] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aenhZJXyGZJFeAIDWtnzQAAAAUc"]
[Thu Apr 23 17:07:49.622006 2026] [:error] [pid 42972:tid 43023] [client 20.216.153.175:35778] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aenhZcOAb-3sOknsk4fcegAAAEc"]
[Thu Apr 23 17:07:51.219211 2026] [:error] [pid 42972:tid 43025] [client 20.216.153.175:23983] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aenhZ8OAb-3sOknsk4fcgAAAAEk"]
[Thu Apr 23 17:08:19.554023 2026] [:error] [pid 65000:tid 65041] [client 20.216.153.175:27347] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhg76vRb9j6psK2ZbYeQAAAgg"]
[Thu Apr 23 17:08:20.560349 2026] [:error] [pid 65000:tid 65029] [client 20.216.153.175:25129] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhhL6vRb9j6psK2ZbYfAAAAgA"]
[Thu Apr 23 17:08:21.985267 2026] [:error] [pid 65000:tid 65047] [client 20.216.153.175:32192] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhhb6vRb9j6psK2ZbYhAAAAg4"]
[Thu Apr 23 17:08:23.200302 2026] [:error] [pid 59700:tid 59710] [client 20.216.153.175:50867] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhh5XyGZJFeAIDWtnzXQAAAUg"]
[Thu Apr 23 17:08:24.312841 2026] [:error] [pid 46953:tid 46974] [client 20.216.153.175:50822] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aenhiEnlpdHh-P6wKboPGgAAAlI"]
[Thu Apr 23 17:08:26.109643 2026] [:error] [pid 46953:tid 46965] [client 20.216.153.175:46106] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aenhiknlpdHh-P6wKboPHAAAAkk"]
[Thu Apr 23 17:08:29.045006 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:15436] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aenhjb6vRb9j6psK2ZbYmgAAAgU"]
[Thu Apr 23 17:08:30.043141 2026] [:error] [pid 42973:tid 43061] [client 20.216.153.175:32301] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aenhjm6I0QqmmmLTHE3UBQAAAJI"]
[Thu Apr 23 17:08:31.287598 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:41252] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aenhj76vRb9j6psK2ZbYoQAAAgc"]
[Thu Apr 23 17:08:32.396815 2026] [:error] [pid 64998:tid 65023] [client 20.216.153.175:57955] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aenhkIV5EysYcTLjmwj_nAAAAdU"]
[Thu Apr 23 17:08:33.679626 2026] [:error] [pid 42972:tid 43037] [client 20.216.153.175:13952] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aenhkcOAb-3sOknsk4fc5QAAAFU"]
[Thu Apr 23 17:08:35.853879 2026] [:error] [pid 46953:tid 46964] [client 20.216.153.175:23883] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aenhk0nlpdHh-P6wKboPLAAAAkg"]
[Thu Apr 23 17:08:36.945676 2026] [:error] [pid 42973:tid 43056] [client 20.216.153.175:60507] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhlG6I0QqmmmLTHE3UCAAAAI0"]
[Thu Apr 23 17:08:37.828269 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:18724] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhlW6I0QqmmmLTHE3UCgAAAJQ"]
[Thu Apr 23 17:08:38.752965 2026] [:error] [pid 43083:tid 43108] [client 20.216.153.175:28818] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhljC5hrvNXosL83JYUAAAANc"]
[Thu Apr 23 17:08:39.819592 2026] [:error] [pid 42973:tid 43050] [client 20.216.153.175:13979] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aenhl26I0QqmmmLTHE3UFAAAAIc"]
[Thu Apr 23 17:08:40.782273 2026] [:error] [pid 46953:tid 46960] [client 20.216.153.175:18711] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aenhmEnlpdHh-P6wKboPMgAAAkQ"]
[Thu Apr 23 17:08:41.961166 2026] [:error] [pid 42972:tid 43027] [client 20.216.153.175:28848] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aenhmcOAb-3sOknsk4fc8wAAAEs"]
[Thu Apr 23 17:08:43.116940 2026] [:error] [pid 46953:tid 46978] [client 20.216.153.175:35107] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aenhm0nlpdHh-P6wKboPOwAAAlU"]
[Thu Apr 23 17:08:43.999130 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:13964] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aenhm76vRb9j6psK2ZbYsAAAAgM"]
[Thu Apr 23 17:08:45.001586 2026] [:error] [pid 46953:tid 46980] [client 20.216.153.175:33916] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aenhnUnlpdHh-P6wKboPQQAAAlc"]
[Thu Apr 23 17:08:46.033966 2026] [:error] [pid 59700:tid 59725] [client 20.216.153.175:28859] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aenhnpXyGZJFeAIDWtnzgQAAAVc"]
[Thu Apr 23 17:08:48.760745 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:08:51.294152 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:08:54.754574 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:08:57.057280 2026] [proxy_fcgi:error] [pid 59700:tid 59713] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:08:59.425322 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:01.197112 2026] [proxy_fcgi:error] [pid 59700:tid 59704] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:03.440499 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:05.147545 2026] [proxy_fcgi:error] [pid 59700:tid 59710] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:08.484443 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:10.007170 2026] [proxy_fcgi:error] [pid 59700:tid 59706] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:12.239866 2026] [proxy_fcgi:error] [pid 59700:tid 59721] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:14.549991 2026] [proxy_fcgi:error] [pid 59700:tid 59705] [client 20.216.153.175:22116] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:09:14.889407 2026] [:error] [pid 59700:tid 59707] [client 20.216.153.175:22116] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aenhupXyGZJFeAIDWtnzrAAAAUU"]
[Thu Apr 23 17:09:15.794169 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:12288] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aenhu76vRb9j6psK2ZbY-AAAAhc"]
[Thu Apr 23 17:09:16.778390 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:45070] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aenhvL6vRb9j6psK2ZbY_gAAAgc"]
[Thu Apr 23 17:09:18.072104 2026] [:error] [pid 65000:tid 65045] [client 20.216.153.175:38942] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aenhvr6vRb9j6psK2ZbZAgAAAgw"]
[Thu Apr 23 17:09:18.919725 2026] [:error] [pid 64967:tid 64974] [client 20.216.153.175:64477] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/"] [unique_id "aenhvoAV4GfOOdX8QzpcpgAAAYU"]
[Thu Apr 23 17:09:20.257489 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:64485] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/"] [unique_id "aenhwL6vRb9j6psK2ZbZDAAAAgM"]
[Thu Apr 23 17:09:22.402763 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:15402] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/"] [unique_id "aenhwr6vRb9j6psK2ZbZEgAAAg0"]
[Thu Apr 23 17:09:23.728285 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:11795] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/"] [unique_id "aenhw26I0QqmmmLTHE3USgAAAJQ"]
[Thu Apr 23 17:09:24.929248 2026] [:error] [pid 64967:tid 64980] [client 20.216.153.175:32685] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aenhxIAV4GfOOdX8QzpcqAAAAYs"]
[Thu Apr 23 17:09:25.692839 2026] [:error] [pid 42972:tid 43020] [client 20.216.153.175:15399] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aenhxcOAb-3sOknsk4fdOgAAAEQ"]
[Thu Apr 23 17:09:26.694283 2026] [:error] [pid 42971:tid 42993] [client 20.216.153.175:12330] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aenhxjEP2_5RswrH8bEP4wAAAAc"]
[Thu Apr 23 17:09:27.546482 2026] [:error] [pid 42972:tid 43040] [client 20.216.153.175:32690] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "aenhx8OAb-3sOknsk4fdPAAAAFg"]
[Thu Apr 23 17:09:28.423430 2026] [:error] [pid 59700:tid 59704] [client 20.216.153.175:64465] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aenhyJXyGZJFeAIDWtnztgAAAUI"]
[Thu Apr 23 17:09:29.310787 2026] [:error] [pid 43083:tid 43109] [client 20.216.153.175:32654] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aenhyTC5hrvNXosL83JYagAAANg"]
[Thu Apr 23 17:09:30.100162 2026] [:error] [pid 65000:tid 65056] [client 20.216.153.175:37280] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aenhyr6vRb9j6psK2ZbZHgAAAhc"]
[Thu Apr 23 17:09:31.154271 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:37284] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aenhy8OAb-3sOknsk4fdPQAAAEA"]
[Thu Apr 23 17:09:32.148214 2026] [:error] [pid 42972:tid 43019] [client 20.216.153.175:24668] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aenhzMOAb-3sOknsk4fdPgAAAEM"]
[Thu Apr 23 17:09:33.289032 2026] [:error] [pid 43083:tid 43095] [client 20.216.153.175:12344] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aenhzTC5hrvNXosL83JYbgAAAMo"]
[Thu Apr 23 17:09:33.971911 2026] [:error] [pid 43083:tid 43087] [client 20.216.153.175:61074] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aenhzTC5hrvNXosL83JYcAAAAMI"]
[Thu Apr 23 17:09:34.716675 2026] [:error] [pid 65000:tid 65038] [client 20.216.153.175:58000] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aenhzr6vRb9j6psK2ZbZKQAAAgU"]
[Thu Apr 23 17:09:35.848994 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:15411] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aenhz76vRb9j6psK2ZbZLAAAAg0"]
[Thu Apr 23 17:09:36.595019 2026] [:error] [pid 65000:tid 65037] [client 20.216.153.175:5504] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aenh0L6vRb9j6psK2ZbZMgAAAgQ"]
[Thu Apr 23 17:09:37.867148 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:45092] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aenh0W6I0QqmmmLTHE3UWQAAAIg"]
[Thu Apr 23 17:09:38.991380 2026] [:error] [pid 42971:tid 42994] [client 20.216.153.175:61105] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aenh0jEP2_5RswrH8bEP7QAAAAg"]
[Thu Apr 23 17:09:39.922489 2026] [:error] [pid 64998:tid 65015] [client 20.216.153.175:45096] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenh04V5EysYcTLjmwgAFQAAAc0"]
[Thu Apr 23 17:09:41.216088 2026] [:error] [pid 64998:tid 65008] [client 20.216.153.175:55947] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenh1YV5EysYcTLjmwgAHwAAAcY"]
[Thu Apr 23 17:09:42.161446 2026] [:error] [pid 46953:tid 46978] [client 20.216.153.175:55951] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenh1knlpdHh-P6wKboPXgAAAlU"]
[Thu Apr 23 17:09:42.971818 2026] [:error] [pid 43083:tid 43088] [client 20.216.153.175:35460] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aenh1jC5hrvNXosL83JYdAAAAMM"]
[Thu Apr 23 17:09:43.860120 2026] [:error] [pid 42972:tid 43016] [client 20.216.153.175:38880] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aenh18OAb-3sOknsk4fdTAAAAEA"]
[Thu Apr 23 17:09:44.810214 2026] [:error] [pid 64998:tid 65024] [client 20.216.153.175:24666] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aenh2IV5EysYcTLjmwgAJgAAAdY"]
[Thu Apr 23 17:09:46.144787 2026] [:error] [pid 42973:tid 43067] [client 20.216.153.175:33500] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aenh2m6I0QqmmmLTHE3UcQAAAJg"]
[Thu Apr 23 17:09:48.332999 2026] [:error] [pid 64998:tid 65002] [client 20.216.153.175:45093] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aenh3IV5EysYcTLjmwgALwAAAcA"]
[Thu Apr 23 17:09:49.581678 2026] [:error] [pid 46953:tid 46958] [client 20.216.153.175:37279] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aenh3UnlpdHh-P6wKboPYgAAAkI"]
[Thu Apr 23 17:09:51.249440 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:26396] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aenh38OAb-3sOknsk4fdWwAAAEI"]
[Thu Apr 23 17:09:53.495768 2026] [:error] [pid 43083:tid 43095] [client 20.216.153.175:53570] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aenh4TC5hrvNXosL83JYgQAAAMo"]
[Thu Apr 23 17:09:54.892489 2026] [:error] [pid 42973:tid 43057] [client 20.216.153.175:22796] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aenh4m6I0QqmmmLTHE3UhwAAAI4"]
[Thu Apr 23 17:09:55.775682 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:33528] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aenh44V5EysYcTLjmwgAOQAAAcQ"]
[Thu Apr 23 17:09:56.642071 2026] [:error] [pid 64998:tid 65010] [client 20.216.153.175:33529] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aenh5IV5EysYcTLjmwgAPwAAAcg"]
[Thu Apr 23 17:09:57.810981 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:5788] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aenh5b6vRb9j6psK2ZbZPAAAAgc"]
[Thu Apr 23 17:09:58.964589 2026] [:error] [pid 64967:tid 64989] [client 20.216.153.175:61071] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aenh5oAV4GfOOdX8QzpcsQAAAZQ"]
[Thu Apr 23 17:10:00.252939 2026] [:error] [pid 25635:tid 25662] [client 20.216.153.175:5774] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aenh6MRxv6UsgRGKB3IhKAAAARc"]
[Thu Apr 23 17:10:01.424611 2026] [:error] [pid 42971:tid 43006] [client 20.216.153.175:57231] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aenh6TEP2_5RswrH8bEQAQAAABQ"]
[Thu Apr 23 17:10:02.661047 2026] [:error] [pid 64967:tid 64986] [client 20.216.153.175:20772] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aenh6oAV4GfOOdX8QzpcswAAAZE"]
[Thu Apr 23 17:10:03.756375 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:44477] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aenh676vRb9j6psK2ZbZUQAAAgI"]
[Thu Apr 23 17:10:04.518789 2026] [:error] [pid 65000:tid 65048] [client 20.216.153.175:38444] [client 20.216.153.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aenh7L6vRb9j6psK2ZbZVQAAAg8"]
[Thu Apr 23 17:10:06.220438 2026] [:error] [pid 65000:tid 65051] [client 20.216.153.175:55999] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aenh7r6vRb9j6psK2ZbZWAAAAhI"]
[Thu Apr 23 17:10:07.203201 2026] [:error] [pid 65000:tid 65031] [client 20.216.153.175:22807] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aenh776vRb9j6psK2ZbZWgAAAgI"]
[Thu Apr 23 17:10:08.958991 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:29345] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aenh8IV5EysYcTLjmwgAWQAAAc4"]
[Thu Apr 23 17:10:09.946729 2026] [:error] [pid 43083:tid 43095] [client 20.216.153.175:13023] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aenh8TC5hrvNXosL83JYiwAAAMo"]
[Thu Apr 23 17:10:10.781767 2026] [:error] [pid 59700:tid 59709] [client 20.216.153.175:13046] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aenh8pXyGZJFeAIDWtnz0QAAAUc"]
[Thu Apr 23 17:10:11.708000 2026] [:error] [pid 59700:tid 59725] [client 20.216.153.175:35423] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aenh85XyGZJFeAIDWtnz1AAAAVc"]
[Thu Apr 23 17:10:13.948643 2026] [proxy_fcgi:error] [pid 43083:tid 43092] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:16.285892 2026] [proxy_fcgi:error] [pid 43083:tid 43093] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:19.599538 2026] [proxy_fcgi:error] [pid 43083:tid 43108] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:21.916999 2026] [proxy_fcgi:error] [pid 43083:tid 43087] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:24.123938 2026] [proxy_fcgi:error] [pid 43083:tid 43106] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:26.454838 2026] [proxy_fcgi:error] [pid 43083:tid 43090] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:28.681207 2026] [proxy_fcgi:error] [pid 43083:tid 43085] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:30.848652 2026] [proxy_fcgi:error] [pid 43083:tid 43101] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:33.057617 2026] [proxy_fcgi:error] [pid 43083:tid 43099] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:34.618796 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:36.863984 2026] [proxy_fcgi:error] [pid 43083:tid 43094] [client 20.216.153.175:5787] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:10:37.189989 2026] [:error] [pid 43083:tid 43104] [client 20.216.153.175:5787] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeniDTC5hrvNXosL83JYnwAAANM"]
[Thu Apr 23 17:10:38.421229 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:5573] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeniDr6vRb9j6psK2ZbZvQAAAgc"]
[Thu Apr 23 17:10:39.208985 2026] [:error] [pid 64967:tid 64975] [client 20.216.153.175:13022] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeniD4AV4GfOOdX8QzpczAAAAYY"]
[Thu Apr 23 17:10:40.636657 2026] [:error] [pid 42973:tid 43054] [client 20.216.153.175:21689] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeniEG6I0QqmmmLTHE3UpAAAAIs"]
[Thu Apr 23 17:10:41.716061 2026] [:error] [pid 42972:tid 43029] [client 20.216.153.175:40020] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeniEcOAb-3sOknsk4fdhQAAAE0"]
[Thu Apr 23 17:10:42.638581 2026] [:error] [pid 42973:tid 43063] [client 20.216.153.175:5752] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeniEm6I0QqmmmLTHE3UpwAAAJQ"]
[Thu Apr 23 17:10:44.031664 2026] [:error] [pid 42973:tid 43051] [client 20.216.153.175:40048] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeniFG6I0QqmmmLTHE3UrwAAAIg"]
[Thu Apr 23 17:10:45.597511 2026] [:error] [pid 25635:tid 25647] [client 20.216.153.175:6042] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeniFcRxv6UsgRGKB3IhNAAAAQg"]
[Thu Apr 23 17:10:46.408678 2026] [:error] [pid 42972:tid 43036] [client 20.216.153.175:13028] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeniFsOAb-3sOknsk4fdiQAAAFQ"]
[Thu Apr 23 17:10:47.676521 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:25048] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeniF76vRb9j6psK2ZbZ1AAAAg0"]
[Thu Apr 23 17:10:49.067860 2026] [:error] [pid 64998:tid 65014] [client 20.216.153.175:20825] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeniGYV5EysYcTLjmwgAzwAAAcw"]
[Thu Apr 23 17:10:50.329902 2026] [:error] [pid 42972:tid 43018] [client 20.216.153.175:47978] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeniGsOAb-3sOknsk4fdjwAAAEI"]
[Thu Apr 23 17:10:51.688750 2026] [:error] [pid 42972:tid 43022] [client 20.216.153.175:14056] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeniG8OAb-3sOknsk4fdkgAAAEY"]
[Thu Apr 23 17:10:53.680520 2026] [:error] [pid 46953:tid 46973] [client 20.216.153.175:5286] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeniHUnlpdHh-P6wKboPjwAAAlE"]
[Thu Apr 23 17:10:55.662711 2026] [:error] [pid 65000:tid 65054] [client 20.216.153.175:36558] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeniH76vRb9j6psK2ZbZ4QAAAhU"]
[Thu Apr 23 17:10:57.782280 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:5597] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeniIb6vRb9j6psK2ZbZ5wAAAgM"]
[Thu Apr 23 17:10:59.791137 2026] [:error] [pid 64998:tid 65025] [client 20.216.153.175:39410] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeniI4V5EysYcTLjmwgA6AAAAdc"]
[Thu Apr 23 17:11:00.988509 2026] [:error] [pid 65000:tid 65037] [client 20.216.153.175:36585] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeniJL6vRb9j6psK2ZbZ-wAAAgQ"]
[Thu Apr 23 17:11:02.169680 2026] [:error] [pid 65000:tid 65040] [client 20.216.153.175:47970] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeniJr6vRb9j6psK2ZbaAQAAAgc"]
[Thu Apr 23 17:11:04.420960 2026] [:error] [pid 64998:tid 65006] [client 20.216.153.175:35049] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeniKIV5EysYcTLjmwgBAgAAAcQ"]
[Thu Apr 23 17:11:05.807915 2026] [:error] [pid 65000:tid 65029] [client 20.216.153.175:47421] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeniKb6vRb9j6psK2ZbaCwAAAgA"]
[Thu Apr 23 17:11:07.154682 2026] [:error] [pid 42971:tid 43006] [client 20.216.153.175:15058] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeniKzEP2_5RswrH8bEQHAAAABQ"]
[Thu Apr 23 17:11:08.143881 2026] [:error] [pid 46953:tid 46968] [client 20.216.153.175:38379] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeniLEnlpdHh-P6wKboPmwAAAkw"]
[Thu Apr 23 17:11:09.387279 2026] [:error] [pid 43083:tid 43091] [client 20.216.153.175:27421] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeniLTC5hrvNXosL83JYqgAAAMY"]
[Thu Apr 23 17:11:10.403593 2026] [:error] [pid 65000:tid 65053] [client 20.216.153.175:21285] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeniLr6vRb9j6psK2ZbaHAAAAhQ"]
[Thu Apr 23 17:11:11.349548 2026] [:error] [pid 64998:tid 65016] [client 20.216.153.175:19799] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeniL4V5EysYcTLjmwgBGQAAAc4"]
[Thu Apr 23 17:11:12.450332 2026] [:error] [pid 64998:tid 65004] [client 20.216.153.175:14483] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeniMIV5EysYcTLjmwgBIAAAAcI"]
[Thu Apr 23 17:11:13.768835 2026] [:error] [pid 42973:tid 43053] [client 20.216.153.175:33959] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeniMW6I0QqmmmLTHE3UvQAAAIo"]
[Thu Apr 23 17:11:14.890200 2026] [:error] [pid 65000:tid 65039] [client 20.216.153.175:6133] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeniMr6vRb9j6psK2ZbaJQAAAgY"]
[Thu Apr 23 17:11:15.938559 2026] [:error] [pid 65000:tid 65046] [client 20.216.153.175:6133] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeniM76vRb9j6psK2ZbaLAAAAg0"]
[Thu Apr 23 17:11:17.087351 2026] [:error] [pid 42971:tid 42996] [client 20.216.153.175:41814] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeniNTEP2_5RswrH8bEQIwAAAAo"]
[Thu Apr 23 17:11:18.261227 2026] [:error] [pid 59700:tid 59702] [client 20.216.153.175:18347] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeniNpXyGZJFeAIDWtn0GQAAAUA"]
[Thu Apr 23 17:11:19.948488 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:19281] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeniN76vRb9j6psK2ZbaOwAAAgM"]
[Thu Apr 23 17:11:20.986123 2026] [:error] [pid 25635:tid 25642] [client 20.216.153.175:25467] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeniOMRxv6UsgRGKB3IhPgAAAQM"]
[Thu Apr 23 17:11:21.905159 2026] [:error] [pid 59700:tid 59717] [client 20.216.153.175:51812] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeniOZXyGZJFeAIDWtn0GwAAAU8"]
[Thu Apr 23 17:11:23.282191 2026] [:error] [pid 42972:tid 43030] [client 20.216.153.175:25460] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeniO8OAb-3sOknsk4fdugAAAE4"]
[Thu Apr 23 17:11:24.899513 2026] [:error] [pid 65000:tid 65047] [client 20.216.153.175:30323] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeniPL6vRb9j6psK2ZbaRgAAAg4"]
[Thu Apr 23 17:11:25.708147 2026] [:error] [pid 64967:tid 64974] [client 20.216.153.175:48570] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeniPYAV4GfOOdX8Qzpc2gAAAYU"]
[Thu Apr 23 17:11:26.803140 2026] [:error] [pid 64998:tid 65026] [client 20.216.153.175:35858] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeniPoV5EysYcTLjmwgBSQAAAdg"]
[Thu Apr 23 17:11:28.126624 2026] [:error] [pid 65000:tid 65032] [client 20.216.153.175:35896] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeniQL6vRb9j6psK2ZbaSgAAAgM"]
[Thu Apr 23 17:11:29.017477 2026] [:error] [pid 59700:tid 59723] [client 20.216.153.175:51883] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeniQZXyGZJFeAIDWtn0JwAAAVU"]
[Thu Apr 23 17:11:29.817479 2026] [:error] [pid 43083:tid 43087] [client 20.216.153.175:36879] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeniQTC5hrvNXosL83JYrwAAAMI"]
[Thu Apr 23 17:11:30.568466 2026] [:error] [pid 65000:tid 65042] [client 20.216.153.175:51833] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeniQr6vRb9j6psK2ZbaUwAAAgk"]
[Thu Apr 23 17:11:31.448384 2026] [:error] [pid 42973:tid 43065] [client 20.216.153.175:51862] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeniQ26I0QqmmmLTHE3UwwAAAJY"]
[Thu Apr 23 17:11:32.189188 2026] [:error] [pid 42973:tid 43066] [client 20.216.153.175:22443] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxx.php"] [unique_id "aeniRG6I0QqmmmLTHE3UxgAAAJc"]
[Thu Apr 23 17:11:33.691923 2026] [:error] [pid 64998:tid 65010] [client 20.216.153.175:53099] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxx.php"] [unique_id "aeniRYV5EysYcTLjmwgBVQAAAcg"]
[Thu Apr 23 17:11:37.655421 2026] [proxy_fcgi:error] [pid 64967:tid 64973] [client 20.216.153.175:58022] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:11:40.823072 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 20.216.153.175:58022] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:11:43.239692 2026] [proxy_fcgi:error] [pid 64967:tid 64988] [client 20.216.153.175:58022] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:11:45.538204 2026] [proxy_fcgi:error] [pid 64967:tid 64970] [client 20.216.153.175:58022] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:11:47.681656 2026] [proxy_fcgi:error] [pid 64967:tid 64977] [client 20.216.153.175:58022] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Thu Apr 23 17:11:50.021782 2026] [proxy_fcgi:error] [pid 64967:tid 64983] [client 20.216.153.175:58022] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 03:34:45.368181 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:45.368286 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.614908 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.614934 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.691362 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.691390 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.454616 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.454645 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:15.447175 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:15.447202 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.521799 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.521827 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:36.850995 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:36.851021 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:38.949771 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:38.949813 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:34.177864 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:34.177895 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:36.277892 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:36.277918 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 04:44:49.227058 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:44:52.373518 2026] [proxy_fcgi:error] [pid 19101:tid 19151] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:44:54.803242 2026] [proxy_fcgi:error] [pid 19101:tid 19159] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:44:57.080574 2026] [proxy_fcgi:error] [pid 19101:tid 19156] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:44:57.350073 2026] [authz_core:error] [pid 19101:tid 19141] [client 20.251.39.123:55430] AH01630: client denied by server configuration: /home/end2endh/public_html/.sghb.php
[Fri Apr 24 04:44:59.274631 2026] [proxy_fcgi:error] [pid 19101:tid 19141] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:01.741714 2026] [proxy_fcgi:error] [pid 19101:tid 19149] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:05.397802 2026] [proxy_fcgi:error] [pid 19101:tid 19159] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:07.650650 2026] [proxy_fcgi:error] [pid 19101:tid 19138] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:09.914415 2026] [proxy_fcgi:error] [pid 19101:tid 19141] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:12.211134 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:14.500006 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 20.251.39.123:55430] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:45:14.769572 2026] [:error] [pid 19101:tid 19159] [client 20.251.39.123:55430] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE2mAHj9bEvrTgbO21KwAAAFY"]
[Fri Apr 24 04:45:15.289819 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:55448] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE2wDSgrbLEZbkqD6fLAAAAJE"]
[Fri Apr 24 04:45:15.808102 2026] [:error] [pid 52129:tid 52143] [client 20.251.39.123:8666] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE2-KCZKf8_u2LKiAjlAAAAQo"]
[Fri Apr 24 04:45:16.326157 2026] [:error] [pid 19100:tid 19123] [client 20.251.39.123:8672] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE3LF_hzQs4CqbiffxbAAAAA0"]
[Fri Apr 24 04:45:16.851053 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:8681] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE3OKCZKf8_u2LKiAjlgAAAQI"]
[Fri Apr 24 04:45:17.369179 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:55450] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE3eKCZKf8_u2LKiAjmgAAAQQ"]
[Fri Apr 24 04:45:17.894034 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:8676] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE3QDSgrbLEZbkqD6fMwAAAJc"]
[Fri Apr 24 04:45:18.413516 2026] [:error] [pid 19100:tid 19122] [client 20.251.39.123:55455] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE3rF_hzQs4CqbiffxbgAAAAw"]
[Fri Apr 24 04:45:18.934765 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:8654] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqE3jQ--M3-tsKAnhFxzgAAAMA"]
[Fri Apr 24 04:45:19.453691 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:8653] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqE32AHj9bEvrTgbO21LwAAAFQ"]
[Fri Apr 24 04:45:19.991021 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:8646] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqE3wDSgrbLEZbkqD6fOAAAAIk"]
[Fri Apr 24 04:45:20.511212 2026] [:error] [pid 19102:tid 19188] [client 20.251.39.123:8644] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqE4ADSgrbLEZbkqD6fOgAAAJg"]
[Fri Apr 24 04:45:21.029830 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:8659] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.admin.php"] [unique_id "aeqE4eKCZKf8_u2LKiAjrgAAAQ0"]
[Fri Apr 24 04:45:21.548044 2026] [:error] [pid 19101:tid 19141] [client 20.251.39.123:65506] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.admin.php"] [unique_id "aeqE4WAHj9bEvrTgbO21NAAAAEQ"]
[Fri Apr 24 04:45:22.067097 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:8668] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.admin.php"] [unique_id "aeqE4uKCZKf8_u2LKiAjtQAAARE"]
[Fri Apr 24 04:45:22.610369 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:8694] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.admin.php"] [unique_id "aeqE4jQ--M3-tsKAnhFx0QAAAMs"]
[Fri Apr 24 04:45:23.129294 2026] [:error] [pid 19101:tid 19153] [client 20.251.39.123:55460] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqE42AHj9bEvrTgbO21NgAAAFA"]
[Fri Apr 24 04:45:23.695634 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:55458] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqE4-KCZKf8_u2LKiAjwgAAAQI"]
[Fri Apr 24 04:45:24.213354 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:55427] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqE5OKCZKf8_u2LKiAjyAAAAQ0"]
[Fri Apr 24 04:45:24.741983 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:55426] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqE5OKCZKf8_u2LKiAjzQAAARc"]
[Fri Apr 24 04:45:25.260051 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:8664] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aeqE5eKCZKf8_u2LKiAj1AAAARM"]
[Fri Apr 24 04:45:25.817134 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:55461] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aeqE5eKCZKf8_u2LKiAj2QAAARg"]
[Fri Apr 24 04:45:26.336560 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:55445] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aeqE5uKCZKf8_u2LKiAj2wAAAQA"]
[Fri Apr 24 04:45:26.860999 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:55451] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vuln.php"] [unique_id "aeqE5jQ--M3-tsKAnhFx1AAAAM4"]
[Fri Apr 24 04:45:27.387706 2026] [:error] [pid 19101:tid 19151] [client 20.251.39.123:55453] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aeqE52AHj9bEvrTgbO21OAAAAE4"]
[Fri Apr 24 04:45:27.916842 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:65485] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aeqE5-KCZKf8_u2LKiAj4gAAAQk"]
[Fri Apr 24 04:45:28.455874 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:8643] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aeqE6ADSgrbLEZbkqD6fRgAAAJA"]
[Fri Apr 24 04:45:28.975208 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:8642] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-temp.php"] [unique_id "aeqE6DQ--M3-tsKAnhFx3AAAAMI"]
[Fri Apr 24 04:45:29.496112 2026] [:error] [pid 19200:tid 19232] [client 20.251.39.123:8679] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqE6TQ--M3-tsKAnhFx3wAAANg"]
[Fri Apr 24 04:45:30.015515 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:55446] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqE6jQ--M3-tsKAnhFx4gAAANU"]
[Fri Apr 24 04:45:30.535697 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:55424] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqE6jQ--M3-tsKAnhFx5QAAAMA"]
[Fri Apr 24 04:45:31.059412 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:55444] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqE6zQ--M3-tsKAnhFx6AAAAMs"]
[Fri Apr 24 04:45:31.576802 2026] [:error] [pid 19101:tid 19159] [client 20.251.39.123:65527] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqE62AHj9bEvrTgbO21QAAAAFY"]
[Fri Apr 24 04:45:32.097199 2026] [:error] [pid 19101:tid 19158] [client 20.251.39.123:55482] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqE7GAHj9bEvrTgbO21QwAAAFU"]
[Fri Apr 24 04:45:32.624025 2026] [:error] [pid 19100:tid 19132] [client 20.251.39.123:8686] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqE7LF_hzQs4CqbiffxgAAAABY"]
[Fri Apr 24 04:45:33.142592 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:65501] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqE7TQ--M3-tsKAnhFx-AAAANU"]
[Fri Apr 24 04:45:33.662754 2026] [:error] [pid 19200:tid 19224] [client 20.251.39.123:55485] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqE7TQ--M3-tsKAnhFx_AAAANA"]
[Fri Apr 24 04:45:34.185301 2026] [:error] [pid 19101:tid 19137] [client 20.251.39.123:55432] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqE7mAHj9bEvrTgbO21SgAAAEA"]
[Fri Apr 24 04:45:34.702913 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:8651] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqE7uKCZKf8_u2LKiAj-QAAAQA"]
[Fri Apr 24 04:45:35.239347 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:55475] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqE7-KCZKf8_u2LKiAj-wAAAQI"]
[Fri Apr 24 04:45:35.797843 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:55447] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeqE7wDSgrbLEZbkqD6fTgAAAIA"]
[Fri Apr 24 04:45:36.317101 2026] [:error] [pid 19200:tid 19217] [client 20.251.39.123:8680] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeqE8DQ--M3-tsKAnhFyDQAAAMk"]
[Fri Apr 24 04:45:36.854564 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:55469] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeqE8OKCZKf8_u2LKiAkAQAAAQk"]
[Fri Apr 24 04:45:37.377375 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:65519] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-bda.php"] [unique_id "aeqE8TQ--M3-tsKAnhFyFAAAANU"]
[Fri Apr 24 04:45:37.895730 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:55435] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeqE8bF_hzQs4CqbiffxiwAAABU"]
[Fri Apr 24 04:45:38.414794 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:8647] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeqE8gDSgrbLEZbkqD6fTwAAAJA"]
[Fri Apr 24 04:45:38.941359 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:55431] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeqE8jQ--M3-tsKAnhFyIQAAAMI"]
[Fri Apr 24 04:45:39.462748 2026] [:error] [pid 19100:tid 19125] [client 20.251.39.123:55473] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bhm.php"] [unique_id "aeqE87F_hzQs4CqbiffxjQAAAA8"]
[Fri Apr 24 04:45:39.983718 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:55459] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aeqE8-KCZKf8_u2LKiAkDQAAAQY"]
[Fri Apr 24 04:45:40.502044 2026] [:error] [pid 19100:tid 19126] [client 20.251.39.123:8677] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aeqE9LF_hzQs4CqbiffxkgAAABA"]
[Fri Apr 24 04:45:41.020513 2026] [:error] [pid 19101:tid 19137] [client 20.251.39.123:8675] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aeqE9WAHj9bEvrTgbO21TgAAAEA"]
[Fri Apr 24 04:45:41.538437 2026] [:error] [pid 19100:tid 19130] [client 20.251.39.123:8645] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "aeqE9bF_hzQs4CqbiffxmQAAABQ"]
[Fri Apr 24 04:45:42.054443 2026] [:error] [pid 19100:tid 19121] [client 20.251.39.123:8650] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aeqE9rF_hzQs4CqbiffxnQAAAAs"]
[Fri Apr 24 04:45:42.575292 2026] [:error] [pid 19100:tid 19129] [client 20.251.39.123:8695] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aeqE9rF_hzQs4CqbiffxoQAAABM"]
[Fri Apr 24 04:45:43.094015 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:65491] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aeqE9zQ--M3-tsKAnhFyKQAAANQ"]
[Fri Apr 24 04:45:43.612162 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:55480] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ref.php"] [unique_id "aeqE9wDSgrbLEZbkqD6fYQAAAIk"]
[Fri Apr 24 04:45:44.134692 2026] [:error] [pid 19101:tid 19149] [client 20.251.39.123:8665] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xme.php"] [unique_id "aeqE-GAHj9bEvrTgbO21VgAAAEw"]
[Fri Apr 24 04:45:44.659560 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:8671] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xme.php"] [unique_id "aeqE-DQ--M3-tsKAnhFyMAAAANU"]
[Fri Apr 24 04:45:45.177499 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:55438] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xme.php"] [unique_id "aeqE-TQ--M3-tsKAnhFyNAAAAMY"]
[Fri Apr 24 04:45:45.694522 2026] [:error] [pid 19100:tid 19116] [client 20.251.39.123:8650] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xme.php"] [unique_id "aeqE-bF_hzQs4CqbiffxrAAAAAc"]
[Fri Apr 24 04:45:46.230146 2026] [:error] [pid 19100:tid 19111] [client 20.251.39.123:8669] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminer.php"] [unique_id "aeqE-rF_hzQs4CqbiffxsAAAAAI"]
[Fri Apr 24 04:45:46.747768 2026] [:error] [pid 19102:tid 19176] [client 20.251.39.123:65499] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminer.php"] [unique_id "aeqE-gDSgrbLEZbkqD6fZgAAAIw"]
[Fri Apr 24 04:45:47.265707 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:8648] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminer.php"] [unique_id "aeqE--KCZKf8_u2LKiAkFAAAARQ"]
[Fri Apr 24 04:45:47.808169 2026] [:error] [pid 52129:tid 52143] [client 20.251.39.123:8658] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminer.php"] [unique_id "aeqE--KCZKf8_u2LKiAkFgAAAQo"]
[Fri Apr 24 04:45:48.326926 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:3397] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqE_OKCZKf8_u2LKiAkGwAAARc"]
[Fri Apr 24 04:45:48.865626 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:55483] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqE_OKCZKf8_u2LKiAkHwAAARM"]
[Fri Apr 24 04:45:49.386483 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:8684] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqE_eKCZKf8_u2LKiAkIwAAAQA"]
[Fri Apr 24 04:45:49.907733 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:55478] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqE_eKCZKf8_u2LKiAkJwAAARY"]
[Fri Apr 24 04:45:50.453931 2026] [:error] [pid 19102:tid 19168] [client 20.251.39.123:65490] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqE_gDSgrbLEZbkqD6fcgAAAIQ"]
[Fri Apr 24 04:45:50.973574 2026] [:error] [pid 19102:tid 19184] [client 20.251.39.123:3406] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqE_gDSgrbLEZbkqD6fdQAAAJQ"]
[Fri Apr 24 04:45:51.495371 2026] [:error] [pid 19100:tid 19134] [client 20.251.39.123:8683] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqE_7F_hzQs4CqbiffxuwAAABg"]
[Fri Apr 24 04:45:52.015025 2026] [:error] [pid 19100:tid 19121] [client 20.251.39.123:65521] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqFALF_hzQs4CqbiffxvwAAAAs"]
[Fri Apr 24 04:45:52.534929 2026] [:error] [pid 19100:tid 19133] [client 20.251.39.123:55429] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqFALF_hzQs4CqbiffxxAAAABc"]
[Fri Apr 24 04:45:53.053153 2026] [:error] [pid 19100:tid 19110] [client 20.251.39.123:3447] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqFAbF_hzQs4CqbiffxygAAAAE"]
[Fri Apr 24 04:45:53.570338 2026] [:error] [pid 19100:tid 19128] [client 20.251.39.123:65488] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqFAbF_hzQs4CqbiffxzgAAABI"]
[Fri Apr 24 04:45:54.092538 2026] [:error] [pid 19101:tid 19141] [client 20.251.39.123:3446] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqFAmAHj9bEvrTgbO21XQAAAEQ"]
[Fri Apr 24 04:45:54.611519 2026] [:error] [pid 19100:tid 19134] [client 20.251.39.123:8685] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqFArF_hzQs4Cqbiffx0AAAABg"]
[Fri Apr 24 04:45:55.131040 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:55441] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqFA-KCZKf8_u2LKiAkPQAAARc"]
[Fri Apr 24 04:45:55.649149 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:55465] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqFA-KCZKf8_u2LKiAkQAAAARI"]
[Fri Apr 24 04:45:56.170575 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:55472] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqFBOKCZKf8_u2LKiAkRQAAAQ8"]
[Fri Apr 24 04:45:56.689167 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:8689] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqFBOKCZKf8_u2LKiAkTAAAAQk"]
[Fri Apr 24 04:45:57.206557 2026] [:error] [pid 19100:tid 19116] [client 20.251.39.123:8655] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqFBbF_hzQs4Cqbiffx0wAAAAc"]
[Fri Apr 24 04:45:57.726311 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:55484] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqFBeKCZKf8_u2LKiAkVwAAARY"]
[Fri Apr 24 04:45:58.243244 2026] [:error] [pid 19100:tid 19129] [client 20.251.39.123:65025] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqFBrF_hzQs4Cqbiffx1AAAABM"]
[Fri Apr 24 04:45:58.763768 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:65526] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqFBuKCZKf8_u2LKiAkWQAAARM"]
[Fri Apr 24 04:45:59.280840 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:8661] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqFBwDSgrbLEZbkqD6ffAAAAI4"]
[Fri Apr 24 04:45:59.802378 2026] [:error] [pid 19101:tid 19152] [client 20.251.39.123:8663] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqFB2AHj9bEvrTgbO21ZgAAAE8"]
[Fri Apr 24 04:46:00.320313 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:8674] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqFCOKCZKf8_u2LKiAkXgAAAQs"]
[Fri Apr 24 04:46:00.837862 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:3402] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqFCADSgrbLEZbkqD6fgAAAAJE"]
[Fri Apr 24 04:46:01.359598 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:55463] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqFCQDSgrbLEZbkqD6fggAAAIA"]
[Fri Apr 24 04:46:01.883483 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:8649] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqFCQDSgrbLEZbkqD6fgwAAAJc"]
[Fri Apr 24 04:46:02.401337 2026] [:error] [pid 19102:tid 19165] [client 20.251.39.123:55457] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqFCgDSgrbLEZbkqD6fhgAAAIE"]
[Fri Apr 24 04:46:02.920838 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:8652] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqFCgDSgrbLEZbkqD6figAAAJA"]
[Fri Apr 24 04:46:03.456017 2026] [:error] [pid 19102:tid 19184] [client 20.251.39.123:55481] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqFCwDSgrbLEZbkqD6fjwAAAJQ"]
[Fri Apr 24 04:46:04.016102 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:8696] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqFDADSgrbLEZbkqD6flgAAAII"]
[Fri Apr 24 04:46:04.554344 2026] [:error] [pid 19102:tid 19179] [client 20.251.39.123:65481] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqFDADSgrbLEZbkqD6foAAAAI8"]
[Fri Apr 24 04:46:05.088139 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:3434] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqFDeKCZKf8_u2LKiAkbAAAAQA"]
[Fri Apr 24 04:46:05.612156 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:8700] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqFDeKCZKf8_u2LKiAkcQAAARU"]
[Fri Apr 24 04:46:06.178961 2026] [:error] [pid 19100:tid 19120] [client 20.251.39.123:3407] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqFDrF_hzQs4Cqbiffx7wAAAAo"]
[Fri Apr 24 04:46:06.696321 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:8699] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqFDrF_hzQs4Cqbiffx8AAAABU"]
[Fri Apr 24 04:46:07.222803 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:55467] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqFD-KCZKf8_u2LKiAkeAAAAQk"]
[Fri Apr 24 04:46:07.779079 2026] [:error] [pid 19102:tid 19174] [client 20.251.39.123:65513] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqFDwDSgrbLEZbkqD6fwAAAAIo"]
[Fri Apr 24 04:46:08.298763 2026] [:error] [pid 19101:tid 19140] [client 20.251.39.123:65472] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqFEGAHj9bEvrTgbO21awAAAEM"]
[Fri Apr 24 04:46:08.816776 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:3422] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqFEADSgrbLEZbkqD6fxwAAAJA"]
[Fri Apr 24 04:46:09.401999 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:8656] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeqFEeKCZKf8_u2LKiAkgwAAAQY"]
[Fri Apr 24 04:46:09.925014 2026] [:error] [pid 19100:tid 19123] [client 20.251.39.123:55454] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeqFEbF_hzQs4Cqbiffx-gAAAA0"]
[Fri Apr 24 04:46:10.457437 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:65496] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeqFEuKCZKf8_u2LKiAkjQAAARY"]
[Fri Apr 24 04:46:11.016550 2026] [:error] [pid 19100:tid 19121] [client 20.251.39.123:55456] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeqFE7F_hzQs4CqbiffyAAAAAAs"]
[Fri Apr 24 04:46:11.544876 2026] [:error] [pid 19102:tid 19169] [client 20.251.39.123:8657] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ewp.php"] [unique_id "aeqFEwDSgrbLEZbkqD6f3gAAAIU"]
[Fri Apr 24 04:46:14.429441 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:17.432573 2026] [proxy_fcgi:error] [pid 19101:tid 19158] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:19.967566 2026] [proxy_fcgi:error] [pid 19101:tid 19144] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:22.219544 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:24.508449 2026] [proxy_fcgi:error] [pid 19101:tid 19153] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:28.236560 2026] [proxy_fcgi:error] [pid 19101:tid 19161] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:30.526158 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:32.684733 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:34.814549 2026] [proxy_fcgi:error] [pid 19101:tid 19159] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:36.991874 2026] [proxy_fcgi:error] [pid 19101:tid 19158] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:38.578245 2026] [proxy_fcgi:error] [pid 19101:tid 19143] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:40.715165 2026] [proxy_fcgi:error] [pid 19101:tid 19142] [client 20.251.39.123:65493] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:46:40.985728 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:65493] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqFMGAHj9bEvrTgbO21xgAAAEY"]
[Fri Apr 24 04:46:41.504860 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:8701] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqFMeKCZKf8_u2LKiAlJAAAARg"]
[Fri Apr 24 04:46:42.024515 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:65480] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqFMuKCZKf8_u2LKiAlJwAAAQI"]
[Fri Apr 24 04:46:42.571905 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:8682] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqFMjQ--M3-tsKAnhFyoAAAAMY"]
[Fri Apr 24 04:46:43.114299 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:3413] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqFMwDSgrbLEZbkqD6gWgAAAIA"]
[Fri Apr 24 04:46:43.634882 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:65040] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqFMzQ--M3-tsKAnhFypwAAANY"]
[Fri Apr 24 04:46:44.180205 2026] [:error] [pid 19100:tid 19114] [client 20.251.39.123:65478] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqFNLF_hzQs4CqbiffyUAAAAAU"]
[Fri Apr 24 04:46:44.700472 2026] [:error] [pid 19102:tid 19176] [client 20.251.39.123:65479] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqFNADSgrbLEZbkqD6gYgAAAIw"]
[Fri Apr 24 04:46:45.220955 2026] [:error] [pid 19100:tid 19125] [client 20.251.39.123:8650] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "aeqFNbF_hzQs4CqbiffyVQAAAA8"]
[Fri Apr 24 04:46:45.817292 2026] [:error] [pid 19200:tid 19212] [client 20.251.39.123:55439] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "aeqFNTQ--M3-tsKAnhFyrwAAAMQ"]
[Fri Apr 24 04:46:46.335437 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:55477] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "aeqFNjQ--M3-tsKAnhFysgAAAMA"]
[Fri Apr 24 04:46:46.860215 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:8673] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tea.php"] [unique_id "aeqFNuKCZKf8_u2LKiAlMwAAAQk"]
[Fri Apr 24 04:46:47.398374 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:65487] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqFNwDSgrbLEZbkqD6gbAAAAIA"]
[Fri Apr 24 04:46:47.933373 2026] [:error] [pid 19200:tid 19220] [client 20.251.39.123:8670] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqFNzQ--M3-tsKAnhFytgAAAMw"]
[Fri Apr 24 04:46:48.476061 2026] [:error] [pid 19200:tid 19231] [client 20.251.39.123:55486] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqFODQ--M3-tsKAnhFyugAAANc"]
[Fri Apr 24 04:46:49.007188 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:55433] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqFOTQ--M3-tsKAnhFyvQAAAMo"]
[Fri Apr 24 04:46:49.556826 2026] [:error] [pid 19101:tid 19161] [client 20.251.39.123:8693] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqFOWAHj9bEvrTgbO211QAAAFg"]
[Fri Apr 24 04:46:50.079122 2026] [:error] [pid 19101:tid 19156] [client 20.251.39.123:55464] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqFOmAHj9bEvrTgbO212AAAAFM"]
[Fri Apr 24 04:46:50.642089 2026] [:error] [pid 19102:tid 19184] [client 20.251.39.123:3443] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqFOgDSgrbLEZbkqD6gdwAAAJQ"]
[Fri Apr 24 04:46:51.161810 2026] [:error] [pid 19102:tid 19168] [client 20.251.39.123:55425] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqFOwDSgrbLEZbkqD6geAAAAIQ"]
[Fri Apr 24 04:46:51.713057 2026] [:error] [pid 19102:tid 19165] [client 20.251.39.123:65508] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqFOwDSgrbLEZbkqD6gfQAAAIE"]
[Fri Apr 24 04:46:52.236915 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:8667] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqFPDQ--M3-tsKAnhFyywAAAMI"]
[Fri Apr 24 04:46:52.763218 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:3445] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqFPOKCZKf8_u2LKiAlSwAAAQU"]
[Fri Apr 24 04:46:53.288154 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:65489] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqFPeKCZKf8_u2LKiAlTQAAARI"]
[Fri Apr 24 04:46:53.809496 2026] [:error] [pid 19102:tid 19179] [client 20.251.39.123:55434] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqFPQDSgrbLEZbkqD6giwAAAI8"]
[Fri Apr 24 04:46:54.328892 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:8662] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqFPjQ--M3-tsKAnhFy1gAAAMU"]
[Fri Apr 24 04:46:54.883236 2026] [:error] [pid 19101:tid 19155] [client 20.251.39.123:65511] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqFPmAHj9bEvrTgbO213gAAAFI"]
[Fri Apr 24 04:46:55.407553 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:8640] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqFP-KCZKf8_u2LKiAlVAAAARc"]
[Fri Apr 24 04:46:55.942962 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:65039] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqFPzQ--M3-tsKAnhFy3wAAAM4"]
[Fri Apr 24 04:46:56.513580 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:55449] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqFQDQ--M3-tsKAnhFy5AAAAMU"]
[Fri Apr 24 04:46:57.063630 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:8697] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqFQWAHj9bEvrTgbO214AAAAEY"]
[Fri Apr 24 04:46:57.627838 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:65517] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqFQeKCZKf8_u2LKiAlXAAAAQc"]
[Fri Apr 24 04:46:58.151077 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:55476] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqFQuKCZKf8_u2LKiAlYgAAAQk"]
[Fri Apr 24 04:46:58.671763 2026] [:error] [pid 19102:tid 19175] [client 20.251.39.123:3416] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqFQgDSgrbLEZbkqD6grQAAAIs"]
[Fri Apr 24 04:46:59.197410 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:65080] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqFQwDSgrbLEZbkqD6gsgAAAIA"]
[Fri Apr 24 04:46:59.717006 2026] [:error] [pid 19101:tid 19149] [client 20.251.39.123:55479] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqFQ2AHj9bEvrTgbO215gAAAEw"]
[Fri Apr 24 04:47:00.264331 2026] [:error] [pid 19200:tid 19225] [client 20.251.39.123:3396] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqFRDQ--M3-tsKAnhFy9gAAANE"]
[Fri Apr 24 04:47:00.784765 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:3392] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqFROKCZKf8_u2LKiAlbgAAARI"]
[Fri Apr 24 04:47:01.309279 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:65486] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqFRTQ--M3-tsKAnhFy-gAAAMI"]
[Fri Apr 24 04:47:01.828472 2026] [:error] [pid 52129:tid 52150] [client 20.251.39.123:65067] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqFReKCZKf8_u2LKiAldQAAARE"]
[Fri Apr 24 04:47:02.387919 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:65038] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqFRmAHj9bEvrTgbO216QAAAFQ"]
[Fri Apr 24 04:47:02.914687 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:65042] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqFRuKCZKf8_u2LKiAlfwAAARg"]
[Fri Apr 24 04:47:03.433262 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:55466] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqFR-KCZKf8_u2LKiAlhAAAAQE"]
[Fri Apr 24 04:47:03.996114 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:65085] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqFR-KCZKf8_u2LKiAlhgAAARc"]
[Fri Apr 24 04:47:04.517813 2026] [:error] [pid 19100:tid 19110] [client 20.251.39.123:3417] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqFSLF_hzQs4CqbiffycAAAAAE"]
[Fri Apr 24 04:47:05.065710 2026] [:error] [pid 19101:tid 19138] [client 20.251.39.123:65509] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqFSWAHj9bEvrTgbO21-AAAAEE"]
[Fri Apr 24 04:47:05.589822 2026] [:error] [pid 19101:tid 19161] [client 20.251.39.123:65498] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqFSWAHj9bEvrTgbO21-QAAAFg"]
[Fri Apr 24 04:47:06.182166 2026] [:error] [pid 19100:tid 19126] [client 20.251.39.123:65502] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqFSrF_hzQs4CqbiffyeAAAABA"]
[Fri Apr 24 04:47:06.706322 2026] [:error] [pid 19100:tid 19127] [client 20.251.39.123:65492] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/9.php"] [unique_id "aeqFSrF_hzQs4CqbiffyfgAAABE"]
[Fri Apr 24 04:47:07.247613 2026] [:error] [pid 19100:tid 19110] [client 20.251.39.123:3438] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/9.php"] [unique_id "aeqFS7F_hzQs4CqbiffyggAAAAE"]
[Fri Apr 24 04:47:07.770458 2026] [:error] [pid 19100:tid 19114] [client 20.251.39.123:65073] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/9.php"] [unique_id "aeqFS7F_hzQs4CqbiffyiQAAAAU"]
[Fri Apr 24 04:47:08.297449 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:65516] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/9.php"] [unique_id "aeqFTGAHj9bEvrTgbO21_QAAAFQ"]
[Fri Apr 24 04:47:08.823437 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:65482] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aeqFTDQ--M3-tsKAnhFzAQAAAMU"]
[Fri Apr 24 04:47:09.391163 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:3427] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aeqFTTQ--M3-tsKAnhFzBgAAANY"]
[Fri Apr 24 04:47:09.915125 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:8691] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aeqFTTQ--M3-tsKAnhFzDwAAAM8"]
[Fri Apr 24 04:47:10.436315 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:3394] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/10.php"] [unique_id "aeqFTuKCZKf8_u2LKiAlmwAAARU"]
[Fri Apr 24 04:47:10.957350 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:3405] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeqFTuKCZKf8_u2LKiAlnwAAARI"]
[Fri Apr 24 04:47:11.497680 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:55468] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeqFTzQ--M3-tsKAnhFzEgAAANQ"]
[Fri Apr 24 04:47:12.037335 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:65503] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeqFUDQ--M3-tsKAnhFzEwAAAMc"]
[Fri Apr 24 04:47:12.650600 2026] [:error] [pid 19101:tid 19156] [client 20.251.39.123:3436] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aeqFUGAHj9bEvrTgbO22BQAAAFM"]
[Fri Apr 24 04:47:13.361771 2026] [:error] [pid 19102:tid 19167] [client 20.251.39.123:3414] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFUQDSgrbLEZbkqD6gzAAAAIM"]
[Fri Apr 24 04:47:14.050418 2026] [:error] [pid 52129:tid 52136] [client 20.251.39.123:65475] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFUuKCZKf8_u2LKiAlqQAAAQM"]
[Fri Apr 24 04:47:14.745957 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:65494] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFUuKCZKf8_u2LKiAlsQAAAQ4"]
[Fri Apr 24 04:47:15.390927 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:3420] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFUzQ--M3-tsKAnhFzIwAAAMA"]
[Fri Apr 24 04:47:15.912183 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:65484] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35_S.php"] [unique_id "aeqFU-KCZKf8_u2LKiAlvQAAAQU"]
[Fri Apr 24 04:47:16.467355 2026] [:error] [pid 19200:tid 19221] [client 20.251.39.123:3433] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35_S.php"] [unique_id "aeqFVDQ--M3-tsKAnhFzKAAAAM0"]
[Fri Apr 24 04:47:17.038103 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:3399] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35_S.php"] [unique_id "aeqFVQDSgrbLEZbkqD6g0wAAAIA"]
[Fri Apr 24 04:47:17.570731 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:65510] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35_S.php"] [unique_id "aeqFVeKCZKf8_u2LKiAlwgAAAQ0"]
[Fri Apr 24 04:47:18.106919 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:3441] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeqFVgDSgrbLEZbkqD6g1QAAAI4"]
[Fri Apr 24 04:47:18.669353 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:65024] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeqFVuKCZKf8_u2LKiAlxgAAARA"]
[Fri Apr 24 04:47:19.204041 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:65525] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeqFV2AHj9bEvrTgbO22DgAAAEY"]
[Fri Apr 24 04:47:19.760514 2026] [:error] [pid 19101:tid 19147] [client 20.251.39.123:55436] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "aeqFV2AHj9bEvrTgbO22EAAAAEo"]
[Fri Apr 24 04:47:20.378048 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:55443] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/111.php"] [unique_id "aeqFWOKCZKf8_u2LKiAlywAAAQc"]
[Fri Apr 24 04:47:20.902404 2026] [:error] [pid 19102:tid 19167] [client 20.251.39.123:3412] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/111.php"] [unique_id "aeqFWADSgrbLEZbkqD6g3AAAAIM"]
[Fri Apr 24 04:47:21.467381 2026] [:error] [pid 19101:tid 19150] [client 20.251.39.123:8678] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/111.php"] [unique_id "aeqFWWAHj9bEvrTgbO22GwAAAE0"]
[Fri Apr 24 04:47:22.007106 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:3423] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/111.php"] [unique_id "aeqFWjQ--M3-tsKAnhFzNAAAAMo"]
[Fri Apr 24 04:47:22.526806 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:65031] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "aeqFWuKCZKf8_u2LKiAl2QAAARg"]
[Fri Apr 24 04:47:23.070995 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:64961] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "aeqFW2AHj9bEvrTgbO22HwAAAEY"]
[Fri Apr 24 04:47:23.645136 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:65085] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "aeqFW-KCZKf8_u2LKiAl2wAAAQg"]
[Fri Apr 24 04:47:24.168322 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:3451] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "aeqFXOKCZKf8_u2LKiAl3gAAAQI"]
[Fri Apr 24 04:47:24.816301 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:3425] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "aeqFXDQ--M3-tsKAnhFzOQAAANM"]
[Fri Apr 24 04:47:25.334749 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:64970] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "aeqFXeKCZKf8_u2LKiAl5AAAAQU"]
[Fri Apr 24 04:47:25.887421 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:65477] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "aeqFXeKCZKf8_u2LKiAl7QAAARI"]
[Fri Apr 24 04:47:26.563896 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:3449] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aligk.php"] [unique_id "aeqFXuKCZKf8_u2LKiAl9AAAAQ8"]
[Fri Apr 24 04:47:27.089328 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:65028] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "aeqFX-KCZKf8_u2LKiAl_QAAAQk"]
[Fri Apr 24 04:47:27.617688 2026] [:error] [pid 19101:tid 19144] [client 20.251.39.123:65497] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "aeqFX2AHj9bEvrTgbO22KgAAAEc"]
[Fri Apr 24 04:47:28.166193 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:8698] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "aeqFYOKCZKf8_u2LKiAmBwAAAQc"]
[Fri Apr 24 04:47:28.687342 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:64990] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byrgo.php"] [unique_id "aeqFYDQ--M3-tsKAnhFzQAAAANU"]
[Fri Apr 24 04:47:29.215367 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:65069] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aeqFYTQ--M3-tsKAnhFzSAAAAM4"]
[Fri Apr 24 04:47:29.791401 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:8688] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aeqFYeKCZKf8_u2LKiAmDQAAAQg"]
[Fri Apr 24 04:47:30.313082 2026] [:error] [pid 19101:tid 19155] [client 20.251.39.123:65512] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aeqFYmAHj9bEvrTgbO22LgAAAFI"]
[Fri Apr 24 04:47:30.910538 2026] [:error] [pid 19101:tid 19160] [client 20.251.39.123:8687] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwpg.php"] [unique_id "aeqFYmAHj9bEvrTgbO22LwAAAFc"]
[Fri Apr 24 04:47:31.433111 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:55471] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aeqFYwDSgrbLEZbkqD6g6QAAAJE"]
[Fri Apr 24 04:47:31.971121 2026] [:error] [pid 19102:tid 19174] [client 20.251.39.123:55452] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aeqFYwDSgrbLEZbkqD6g7gAAAIo"]
[Fri Apr 24 04:47:32.499452 2026] [:error] [pid 19102:tid 19183] [client 20.251.39.123:65066] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aeqFZADSgrbLEZbkqD6g8QAAAJM"]
[Fri Apr 24 04:47:33.180658 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:65476] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ass.php"] [unique_id "aeqFZQDSgrbLEZbkqD6g-AAAAI4"]
[Fri Apr 24 04:47:33.698414 2026] [:error] [pid 19200:tid 19231] [client 20.251.39.123:65058] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeqFZTQ--M3-tsKAnhFzUwAAANc"]
[Fri Apr 24 04:47:34.287254 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:8703] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeqFZjQ--M3-tsKAnhFzWAAAAM4"]
[Fri Apr 24 04:47:34.851869 2026] [:error] [pid 19102:tid 19188] [client 20.251.39.123:65505] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeqFZgDSgrbLEZbkqD6g-QAAAJg"]
[Fri Apr 24 04:47:35.375951 2026] [:error] [pid 19100:tid 19130] [client 20.251.39.123:65076] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aeqFZ7F_hzQs4CqbiffysgAAABQ"]
[Fri Apr 24 04:47:35.893727 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:4048] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqFZ-KCZKf8_u2LKiAmKgAAARA"]
[Fri Apr 24 04:47:36.426501 2026] [:error] [pid 19102:tid 19167] [client 20.251.39.123:65483] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqFaADSgrbLEZbkqD6g_QAAAIM"]
[Fri Apr 24 04:47:36.948896 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:55462] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqFaOKCZKf8_u2LKiAmLAAAARQ"]
[Fri Apr 24 04:47:37.532190 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:55487] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqFaQDSgrbLEZbkqD6hBAAAAIA"]
[Fri Apr 24 04:47:40.486944 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:43.543996 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:46.063025 2026] [proxy_fcgi:error] [pid 19200:tid 19220] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:47.563835 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:49.726254 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:51.839407 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:54.013995 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:56.152327 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:47:58.367220 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:48:00.532362 2026] [proxy_fcgi:error] [pid 19200:tid 19224] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:48:02.723313 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:48:04.898278 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:3410] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:48:05.167341 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:3410] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqFhTQ--M3-tsKAnhFz2wAAAM8"]
[Fri Apr 24 04:48:05.685071 2026] [:error] [pid 19100:tid 19114] [client 20.251.39.123:65500] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqFhbF_hzQs4Cqbiffy6wAAAAU"]
[Fri Apr 24 04:48:06.221796 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:3409] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqFhuKCZKf8_u2LKiAmeQAAAQk"]
[Fri Apr 24 04:48:06.751246 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:65522] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqFhgDSgrbLEZbkqD6hWgAAAIk"]
[Fri Apr 24 04:48:07.269392 2026] [:error] [pid 19100:tid 19121] [client 20.251.39.123:65515] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFh7F_hzQs4Cqbiffy8QAAAAs"]
[Fri Apr 24 04:48:07.797707 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:3404] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFh-KCZKf8_u2LKiAmfQAAAQA"]
[Fri Apr 24 04:48:08.326311 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:65048] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFiDQ--M3-tsKAnhFz3AAAANY"]
[Fri Apr 24 04:48:08.842835 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:64976] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFiOKCZKf8_u2LKiAmgAAAAQI"]
[Fri Apr 24 04:48:09.368211 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:64967] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFiTQ--M3-tsKAnhFz3wAAAMI"]
[Fri Apr 24 04:48:09.887790 2026] [:error] [pid 19200:tid 19212] [client 20.251.39.123:64974] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFiTQ--M3-tsKAnhFz5wAAAMQ"]
[Fri Apr 24 04:48:10.406525 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:65063] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFiuKCZKf8_u2LKiAmhgAAARY"]
[Fri Apr 24 04:48:10.929859 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:3453] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFiuKCZKf8_u2LKiAmjAAAARA"]
[Fri Apr 24 04:48:11.487741 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:65495] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aeqFi-KCZKf8_u2LKiAmkAAAARI"]
[Fri Apr 24 04:48:12.006745 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:65071] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aeqFjOKCZKf8_u2LKiAmkwAAAQc"]
[Fri Apr 24 04:48:12.525099 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:3419] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aeqFjGAHj9bEvrTgbO22XwAAAFQ"]
[Fri Apr 24 04:48:13.073923 2026] [:error] [pid 19101:tid 19159] [client 20.251.39.123:65007] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/66.php"] [unique_id "aeqFjWAHj9bEvrTgbO22YwAAAFY"]
[Fri Apr 24 04:48:13.604092 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:3432] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aeqFjeKCZKf8_u2LKiAmngAAAQE"]
[Fri Apr 24 04:48:14.156802 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:65077] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aeqFjuKCZKf8_u2LKiAmogAAAQg"]
[Fri Apr 24 04:48:14.679176 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:65068] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aeqFjuKCZKf8_u2LKiAmpwAAAQc"]
[Fri Apr 24 04:48:15.195456 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:65473] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aeqFjzQ--M3-tsKAnhFz9AAAAMo"]
[Fri Apr 24 04:48:15.713090 2026] [:error] [pid 19100:tid 19128] [client 20.251.39.123:55442] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aeqFj7F_hzQs4Cqbiffy-gAAABI"]
[Fri Apr 24 04:48:16.240455 2026] [:error] [pid 19100:tid 19122] [client 20.251.39.123:55428] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aeqFkLF_hzQs4Cqbiffy_AAAAAw"]
[Fri Apr 24 04:48:16.758395 2026] [:error] [pid 52129:tid 52136] [client 20.251.39.123:64984] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aeqFkOKCZKf8_u2LKiAmtgAAAQM"]
[Fri Apr 24 04:48:17.282738 2026] [:error] [pid 19100:tid 19125] [client 20.251.39.123:4044] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ol.php"] [unique_id "aeqFkbF_hzQs4Cqbiffy_gAAAA8"]
[Fri Apr 24 04:48:17.802895 2026] [:error] [pid 19100:tid 19119] [client 20.251.39.123:3403] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeqFkbF_hzQs4Cqbiffy_wAAAAk"]
[Fri Apr 24 04:48:18.319732 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:65065] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeqFkuKCZKf8_u2LKiAmyAAAAQ4"]
[Fri Apr 24 04:48:18.836711 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:3424] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeqFkuKCZKf8_u2LKiAmzQAAARQ"]
[Fri Apr 24 04:48:19.358209 2026] [:error] [pid 19100:tid 19126] [client 20.251.39.123:64980] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f6.php"] [unique_id "aeqFk7F_hzQs4CqbiffzBgAAABA"]
[Fri Apr 24 04:48:19.874047 2026] [:error] [pid 19100:tid 19113] [client 20.251.39.123:55437] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aeqFk7F_hzQs4CqbiffzCAAAAAQ"]
[Fri Apr 24 04:48:20.394714 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:65046] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aeqFlOKCZKf8_u2LKiAm1gAAAQU"]
[Fri Apr 24 04:48:20.914544 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:65062] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aeqFlOKCZKf8_u2LKiAm3AAAARU"]
[Fri Apr 24 04:48:21.436342 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:65520] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "aeqFleKCZKf8_u2LKiAm4AAAARY"]
[Fri Apr 24 04:48:21.954323 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:3444] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aeqFlbF_hzQs4CqbiffzEgAAABU"]
[Fri Apr 24 04:48:22.472917 2026] [:error] [pid 19101:tid 19158] [client 20.251.39.123:65016] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aeqFlmAHj9bEvrTgbO22cAAAAFU"]
[Fri Apr 24 04:48:22.990070 2026] [:error] [pid 19101:tid 19140] [client 20.251.39.123:65045] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aeqFlmAHj9bEvrTgbO22cwAAAEM"]
[Fri Apr 24 04:48:23.508679 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:3398] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/style.php"] [unique_id "aeqFlzQ--M3-tsKAnhF0CAAAANY"]
[Fri Apr 24 04:48:24.028880 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:65022] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqFmDQ--M3-tsKAnhF0DQAAAMg"]
[Fri Apr 24 04:48:24.549612 2026] [:error] [pid 52129:tid 52145] [client 20.251.39.123:65050] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqFmOKCZKf8_u2LKiAm5QAAAQw"]
[Fri Apr 24 04:48:25.067247 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:65005] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqFmQDSgrbLEZbkqD6hdQAAAI4"]
[Fri Apr 24 04:48:25.587324 2026] [:error] [pid 19102:tid 19181] [client 20.251.39.123:4083] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqFmQDSgrbLEZbkqD6hegAAAJE"]
[Fri Apr 24 04:48:26.105666 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:65052] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFmuKCZKf8_u2LKiAm6gAAAQU"]
[Fri Apr 24 04:48:26.624755 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:65026] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFmuKCZKf8_u2LKiAm7gAAARQ"]
[Fri Apr 24 04:48:27.145564 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:55474] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFm-KCZKf8_u2LKiAm9QAAAQk"]
[Fri Apr 24 04:48:27.663677 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:3393] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFm-KCZKf8_u2LKiAm-wAAAQ0"]
[Fri Apr 24 04:48:28.184093 2026] [:error] [pid 19200:tid 19226] [client 20.251.39.123:8690] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-act.php"] [unique_id "aeqFnDQ--M3-tsKAnhF0FwAAANI"]
[Fri Apr 24 04:48:28.705337 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:3428] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-act.php"] [unique_id "aeqFnDQ--M3-tsKAnhF0GQAAAMo"]
[Fri Apr 24 04:48:29.223440 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:8702] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-act.php"] [unique_id "aeqFneKCZKf8_u2LKiAnAAAAAQ4"]
[Fri Apr 24 04:48:29.757155 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:55470] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-act.php"] [unique_id "aeqFneKCZKf8_u2LKiAnCAAAAQA"]
[Fri Apr 24 04:48:30.281406 2026] [:error] [pid 19200:tid 19224] [client 20.251.39.123:3408] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aeqFnjQ--M3-tsKAnhF0HgAAANA"]
[Fri Apr 24 04:48:30.835632 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:65054] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aeqFngDSgrbLEZbkqD6higAAAJY"]
[Fri Apr 24 04:48:31.351996 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:65061] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aeqFnwDSgrbLEZbkqD6hjQAAAJc"]
[Fri Apr 24 04:48:31.873716 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:4051] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "aeqFnzQ--M3-tsKAnhF0JAAAAMg"]
[Fri Apr 24 04:48:32.391692 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:4039] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFoOKCZKf8_u2LKiAnFQAAAQA"]
[Fri Apr 24 04:48:32.910623 2026] [:error] [pid 19101:tid 19141] [client 20.251.39.123:64991] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFoGAHj9bEvrTgbO22gQAAAEQ"]
[Fri Apr 24 04:48:33.431411 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:3970] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFoTQ--M3-tsKAnhF0KQAAAMs"]
[Fri Apr 24 04:48:33.949758 2026] [:error] [pid 19100:tid 19130] [client 20.251.39.123:3431] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFobF_hzQs4CqbiffzJQAAABQ"]
[Fri Apr 24 04:48:34.467740 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:3452] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFojQ--M3-tsKAnhF0NQAAANY"]
[Fri Apr 24 04:48:34.986717 2026] [:error] [pid 19100:tid 19129] [client 20.251.39.123:65474] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqForF_hzQs4CqbiffzJgAAABM"]
[Fri Apr 24 04:48:35.504915 2026] [:error] [pid 19101:tid 19146] [client 20.251.39.123:65003] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFo2AHj9bEvrTgbO22hgAAAEk"]
[Fri Apr 24 04:48:36.023400 2026] [:error] [pid 19200:tid 19208] [client 20.251.39.123:65504] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFpDQ--M3-tsKAnhF0RAAAAMA"]
[Fri Apr 24 04:48:36.541101 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:65029] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqFpDQ--M3-tsKAnhF0RwAAAMg"]
[Fri Apr 24 04:48:37.061414 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:8692] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqFpTQ--M3-tsKAnhF0SwAAAMI"]
[Fri Apr 24 04:48:37.579123 2026] [:error] [pid 19102:tid 19186] [client 20.251.39.123:65041] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqFpQDSgrbLEZbkqD6hnwAAAJY"]
[Fri Apr 24 04:48:38.100843 2026] [:error] [pid 19200:tid 19224] [client 20.251.39.123:65057] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqFpjQ--M3-tsKAnhF0UQAAANA"]
[Fri Apr 24 04:48:38.620216 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:65034] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqFpjQ--M3-tsKAnhF0VwAAAME"]
[Fri Apr 24 04:48:39.153230 2026] [:error] [pid 19102:tid 19183] [client 20.251.39.123:65032] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqFpwDSgrbLEZbkqD6hoAAAAJM"]
[Fri Apr 24 04:48:39.670410 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:64978] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqFp-KCZKf8_u2LKiAnJgAAARY"]
[Fri Apr 24 04:48:40.204113 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:65056] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqFqOKCZKf8_u2LKiAnLQAAAQ4"]
[Fri Apr 24 04:48:40.735532 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:64960] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqFqDQ--M3-tsKAnhF0XQAAAM4"]
[Fri Apr 24 04:48:41.253244 2026] [:error] [pid 19200:tid 19221] [client 20.251.39.123:65030] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqFqTQ--M3-tsKAnhF0YQAAAM0"]
[Fri Apr 24 04:48:41.780214 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:65012] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqFqTQ--M3-tsKAnhF0ZwAAAMc"]
[Fri Apr 24 04:48:42.298066 2026] [:error] [pid 19200:tid 19229] [client 20.251.39.123:64997] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqFqjQ--M3-tsKAnhF0bAAAANU"]
[Fri Apr 24 04:48:42.820400 2026] [:error] [pid 19102:tid 19169] [client 20.251.39.123:65033] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFqgDSgrbLEZbkqD6hpgAAAIU"]
[Fri Apr 24 04:48:43.340088 2026] [:error] [pid 19200:tid 19226] [client 20.251.39.123:65083] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFqzQ--M3-tsKAnhF0cwAAANI"]
[Fri Apr 24 04:48:43.890369 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:4037] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFq-KCZKf8_u2LKiAnNwAAARM"]
[Fri Apr 24 04:48:44.407572 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:3415] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFrDQ--M3-tsKAnhF0egAAAMo"]
[Fri Apr 24 04:48:44.924145 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:64987] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFrDQ--M3-tsKAnhF0fgAAAMU"]
[Fri Apr 24 04:48:45.442302 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:65064] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFrWAHj9bEvrTgbO22mAAAAFQ"]
[Fri Apr 24 04:48:45.959384 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:4093] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFrTQ--M3-tsKAnhF0iAAAAMo"]
[Fri Apr 24 04:48:46.479637 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:55440] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFruKCZKf8_u2LKiAnPgAAARI"]
[Fri Apr 24 04:48:47.009501 2026] [:error] [pid 52129:tid 52133] [client 20.251.39.123:65035] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqFr-KCZKf8_u2LKiAnQgAAAQA"]
[Fri Apr 24 04:48:47.531034 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:8641] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqFr-KCZKf8_u2LKiAnRQAAAQ0"]
[Fri Apr 24 04:48:48.054190 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:3429] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqFsOKCZKf8_u2LKiAnSgAAAQE"]
[Fri Apr 24 04:48:48.581521 2026] [:error] [pid 19102:tid 19188] [client 20.251.39.123:65014] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqFsADSgrbLEZbkqD6hsgAAAJg"]
[Fri Apr 24 04:48:49.099137 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:65074] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqFsTQ--M3-tsKAnhF0lQAAAM8"]
[Fri Apr 24 04:48:49.618610 2026] [:error] [pid 19100:tid 19114] [client 20.251.39.123:65087] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqFsbF_hzQs4CqbiffzLQAAAAU"]
[Fri Apr 24 04:48:50.137381 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:3455] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqFsuKCZKf8_u2LKiAnVQAAAQc"]
[Fri Apr 24 04:48:50.655697 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:4035] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqFsuKCZKf8_u2LKiAnWwAAAQQ"]
[Fri Apr 24 04:48:51.173511 2026] [:error] [pid 19100:tid 19113] [client 20.251.39.123:3448] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFs7F_hzQs4CqbiffzLgAAAAQ"]
[Fri Apr 24 04:48:51.690386 2026] [:error] [pid 19100:tid 19130] [client 20.251.39.123:65011] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFs7F_hzQs4CqbiffzLwAAABQ"]
[Fri Apr 24 04:48:52.212530 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:55471] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFtOKCZKf8_u2LKiAnZAAAAQI"]
[Fri Apr 24 04:48:52.739024 2026] [:error] [pid 19101:tid 19151] [client 20.251.39.123:3401] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqFtGAHj9bEvrTgbO22oQAAAE4"]
[Fri Apr 24 04:48:53.260711 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:3426] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqFteKCZKf8_u2LKiAnbQAAAQg"]
[Fri Apr 24 04:48:53.783285 2026] [:error] [pid 19101:tid 19147] [client 20.251.39.123:65027] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqFtWAHj9bEvrTgbO22pgAAAEo"]
[Fri Apr 24 04:48:54.309365 2026] [:error] [pid 19101:tid 19146] [client 20.251.39.123:65507] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqFtmAHj9bEvrTgbO22qwAAAEk"]
[Fri Apr 24 04:48:54.826026 2026] [:error] [pid 19100:tid 19109] [client 20.251.39.123:64965] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqFtrF_hzQs4CqbiffzPgAAAAA"]
[Fri Apr 24 04:48:55.344186 2026] [:error] [pid 19102:tid 19166] [client 20.251.39.123:3439] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqFtwDSgrbLEZbkqD6hywAAAII"]
[Fri Apr 24 04:48:55.862771 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:65043] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqFt-KCZKf8_u2LKiAndQAAARc"]
[Fri Apr 24 04:48:56.389041 2026] [:error] [pid 19102:tid 19187] [client 20.251.39.123:64999] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqFuADSgrbLEZbkqD6hzQAAAJc"]
[Fri Apr 24 04:48:56.906792 2026] [:error] [pid 19101:tid 19157] [client 20.251.39.123:4000] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqFuGAHj9bEvrTgbO22tQAAAFQ"]
[Fri Apr 24 04:48:57.423837 2026] [:error] [pid 19101:tid 19142] [client 20.251.39.123:65004] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "aeqFuWAHj9bEvrTgbO22twAAAEU"]
[Fri Apr 24 04:48:57.944537 2026] [:error] [pid 52129:tid 52145] [client 20.251.39.123:65009] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "aeqFueKCZKf8_u2LKiAnfQAAAQw"]
[Fri Apr 24 04:48:58.463936 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:8660] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "aeqFuuKCZKf8_u2LKiAngAAAAQQ"]
[Fri Apr 24 04:48:58.981771 2026] [:error] [pid 19100:tid 19114] [client 20.251.39.123:3440] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fff.php"] [unique_id "aeqFurF_hzQs4CqbiffzUQAAAAU"]
[Fri Apr 24 04:48:59.502769 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:4032] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqFuzQ--M3-tsKAnhF0sgAAANY"]
[Fri Apr 24 04:49:00.023898 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:65075] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqFvDQ--M3-tsKAnhF0tQAAAMs"]
[Fri Apr 24 04:49:00.544254 2026] [:error] [pid 19200:tid 19231] [client 20.251.39.123:3395] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqFvDQ--M3-tsKAnhF0uQAAANc"]
[Fri Apr 24 04:49:01.062791 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:65524] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqFvTQ--M3-tsKAnhF0wAAAAMI"]
[Fri Apr 24 04:49:01.619182 2026] [:error] [pid 19200:tid 19209] [client 20.251.39.123:4082] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/we.php"] [unique_id "aeqFvTQ--M3-tsKAnhF0xgAAAME"]
[Fri Apr 24 04:49:04.482446 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:06.770964 2026] [proxy_fcgi:error] [pid 19200:tid 19224] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:09.137913 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:10.661458 2026] [proxy_fcgi:error] [pid 19200:tid 19209] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:12.890429 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:14.383945 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:16.533910 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:18.717629 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:20.187733 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:22.336321 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:24.543655 2026] [proxy_fcgi:error] [pid 19200:tid 19226] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:26.759129 2026] [proxy_fcgi:error] [pid 19200:tid 19227] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:28.965154 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:31.271399 2026] [proxy_fcgi:error] [pid 19200:tid 19218] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:32.805487 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:34.924353 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 20.251.39.123:65523] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:49:35.195974 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:65523] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqF3zQ--M3-tsKAnhF1IwAAAMc"]
[Fri Apr 24 04:49:35.734627 2026] [:error] [pid 19200:tid 19217] [client 20.251.39.123:65072] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqF3zQ--M3-tsKAnhF1JQAAAMk"]
[Fri Apr 24 04:49:36.256730 2026] [:error] [pid 19100:tid 19111] [client 20.251.39.123:8681] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqF4LF_hzQs4CqbiffzugAAAAI"]
[Fri Apr 24 04:49:36.777250 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:8646] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqF4OKCZKf8_u2LKiAoMQAAARY"]
[Fri Apr 24 04:49:37.295356 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:64964] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqF4eKCZKf8_u2LKiAoNgAAAQU"]
[Fri Apr 24 04:49:37.817877 2026] [:error] [pid 19102:tid 19165] [client 20.251.39.123:65059] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqF4QDSgrbLEZbkqD6iIgAAAIE"]
[Fri Apr 24 04:49:38.334948 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:64985] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqF4jQ--M3-tsKAnhF1KgAAAMc"]
[Fri Apr 24 04:49:38.873076 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:3411] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqF4jQ--M3-tsKAnhF1LgAAAM4"]
[Fri Apr 24 04:49:39.394989 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:3435] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqF4zQ--M3-tsKAnhF1MgAAAMY"]
[Fri Apr 24 04:49:39.919644 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:65055] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqF4zQ--M3-tsKAnhF1OAAAAMs"]
[Fri Apr 24 04:49:40.439657 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:64996] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqF5LF_hzQs4CqbiffzxgAAABU"]
[Fri Apr 24 04:49:40.958095 2026] [:error] [pid 19200:tid 19220] [client 20.251.39.123:65070] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqF5DQ--M3-tsKAnhF1PwAAAMw"]
[Fri Apr 24 04:49:41.476035 2026] [:error] [pid 19200:tid 19225] [client 20.251.39.123:55482] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqF5TQ--M3-tsKAnhF1QwAAANE"]
[Fri Apr 24 04:49:41.994991 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:3454] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqF5eKCZKf8_u2LKiAoSAAAAQk"]
[Fri Apr 24 04:49:42.513708 2026] [:error] [pid 19102:tid 19178] [client 20.251.39.123:8642] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqF5gDSgrbLEZbkqD6iKgAAAI4"]
[Fri Apr 24 04:49:43.035933 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:3437] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqF5zQ--M3-tsKAnhF1RwAAAMg"]
[Fri Apr 24 04:49:43.556648 2026] [:error] [pid 52129:tid 52135] [client 20.251.39.123:8686] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqF5-KCZKf8_u2LKiAoUwAAAQI"]
[Fri Apr 24 04:49:44.106958 2026] [:error] [pid 19100:tid 19131] [client 20.251.39.123:64988] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqF6LF_hzQs4Cqbiffz0AAAABU"]
[Fri Apr 24 04:49:44.625438 2026] [:error] [pid 19200:tid 19232] [client 20.251.39.123:3450] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqF6DQ--M3-tsKAnhF1SwAAANg"]
[Fri Apr 24 04:49:45.147224 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:8651] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqF6QDSgrbLEZbkqD6iLwAAAI0"]
[Fri Apr 24 04:49:45.666976 2026] [:error] [pid 19102:tid 19170] [client 20.251.39.123:3972] [client 20.251.39.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeqF6QDSgrbLEZbkqD6iMwAAAIY"]
[Fri Apr 24 04:49:46.190954 2026] [:error] [pid 19102:tid 19174] [client 20.251.39.123:55448] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aeqF6gDSgrbLEZbkqD6iNQAAAIo"]
[Fri Apr 24 04:49:46.709862 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:55453] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aeqF6uKCZKf8_u2LKiAobwAAAQE"]
[Fri Apr 24 04:49:47.231210 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:64979] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aeqF6-KCZKf8_u2LKiAodwAAARA"]
[Fri Apr 24 04:49:47.779678 2026] [:error] [pid 19102:tid 19172] [client 20.251.39.123:4045] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF6wDSgrbLEZbkqD6iNgAAAIg"]
[Fri Apr 24 04:49:48.299402 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:55451] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7DQ--M3-tsKAnhF1UQAAAMU"]
[Fri Apr 24 04:49:48.821299 2026] [:error] [pid 19100:tid 19127] [client 20.251.39.123:55426] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7LF_hzQs4Cqbiffz2AAAABE"]
[Fri Apr 24 04:49:49.341190 2026] [:error] [pid 19101:tid 19138] [client 20.251.39.123:65030] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7WAHj9bEvrTgbO23NgAAAEE"]
[Fri Apr 24 04:49:49.888321 2026] [:error] [pid 19101:tid 19144] [client 20.251.39.123:3400] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF7WAHj9bEvrTgbO23OgAAAEc"]
[Fri Apr 24 04:49:50.408594 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:55485] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF7uKCZKf8_u2LKiAolQAAARU"]
[Fri Apr 24 04:49:50.927951 2026] [:error] [pid 19200:tid 19225] [client 20.251.39.123:65519] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF7jQ--M3-tsKAnhF1VgAAANE"]
[Fri Apr 24 04:49:51.447380 2026] [:error] [pid 19102:tid 19164] [client 20.251.39.123:8666] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF7wDSgrbLEZbkqD6iRAAAAIA"]
[Fri Apr 24 04:49:51.962841 2026] [:error] [pid 19100:tid 19118] [client 20.251.39.123:65047] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqF77F_hzQs4Cqbiffz3AAAAAg"]
[Fri Apr 24 04:49:52.480308 2026] [:error] [pid 19100:tid 19134] [client 20.251.39.123:3986] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqF8LF_hzQs4Cqbiffz3wAAABg"]
[Fri Apr 24 04:49:53.001509 2026] [:error] [pid 52129:tid 52142] [client 20.251.39.123:8648] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqF8eKCZKf8_u2LKiAomwAAAQk"]
[Fri Apr 24 04:49:53.521381 2026] [:error] [pid 19100:tid 19115] [client 20.251.39.123:8665] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqF8bF_hzQs4Cqbiffz4wAAAAY"]
[Fri Apr 24 04:49:54.049940 2026] [:error] [pid 19200:tid 19212] [client 20.251.39.123:55473] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "aeqF8jQ--M3-tsKAnhF1YwAAAMQ"]
[Fri Apr 24 04:49:54.578974 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:65086] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "aeqF8uKCZKf8_u2LKiAopQAAAQ8"]
[Fri Apr 24 04:49:55.101972 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:64998] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "aeqF8-KCZKf8_u2LKiAopgAAARI"]
[Fri Apr 24 04:49:55.620600 2026] [:error] [pid 52129:tid 52157] [client 20.251.39.123:65491] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dev.php"] [unique_id "aeqF8-KCZKf8_u2LKiAoqwAAARg"]
[Fri Apr 24 04:49:56.152162 2026] [:error] [pid 52129:tid 52138] [client 20.251.39.123:55445] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqF9OKCZKf8_u2LKiAotAAAAQU"]
[Fri Apr 24 04:49:56.676284 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:65518] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqF9OKCZKf8_u2LKiAovAAAARQ"]
[Fri Apr 24 04:49:57.196746 2026] [:error] [pid 19200:tid 19219] [client 20.251.39.123:8659] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqF9TQ--M3-tsKAnhF1cAAAAMs"]
[Fri Apr 24 04:49:57.717326 2026] [:error] [pid 52129:tid 52146] [client 20.251.39.123:65010] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqF9eKCZKf8_u2LKiAoxwAAAQ0"]
[Fri Apr 24 04:49:58.235475 2026] [:error] [pid 19200:tid 19216] [client 20.251.39.123:4061] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqF9jQ--M3-tsKAnhF1cgAAAMg"]
[Fri Apr 24 04:49:58.754169 2026] [:error] [pid 19200:tid 19226] [client 20.251.39.123:4088] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqF9jQ--M3-tsKAnhF1dgAAANI"]
[Fri Apr 24 04:49:59.272849 2026] [:error] [pid 19101:tid 19149] [client 20.251.39.123:8679] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqF92AHj9bEvrTgbO23gQAAAEw"]
[Fri Apr 24 04:49:59.791713 2026] [:error] [pid 19102:tid 19183] [client 20.251.39.123:65485] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqF9wDSgrbLEZbkqD6iaQAAAJM"]
[Fri Apr 24 04:50:00.311541 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:65051] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "aeqF-OKCZKf8_u2LKiAo3wAAARI"]
[Fri Apr 24 04:50:00.829832 2026] [:error] [pid 52129:tid 52137] [client 20.251.39.123:4050] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "aeqF-OKCZKf8_u2LKiAo5AAAAQQ"]
[Fri Apr 24 04:50:01.348115 2026] [:error] [pid 52129:tid 52154] [client 20.251.39.123:8671] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "aeqF-eKCZKf8_u2LKiAo6QAAARU"]
[Fri Apr 24 04:50:01.866899 2026] [:error] [pid 19100:tid 19111] [client 20.251.39.123:65079] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gssdd.php"] [unique_id "aeqF-bF_hzQs4Cqbiffz8wAAAAI"]
[Fri Apr 24 04:50:02.385583 2026] [:error] [pid 19102:tid 19168] [client 20.251.39.123:55483] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeqF-gDSgrbLEZbkqD6ieAAAAIQ"]
[Fri Apr 24 04:50:02.901973 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:3406] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeqF-jQ--M3-tsKAnhF1igAAAMY"]
[Fri Apr 24 04:50:03.420984 2026] [:error] [pid 19200:tid 19223] [client 20.251.39.123:64993] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeqF-zQ--M3-tsKAnhF1kQAAAM8"]
[Fri Apr 24 04:50:03.939756 2026] [:error] [pid 52129:tid 52153] [client 20.251.39.123:8677] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeqF--KCZKf8_u2LKiAo8wAAARQ"]
[Fri Apr 24 04:50:04.481537 2026] [:error] [pid 19200:tid 19222] [client 20.251.39.123:8645] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeqF_DQ--M3-tsKAnhF1nAAAAM4"]
[Fri Apr 24 04:50:05.000027 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:8644] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeqF_OKCZKf8_u2LKiAo_gAAAQ8"]
[Fri Apr 24 04:50:05.521209 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:65506] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeqF_eKCZKf8_u2LKiApAwAAARY"]
[Fri Apr 24 04:50:06.040485 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:64973] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bs1.php"] [unique_id "aeqF_jQ--M3-tsKAnhF1pAAAANM"]
[Fri Apr 24 04:50:06.603625 2026] [:error] [pid 19102:tid 19171] [client 20.251.39.123:65076] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeqF_gDSgrbLEZbkqD6igAAAAIc"]
[Fri Apr 24 04:50:07.125062 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:8647] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeqF_-KCZKf8_u2LKiApDgAAAQ8"]
[Fri Apr 24 04:50:07.643095 2026] [:error] [pid 52129:tid 52155] [client 20.251.39.123:64972] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeqF_-KCZKf8_u2LKiApFAAAARY"]
[Fri Apr 24 04:50:08.159713 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:3446] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeqGAGAHj9bEvrTgbO23zQAAAEY"]
[Fri Apr 24 04:50:08.689817 2026] [:error] [pid 19200:tid 19230] [client 20.251.39.123:8674] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeqGADQ--M3-tsKAnhF1sQAAANY"]
[Fri Apr 24 04:50:09.209364 2026] [:error] [pid 19200:tid 19232] [client 20.251.39.123:3980] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeqGATQ--M3-tsKAnhF1uAAAANg"]
[Fri Apr 24 04:50:09.741528 2026] [:error] [pid 52129:tid 52144] [client 20.251.39.123:3397] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeqGAeKCZKf8_u2LKiApHAAAAQs"]
[Fri Apr 24 04:50:10.261602 2026] [:error] [pid 19200:tid 19214] [client 20.251.39.123:55441] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/axx.php"] [unique_id "aeqGAjQ--M3-tsKAnhF1wAAAAMY"]
[Fri Apr 24 04:50:10.784591 2026] [:error] [pid 19200:tid 19210] [client 20.251.39.123:55447] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aeqGAjQ--M3-tsKAnhF1xQAAAMI"]
[Fri Apr 24 04:50:11.301976 2026] [:error] [pid 52129:tid 52134] [client 20.251.39.123:3973] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aeqGA-KCZKf8_u2LKiApIgAAAQE"]
[Fri Apr 24 04:50:11.819617 2026] [:error] [pid 52129:tid 52147] [client 20.251.39.123:55424] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aeqGA-KCZKf8_u2LKiApJQAAAQ4"]
[Fri Apr 24 04:50:12.338816 2026] [:error] [pid 52129:tid 52156] [client 20.251.39.123:8683] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfashell.php"] [unique_id "aeqGBOKCZKf8_u2LKiApLAAAARc"]
[Fri Apr 24 04:50:12.869740 2026] [:error] [pid 52129:tid 52149] [client 20.251.39.123:8676] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeqGBOKCZKf8_u2LKiApNQAAARA"]
[Fri Apr 24 04:50:13.388114 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:65013] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeqGBTQ--M3-tsKAnhF1yQAAAMU"]
[Fri Apr 24 04:50:13.909805 2026] [:error] [pid 19200:tid 19228] [client 20.251.39.123:65078] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeqGBTQ--M3-tsKAnhF1zQAAANQ"]
[Fri Apr 24 04:50:14.428301 2026] [:error] [pid 19100:tid 19124] [client 20.251.39.123:65002] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gettest.php"] [unique_id "aeqGBrF_hzQs4Cqbiffz-wAAAA4"]
[Fri Apr 24 04:50:14.955693 2026] [:error] [pid 19102:tid 19169] [client 20.251.39.123:4065] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeqGBgDSgrbLEZbkqD6ipgAAAIU"]
[Fri Apr 24 04:50:15.473821 2026] [:error] [pid 19100:tid 19120] [client 20.251.39.123:55484] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeqGB7F_hzQs4Cqbiff0AAAAAAo"]
[Fri Apr 24 04:50:15.992001 2026] [:error] [pid 52129:tid 52151] [client 20.251.39.123:64971] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeqGB-KCZKf8_u2LKiApPAAAARI"]
[Fri Apr 24 04:50:16.515590 2026] [:error] [pid 19200:tid 19212] [client 20.251.39.123:64962] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "aeqGCDQ--M3-tsKAnhF13QAAAMQ"]
[Fri Apr 24 04:50:17.036099 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:65521] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeqGCTQ--M3-tsKAnhF14QAAAMc"]
[Fri Apr 24 04:50:17.559330 2026] [:error] [pid 19100:tid 19111] [client 20.251.39.123:55457] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeqGCbF_hzQs4Cqbiff0BgAAAAI"]
[Fri Apr 24 04:50:18.078332 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:55469] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeqGCuKCZKf8_u2LKiApQgAAAQY"]
[Fri Apr 24 04:50:18.602833 2026] [:error] [pid 52129:tid 52141] [client 20.251.39.123:55461] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file48.php"] [unique_id "aeqGCuKCZKf8_u2LKiApSAAAAQg"]
[Fri Apr 24 04:50:19.136458 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:8654] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aeqGCzQ--M3-tsKAnhF16wAAANM"]
[Fri Apr 24 04:50:19.656910 2026] [:error] [pid 19102:tid 19182] [client 20.251.39.123:8652] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aeqGCwDSgrbLEZbkqD6itAAAAJI"]
[Fri Apr 24 04:50:20.180112 2026] [:error] [pid 19100:tid 19116] [client 20.251.39.123:8668] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aeqGDLF_hzQs4Cqbiff0DQAAAAc"]
[Fri Apr 24 04:50:20.698788 2026] [:error] [pid 19200:tid 19218] [client 20.251.39.123:65082] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/g.php"] [unique_id "aeqGDDQ--M3-tsKAnhF1-AAAAMo"]
[Fri Apr 24 04:50:21.271288 2026] [:error] [pid 19200:tid 19215] [client 20.251.39.123:3402] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqGDTQ--M3-tsKAnhF2AAAAAMc"]
[Fri Apr 24 04:50:21.788769 2026] [:error] [pid 19200:tid 19227] [client 20.251.39.123:8661] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqGDTQ--M3-tsKAnhF2BgAAANM"]
[Fri Apr 24 04:50:22.306350 2026] [:error] [pid 19102:tid 19173] [client 20.251.39.123:4067] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqGDgDSgrbLEZbkqD6iuwAAAIk"]
[Fri Apr 24 04:50:22.849348 2026] [:error] [pid 19101:tid 19141] [client 20.251.39.123:8663] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/"] [unique_id "aeqGDmAHj9bEvrTgbO24IgAAAEQ"]
[Fri Apr 24 04:50:23.383393 2026] [:error] [pid 19101:tid 19148] [client 20.251.39.123:8695] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeqGD2AHj9bEvrTgbO24JQAAAEs"]
[Fri Apr 24 04:50:23.909077 2026] [:error] [pid 19101:tid 19156] [client 20.251.39.123:55459] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeqGD2AHj9bEvrTgbO24KQAAAFM"]
[Fri Apr 24 04:50:24.427360 2026] [:error] [pid 19101:tid 19149] [client 20.251.39.123:65025] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeqGEGAHj9bEvrTgbO24LAAAAEw"]
[Fri Apr 24 04:50:24.982313 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:55467] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "aeqGEADSgrbLEZbkqD6iwgAAAJA"]
[Fri Apr 24 04:50:25.535196 2026] [:error] [pid 19101:tid 19143] [client 20.251.39.123:64982] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeqGEWAHj9bEvrTgbO24MAAAAEY"]
[Fri Apr 24 04:50:26.178120 2026] [:error] [pid 52129:tid 52152] [client 20.251.39.123:4078] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeqGEuKCZKf8_u2LKiApWAAAARM"]
[Fri Apr 24 04:50:26.806193 2026] [:error] [pid 52129:tid 52139] [client 20.251.39.123:65037] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeqGEuKCZKf8_u2LKiApXAAAAQY"]
[Fri Apr 24 04:50:27.360826 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:65081] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ew.php"] [unique_id "aeqGEwDSgrbLEZbkqD6i0AAAAI0"]
[Fri Apr 24 04:50:27.907029 2026] [:error] [pid 19102:tid 19180] [client 20.251.39.123:8643] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file21.php"] [unique_id "aeqGEwDSgrbLEZbkqD6i1AAAAJA"]
[Fri Apr 24 04:50:28.545520 2026] [:error] [pid 19102:tid 19172] [client 20.251.39.123:65501] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file21.php"] [unique_id "aeqGFADSgrbLEZbkqD6i2QAAAIg"]
[Fri Apr 24 04:50:29.139724 2026] [:error] [pid 19102:tid 19185] [client 20.251.39.123:4049] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file21.php"] [unique_id "aeqGFQDSgrbLEZbkqD6i3gAAAJU"]
[Fri Apr 24 04:50:29.709101 2026] [:error] [pid 52129:tid 52148] [client 20.251.39.123:8694] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file21.php"] [unique_id "aeqGFeKCZKf8_u2LKiApagAAAQ8"]
[Fri Apr 24 04:50:30.238663 2026] [:error] [pid 19200:tid 19211] [client 20.251.39.123:8685] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqGFjQ--M3-tsKAnhF2PwAAAMM"]
[Fri Apr 24 04:50:30.813503 2026] [:error] [pid 19100:tid 19112] [client 20.251.39.123:65008] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqGFrF_hzQs4Cqbiff0FQAAAAM"]
[Fri Apr 24 04:50:31.349690 2026] [:error] [pid 19200:tid 19213] [client 20.251.39.123:64966] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqGFzQ--M3-tsKAnhF2RgAAAMU"]
[Fri Apr 24 04:50:31.878012 2026] [:error] [pid 19101:tid 19145] [client 20.251.39.123:4085] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqGF2AHj9bEvrTgbO24NwAAAEg"]
[Fri Apr 24 04:50:32.400375 2026] [:error] [pid 52129:tid 52140] [client 20.251.39.123:8658] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file18.php"] [unique_id "aeqGGOKCZKf8_u2LKiApbwAAAQc"]
[Fri Apr 24 04:50:32.920597 2026] [:error] [pid 19102:tid 19177] [client 20.251.39.123:55454] [client 20.251.39.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file18.php"] [unique_id "aeqGGADSgrbLEZbkqD6i7gAAAI0"]
[Fri Apr 24 04:50:35.961050 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.251.39.123:55480] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:50:38.903292 2026] [proxy_fcgi:error] [pid 52129:tid 52156] [client 20.251.39.123:55480] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:50:41.427077 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.251.39.123:55480] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 04:50:43.619390 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 20.251.39.123:55480] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:02.797741 2026] [proxy_fcgi:error] [pid 19200:tid 19230] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:06.273274 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:08.798402 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:11.270885 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:11.551121 2026] [authz_core:error] [pid 19200:tid 19223] [client 20.216.153.175:63231] AH01630: client denied by server configuration: /home/end2endh/public_html/.sghb.php
[Fri Apr 24 07:26:13.650080 2026] [proxy_fcgi:error] [pid 19200:tid 19223] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:15.945676 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:18.297173 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:20.720328 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:23.061443 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:25.440887 2026] [proxy_fcgi:error] [pid 19200:tid 19209] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:27.671490 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.216.153.175:63231] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:26:27.951951 2026] [:error] [pid 19200:tid 19215] [client 20.216.153.175:63231] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqqozQ--M3-tsKAnhHSowAAAMc"]
[Fri Apr 24 07:26:29.085827 2026] [:error] [pid 19102:tid 19170] [client 20.216.153.175:55660] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqqpQDSgrbLEZbkqD7tEgAAAIY"]
[Fri Apr 24 07:26:30.272456 2026] [:error] [pid 52129:tid 52140] [client 20.216.153.175:13738] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqqpuKCZKf8_u2LKiCuBgAAAQc"]
[Fri Apr 24 07:26:31.431876 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:10829] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.dj/index.php"] [unique_id "aeqqp-KCZKf8_u2LKiCuEwAAARQ"]
[Fri Apr 24 07:26:32.480142 2026] [:error] [pid 19102:tid 19175] [client 20.216.153.175:1358] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqqqADSgrbLEZbkqD7tHgAAAIs"]
[Fri Apr 24 07:26:34.055041 2026] [:error] [pid 19100:tid 19110] [client 20.216.153.175:1378] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqqqrF_hzQs4CqbifcmHgAAAAE"]
[Fri Apr 24 07:26:35.090379 2026] [:error] [pid 52129:tid 52147] [client 20.216.153.175:30253] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqqq-KCZKf8_u2LKiCuRQAAAQ4"]
[Fri Apr 24 07:26:36.417732 2026] [:error] [pid 19102:tid 19180] [client 20.216.153.175:1177] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqqrADSgrbLEZbkqD7tMAAAAJA"]
[Fri Apr 24 07:26:37.423441 2026] [:error] [pid 52129:tid 52156] [client 20.216.153.175:1201] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqqreKCZKf8_u2LKiCuWgAAARc"]
[Fri Apr 24 07:26:38.390634 2026] [:error] [pid 19200:tid 19213] [client 20.216.153.175:1505] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqqrjQ--M3-tsKAnhHS7AAAAMU"]
[Fri Apr 24 07:26:39.336225 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:31299] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqqr-KCZKf8_u2LKiCuYQAAAQ0"]
[Fri Apr 24 07:26:40.397142 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:41370] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/.tmb/"] [unique_id "aeqqsOKCZKf8_u2LKiCubQAAAQ0"]
[Fri Apr 24 07:26:42.571283 2026] [:error] [pid 52129:tid 52152] [client 20.216.153.175:1489] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/one.php"] [unique_id "aeqqsuKCZKf8_u2LKiCuggAAARM"]
[Fri Apr 24 07:26:45.381642 2026] [:error] [pid 19100:tid 19126] [client 20.216.153.175:1178] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/one.php"] [unique_id "aeqqtbF_hzQs4CqbifcmMQAAABA"]
[Fri Apr 24 07:26:46.708129 2026] [:error] [pid 19100:tid 19125] [client 20.216.153.175:57648] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/one.php"] [unique_id "aeqqtrF_hzQs4CqbifcmPQAAAA8"]
[Fri Apr 24 07:26:47.877640 2026] [:error] [pid 19101:tid 19156] [client 20.216.153.175:27704] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/one.php"] [unique_id "aeqqt2AHj9bEvrTgbO3vIQAAAFM"]
[Fri Apr 24 07:26:49.480909 2026] [:error] [pid 52129:tid 52148] [client 20.216.153.175:42690] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqqueKCZKf8_u2LKiCusQAAAQ8"]
[Fri Apr 24 07:26:50.844567 2026] [:error] [pid 19100:tid 19133] [client 20.216.153.175:44679] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqqurF_hzQs4CqbifcmWQAAABc"]
[Fri Apr 24 07:26:52.358546 2026] [:error] [pid 19102:tid 19179] [client 20.216.153.175:28669] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqqvADSgrbLEZbkqD7teAAAAI8"]
[Fri Apr 24 07:26:53.600880 2026] [:error] [pid 19102:tid 19180] [client 20.216.153.175:51978] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqqvQDSgrbLEZbkqD7tgQAAAJA"]
[Fri Apr 24 07:26:54.744887 2026] [:error] [pid 52129:tid 52139] [client 20.216.153.175:44698] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dragonshell.php"] [unique_id "aeqqvuKCZKf8_u2LKiCu2AAAAQY"]
[Fri Apr 24 07:26:55.799816 2026] [:error] [pid 19102:tid 19183] [client 20.216.153.175:57558] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dragonshell.php"] [unique_id "aeqqvwDSgrbLEZbkqD7tlAAAAJM"]
[Fri Apr 24 07:26:57.283390 2026] [:error] [pid 19102:tid 19181] [client 20.216.153.175:57600] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dragonshell.php"] [unique_id "aeqqwQDSgrbLEZbkqD7toAAAAJE"]
[Fri Apr 24 07:26:58.849335 2026] [:error] [pid 19102:tid 19164] [client 20.216.153.175:1487] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dragonshell.php"] [unique_id "aeqqwgDSgrbLEZbkqD7tpgAAAIA"]
[Fri Apr 24 07:26:59.805552 2026] [:error] [pid 52129:tid 52141] [client 20.216.153.175:9022] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no20.php"] [unique_id "aeqqw-KCZKf8_u2LKiCu_wAAAQg"]
[Fri Apr 24 07:27:00.887448 2026] [:error] [pid 19100:tid 19127] [client 20.216.153.175:14770] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no20.php"] [unique_id "aeqqxLF_hzQs4CqbifcmegAAABE"]
[Fri Apr 24 07:27:01.979061 2026] [:error] [pid 19100:tid 19119] [client 20.216.153.175:57556] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no20.php"] [unique_id "aeqqxbF_hzQs4CqbifcmhAAAAAk"]
[Fri Apr 24 07:27:03.063027 2026] [:error] [pid 19200:tid 19223] [client 20.216.153.175:8971] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no20.php"] [unique_id "aeqqxzQ--M3-tsKAnhHTQgAAAM8"]
[Fri Apr 24 07:27:04.007781 2026] [:error] [pid 19101:tid 19141] [client 20.216.153.175:14759] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-alone.php"] [unique_id "aeqqyGAHj9bEvrTgbO3vVgAAAEQ"]
[Fri Apr 24 07:27:04.970833 2026] [:error] [pid 19101:tid 19155] [client 20.216.153.175:16072] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-alone.php"] [unique_id "aeqqyGAHj9bEvrTgbO3vWwAAAFI"]
[Fri Apr 24 07:27:06.344853 2026] [:error] [pid 19102:tid 19168] [client 20.216.153.175:59815] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-alone.php"] [unique_id "aeqqygDSgrbLEZbkqD7tvQAAAIQ"]
[Fri Apr 24 07:27:07.659442 2026] [:error] [pid 19200:tid 19211] [client 20.216.153.175:57281] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-alone.php"] [unique_id "aeqqyzQ--M3-tsKAnhHTWAAAAMM"]
[Fri Apr 24 07:27:09.044411 2026] [:error] [pid 19102:tid 19175] [client 20.216.153.175:7506] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yasnu.php"] [unique_id "aeqqzQDSgrbLEZbkqD7twQAAAIs"]
[Fri Apr 24 07:27:10.170946 2026] [:error] [pid 19102:tid 19184] [client 20.216.153.175:55187] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yasnu.php"] [unique_id "aeqqzgDSgrbLEZbkqD7txgAAAJQ"]
[Fri Apr 24 07:27:12.704018 2026] [:error] [pid 52129:tid 52156] [client 20.216.153.175:57565] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yasnu.php"] [unique_id "aeqq0OKCZKf8_u2LKiCvawAAARc"]
[Fri Apr 24 07:27:13.747954 2026] [:error] [pid 19101:tid 19145] [client 20.216.153.175:55172] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/yasnu.php"] [unique_id "aeqq0WAHj9bEvrTgbO3vZwAAAEg"]
[Fri Apr 24 07:27:14.587858 2026] [:error] [pid 52129:tid 52144] [client 20.216.153.175:13786] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sl.php"] [unique_id "aeqq0uKCZKf8_u2LKiCvrwAAAQs"]
[Fri Apr 24 07:27:15.731200 2026] [:error] [pid 19100:tid 19129] [client 20.216.153.175:59792] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sl.php"] [unique_id "aeqq07F_hzQs4CqbifcmlgAAABM"]
[Fri Apr 24 07:27:17.422349 2026] [:error] [pid 19100:tid 19128] [client 20.216.153.175:57305] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sl.php"] [unique_id "aeqq1bF_hzQs4CqbifcmpAAAABI"]
[Fri Apr 24 07:27:18.362462 2026] [:error] [pid 19200:tid 19222] [client 20.216.153.175:9012] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sl.php"] [unique_id "aeqq1jQ--M3-tsKAnhHTuQAAAM4"]
[Fri Apr 24 07:27:19.911356 2026] [:error] [pid 52129:tid 52157] [client 20.216.153.175:28660] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqq1-KCZKf8_u2LKiCwAgAAARg"]
[Fri Apr 24 07:27:20.765624 2026] [:error] [pid 19101:tid 19151] [client 20.216.153.175:57305] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqq2GAHj9bEvrTgbO3vgAAAAE4"]
[Fri Apr 24 07:27:21.912850 2026] [:error] [pid 52129:tid 52151] [client 20.216.153.175:16101] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqq2eKCZKf8_u2LKiCwIAAAARI"]
[Fri Apr 24 07:27:24.309556 2026] [:error] [pid 52129:tid 52140] [client 20.216.153.175:21414] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sw.php"] [unique_id "aeqq3OKCZKf8_u2LKiCwLgAAAQc"]
[Fri Apr 24 07:27:29.251008 2026] [proxy_fcgi:error] [pid 19200:tid 19232] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:32.473895 2026] [proxy_fcgi:error] [pid 19200:tid 19220] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:34.974613 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:37.223068 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:39.521010 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:41.814317 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:44.152387 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:46.421399 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:48.829462 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:51.588857 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:53.981427 2026] [proxy_fcgi:error] [pid 19200:tid 19224] [client 20.216.153.175:1850] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:27:54.226370 2026] [:error] [pid 19200:tid 19218] [client 20.216.153.175:1850] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqq-jQ--M3-tsKAnhHUxQAAAMo"]
[Fri Apr 24 07:27:55.963905 2026] [:error] [pid 19101:tid 19156] [client 20.216.153.175:59791] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqq-2AHj9bEvrTgbO3v_QAAAFM"]
[Fri Apr 24 07:27:57.588203 2026] [:error] [pid 19102:tid 19170] [client 20.216.153.175:59832] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqq_QDSgrbLEZbkqD7u1wAAAIY"]
[Fri Apr 24 07:27:58.480520 2026] [:error] [pid 19101:tid 19144] [client 20.216.153.175:47868] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ktfow.php"] [unique_id "aeqq_mAHj9bEvrTgbO3wBgAAAEc"]
[Fri Apr 24 07:27:59.308595 2026] [:error] [pid 19101:tid 19149] [client 20.216.153.175:12222] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqq_2AHj9bEvrTgbO3wDQAAAEw"]
[Fri Apr 24 07:28:00.285929 2026] [:error] [pid 19101:tid 19156] [client 20.216.153.175:39119] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqrAGAHj9bEvrTgbO3wFAAAAFM"]
[Fri Apr 24 07:28:02.099733 2026] [:error] [pid 19102:tid 19172] [client 20.216.153.175:9253] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqrAgDSgrbLEZbkqD7u9AAAAIg"]
[Fri Apr 24 07:28:03.203107 2026] [:error] [pid 52129:tid 52141] [client 20.216.153.175:39148] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/mode.php"] [unique_id "aeqrA-KCZKf8_u2LKiCx3gAAAQg"]
[Fri Apr 24 07:28:05.140176 2026] [:error] [pid 19101:tid 19154] [client 20.216.153.175:49365] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqrBWAHj9bEvrTgbO3wJAAAAFE"]
[Fri Apr 24 07:28:05.865449 2026] [:error] [pid 19101:tid 19153] [client 20.216.153.175:39114] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqrBWAHj9bEvrTgbO3wKgAAAFA"]
[Fri Apr 24 07:28:07.538726 2026] [:error] [pid 52129:tid 52137] [client 20.216.153.175:21437] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqrB-KCZKf8_u2LKiCyAwAAAQQ"]
[Fri Apr 24 07:28:08.536785 2026] [:error] [pid 52129:tid 52142] [client 20.216.153.175:21412] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Xx.php"] [unique_id "aeqrCOKCZKf8_u2LKiCyCAAAAQk"]
[Fri Apr 24 07:28:09.867790 2026] [:error] [pid 19200:tid 19219] [client 20.216.153.175:49911] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqrCTQ--M3-tsKAnhHVKgAAAMs"]
[Fri Apr 24 07:28:11.075959 2026] [:error] [pid 52129:tid 52145] [client 20.216.153.175:47871] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqrC-KCZKf8_u2LKiCyHwAAAQw"]
[Fri Apr 24 07:28:12.526788 2026] [:error] [pid 19100:tid 19128] [client 20.216.153.175:1778] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqrDLF_hzQs4CqbifcnkwAAABI"]
[Fri Apr 24 07:28:13.731313 2026] [:error] [pid 19100:tid 19116] [client 20.216.153.175:16095] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xmini.php"] [unique_id "aeqrDbF_hzQs4CqbifcnlwAAAAc"]
[Fri Apr 24 07:28:15.076145 2026] [:error] [pid 19102:tid 19167] [client 20.216.153.175:7545] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqrDwDSgrbLEZbkqD7vGQAAAIM"]
[Fri Apr 24 07:28:15.986900 2026] [:error] [pid 19100:tid 19126] [client 20.216.153.175:12160] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqrD7F_hzQs4CqbifcnowAAABA"]
[Fri Apr 24 07:28:17.323396 2026] [:error] [pid 19200:tid 19227] [client 20.216.153.175:50895] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqrETQ--M3-tsKAnhHVcgAAANM"]
[Fri Apr 24 07:28:18.149145 2026] [:error] [pid 19102:tid 19165] [client 20.216.153.175:9232] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2468.php"] [unique_id "aeqrEgDSgrbLEZbkqD7vJgAAAIE"]
[Fri Apr 24 07:28:18.913218 2026] [:error] [pid 52129:tid 52155] [client 20.216.153.175:50936] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqrEuKCZKf8_u2LKiCyjQAAARY"]
[Fri Apr 24 07:28:19.754616 2026] [:error] [pid 19102:tid 19164] [client 20.216.153.175:50881] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqrEwDSgrbLEZbkqD7vLQAAAIA"]
[Fri Apr 24 07:28:21.202458 2026] [:error] [pid 52129:tid 52140] [client 20.216.153.175:23700] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqrFeKCZKf8_u2LKiCynQAAAQc"]
[Fri Apr 24 07:28:22.377206 2026] [:error] [pid 19100:tid 19114] [client 20.216.153.175:11118] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeqrFrF_hzQs4CqbifcnuwAAAAU"]
[Fri Apr 24 07:28:24.032181 2026] [:error] [pid 19200:tid 19226] [client 20.216.153.175:38064] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqrGDQ--M3-tsKAnhHVmAAAANI"]
[Fri Apr 24 07:28:25.446084 2026] [:error] [pid 52129:tid 52144] [client 20.216.153.175:12210] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqrGeKCZKf8_u2LKiCywwAAAQs"]
[Fri Apr 24 07:28:26.525133 2026] [:error] [pid 19100:tid 19125] [client 20.216.153.175:49903] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqrGrF_hzQs4Cqbifcn0AAAAA8"]
[Fri Apr 24 07:28:27.230932 2026] [:error] [pid 19101:tid 19146] [client 20.216.153.175:9225] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/dx.php"] [unique_id "aeqrG2AHj9bEvrTgbO3woQAAAEk"]
[Fri Apr 24 07:28:28.256996 2026] [:error] [pid 19102:tid 19172] [client 20.216.153.175:43023] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqrHADSgrbLEZbkqD7vWwAAAIg"]
[Fri Apr 24 07:28:29.472456 2026] [:error] [pid 19102:tid 19169] [client 20.216.153.175:39124] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqrHQDSgrbLEZbkqD7vYgAAAIU"]
[Fri Apr 24 07:28:31.151457 2026] [:error] [pid 19200:tid 19231] [client 20.216.153.175:23733] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqrHzQ--M3-tsKAnhHV2AAAANc"]
[Fri Apr 24 07:28:33.180498 2026] [:error] [pid 19102:tid 19179] [client 20.216.153.175:21831] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amdin.php"] [unique_id "aeqrIQDSgrbLEZbkqD7vewAAAI8"]
[Fri Apr 24 07:28:34.429764 2026] [:error] [pid 19100:tid 19129] [client 20.216.153.175:21381] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqrIrF_hzQs4Cqbifcn8wAAABM"]
[Fri Apr 24 07:28:36.214352 2026] [:error] [pid 19100:tid 19124] [client 20.216.153.175:12221] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqrJLF_hzQs4CqbifcoBgAAAA4"]
[Fri Apr 24 07:28:37.365773 2026] [:error] [pid 19101:tid 19160] [client 20.216.153.175:21408] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqrJWAHj9bEvrTgbO3w3AAAAFc"]
[Fri Apr 24 07:28:39.113350 2026] [:error] [pid 19101:tid 19143] [client 20.216.153.175:49387] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/huya.php"] [unique_id "aeqrJ2AHj9bEvrTgbO3w7QAAAEY"]
[Fri Apr 24 07:28:41.807667 2026] [:error] [pid 19102:tid 19168] [client 20.216.153.175:12741] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqrKQDSgrbLEZbkqD7vngAAAIQ"]
[Fri Apr 24 07:28:44.770913 2026] [:error] [pid 19102:tid 19169] [client 20.216.153.175:46006] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqrLADSgrbLEZbkqD7vtgAAAIU"]
[Fri Apr 24 07:28:46.766278 2026] [:error] [pid 19101:tid 19150] [client 20.216.153.175:45997] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqrLmAHj9bEvrTgbO3w_AAAAE0"]
[Fri Apr 24 07:28:48.607542 2026] [:error] [pid 19101:tid 19139] [client 20.216.153.175:52736] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/puc.php"] [unique_id "aeqrMGAHj9bEvrTgbO3xAAAAAEI"]
[Fri Apr 24 07:28:50.024384 2026] [:error] [pid 19102:tid 19176] [client 20.216.153.175:49930] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "aeqrMgDSgrbLEZbkqD7v4AAAAIw"]
[Fri Apr 24 07:28:52.944694 2026] [proxy_fcgi:error] [pid 52129:tid 52141] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:28:55.450435 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:28:58.723857 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:01.290933 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:03.751270 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:05.964632 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:08.515907 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:11.030087 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:13.566901 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:15.980914 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:18.277671 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:20.456672 2026] [proxy_fcgi:error] [pid 52129:tid 52142] [client 20.216.153.175:39825] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:29:20.722352 2026] [:error] [pid 52129:tid 52143] [client 20.216.153.175:39825] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqrUOKCZKf8_u2LKiCz5QAAAQo"]
[Fri Apr 24 07:29:21.780354 2026] [:error] [pid 19101:tid 19150] [client 20.216.153.175:43511] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqrUWAHj9bEvrTgbO3xegAAAE0"]
[Fri Apr 24 07:29:23.604294 2026] [:error] [pid 19100:tid 19122] [client 20.216.153.175:10755] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqrU7F_hzQs4CqbifcovAAAAAw"]
[Fri Apr 24 07:29:24.590005 2026] [:error] [pid 19200:tid 19209] [client 20.216.153.175:44660] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqrVDQ--M3-tsKAnhHXEAAAAME"]
[Fri Apr 24 07:29:25.686342 2026] [:error] [pid 19100:tid 19130] [client 20.216.153.175:32105] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqrVbF_hzQs4CqbifcovwAAABQ"]
[Fri Apr 24 07:29:26.527488 2026] [:error] [pid 52129:tid 52134] [client 20.216.153.175:10771] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqrVuKCZKf8_u2LKiC0BAAAAQE"]
[Fri Apr 24 07:29:29.536812 2026] [:error] [pid 19200:tid 19216] [client 20.216.153.175:40684] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqrWTQ--M3-tsKAnhHXKQAAAMg"]
[Fri Apr 24 07:29:30.391009 2026] [:error] [pid 19200:tid 19232] [client 20.216.153.175:32075] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "aeqrWjQ--M3-tsKAnhHXOQAAANg"]
[Fri Apr 24 07:29:31.955485 2026] [:error] [pid 52129:tid 52135] [client 20.216.153.175:31361] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqrW-KCZKf8_u2LKiC0LAAAAQI"]
[Fri Apr 24 07:29:33.220687 2026] [:error] [pid 19102:tid 19172] [client 20.216.153.175:42497] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqrXQDSgrbLEZbkqD7wvwAAAIg"]
[Fri Apr 24 07:29:34.090525 2026] [:error] [pid 19200:tid 19231] [client 20.216.153.175:31400] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqrXjQ--M3-tsKAnhHXVwAAANc"]
[Fri Apr 24 07:29:35.280025 2026] [:error] [pid 19102:tid 19188] [client 20.216.153.175:56931] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/shell.php"] [unique_id "aeqrXwDSgrbLEZbkqD7w1AAAAJg"]
[Fri Apr 24 07:29:36.040914 2026] [:error] [pid 52129:tid 52147] [client 20.216.153.175:10584] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/max.php"] [unique_id "aeqrYOKCZKf8_u2LKiC0QwAAAQ4"]
[Fri Apr 24 07:29:36.925576 2026] [:error] [pid 52129:tid 52156] [client 20.216.153.175:42542] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/max.php"] [unique_id "aeqrYOKCZKf8_u2LKiC0TgAAARc"]
[Fri Apr 24 07:29:37.911350 2026] [:error] [pid 19200:tid 19224] [client 20.216.153.175:24911] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/max.php"] [unique_id "aeqrYTQ--M3-tsKAnhHXegAAANA"]
[Fri Apr 24 07:29:38.873673 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:31364] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/max.php"] [unique_id "aeqrYuKCZKf8_u2LKiC0XgAAAQU"]
[Fri Apr 24 07:29:39.484533 2026] [:error] [pid 19101:tid 19160] [client 20.216.153.175:56321] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqrY2AHj9bEvrTgbO3x2gAAAFc"]
[Fri Apr 24 07:29:41.799040 2026] [:error] [pid 52129:tid 52142] [client 20.216.153.175:10595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqrZeKCZKf8_u2LKiC0aQAAAQk"]
[Fri Apr 24 07:29:43.155482 2026] [:error] [pid 19101:tid 19153] [client 20.216.153.175:22618] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqrZ2AHj9bEvrTgbO3x4gAAAFA"]
[Fri Apr 24 07:29:44.405557 2026] [:error] [pid 19101:tid 19137] [client 20.216.153.175:57085] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/seo.php"] [unique_id "aeqraGAHj9bEvrTgbO3x6wAAAEA"]
[Fri Apr 24 07:29:46.804008 2026] [:error] [pid 19100:tid 19124] [client 20.216.153.175:38634] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqrarF_hzQs4CqbifcpDQAAAA4"]
[Fri Apr 24 07:29:48.003118 2026] [:error] [pid 19100:tid 19128] [client 20.216.153.175:55692] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqrbLF_hzQs4CqbifcpEQAAABI"]
[Fri Apr 24 07:29:49.531787 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:1611] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqrbeKCZKf8_u2LKiC0ogAAAQU"]
[Fri Apr 24 07:29:50.318730 2026] [:error] [pid 19101:tid 19137] [client 20.216.153.175:57914] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7.php"] [unique_id "aeqrbmAHj9bEvrTgbO3x_wAAAEA"]
[Fri Apr 24 07:29:51.609764 2026] [:error] [pid 19200:tid 19210] [client 20.216.153.175:1877] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqrbzQ--M3-tsKAnhHX4wAAAMI"]
[Fri Apr 24 07:29:52.312362 2026] [:error] [pid 52129:tid 52137] [client 20.216.153.175:38037] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqrcOKCZKf8_u2LKiC0twAAAQQ"]
[Fri Apr 24 07:29:53.090866 2026] [:error] [pid 52129:tid 52141] [client 20.216.153.175:11103] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqrceKCZKf8_u2LKiC0uQAAAQg"]
[Fri Apr 24 07:29:55.063738 2026] [:error] [pid 19200:tid 19216] [client 20.216.153.175:49896] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aeqrczQ--M3-tsKAnhHYBAAAAMg"]
[Fri Apr 24 07:29:56.420761 2026] [:error] [pid 52129:tid 52150] [client 20.216.153.175:47830] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqrdOKCZKf8_u2LKiC0xwAAARE"]
[Fri Apr 24 07:29:57.268659 2026] [:error] [pid 19200:tid 19222] [client 20.216.153.175:1814] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqrdTQ--M3-tsKAnhHYFAAAAM4"]
[Fri Apr 24 07:29:58.395695 2026] [:error] [pid 19100:tid 19132] [client 20.216.153.175:16105] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqrdrF_hzQs4CqbifcpSAAAABY"]
[Fri Apr 24 07:29:59.308787 2026] [:error] [pid 52129:tid 52148] [client 20.216.153.175:8986] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/1.php"] [unique_id "aeqrd-KCZKf8_u2LKiC06wAAAQ8"]
[Fri Apr 24 07:30:00.638560 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:25790] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqreOKCZKf8_u2LKiC0-AAAARQ"]
[Fri Apr 24 07:30:01.519107 2026] [:error] [pid 52129:tid 52156] [client 20.216.153.175:42736] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqreeKCZKf8_u2LKiC1AQAAARc"]
[Fri Apr 24 07:30:02.270521 2026] [:error] [pid 19100:tid 19134] [client 20.216.153.175:22249] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqrerF_hzQs4CqbifcpXAAAABg"]
[Fri Apr 24 07:30:03.722950 2026] [:error] [pid 52129:tid 52155] [client 20.216.153.175:22209] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/2.php"] [unique_id "aeqre-KCZKf8_u2LKiC1FAAAARY"]
[Fri Apr 24 07:30:05.009736 2026] [:error] [pid 19200:tid 19226] [client 20.216.153.175:54963] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqrfTQ--M3-tsKAnhHYSAAAANI"]
[Fri Apr 24 07:30:06.117018 2026] [:error] [pid 19200:tid 19210] [client 20.216.153.175:1208] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqrfjQ--M3-tsKAnhHYXAAAAMI"]
[Fri Apr 24 07:30:07.160185 2026] [:error] [pid 19100:tid 19118] [client 20.216.153.175:16808] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqrf7F_hzQs4CqbifcpawAAAAg"]
[Fri Apr 24 07:30:08.053478 2026] [:error] [pid 19101:tid 19141] [client 20.216.153.175:16361] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/3.php"] [unique_id "aeqrgGAHj9bEvrTgbO3yLAAAAEQ"]
[Fri Apr 24 07:30:08.860933 2026] [:error] [pid 19101:tid 19144] [client 20.216.153.175:7706] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqrgGAHj9bEvrTgbO3yMAAAAEc"]
[Fri Apr 24 07:30:09.697310 2026] [:error] [pid 19100:tid 19124] [client 20.216.153.175:1193] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqrgbF_hzQs4CqbifcpcwAAAA4"]
[Fri Apr 24 07:30:10.642166 2026] [:error] [pid 19100:tid 19121] [client 20.216.153.175:11691] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqrgrF_hzQs4CqbifcpfgAAAAs"]
[Fri Apr 24 07:30:11.256215 2026] [:error] [pid 19102:tid 19176] [client 20.216.153.175:10840] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/4.php"] [unique_id "aeqrgwDSgrbLEZbkqD7xXAAAAIw"]
[Fri Apr 24 07:30:12.480035 2026] [:error] [pid 19102:tid 19174] [client 20.216.153.175:56978] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqrhADSgrbLEZbkqD7xZAAAAIo"]
[Fri Apr 24 07:30:13.383121 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:55637] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqrheKCZKf8_u2LKiC1NgAAARQ"]
[Fri Apr 24 07:30:14.493851 2026] [:error] [pid 19102:tid 19180] [client 20.216.153.175:25549] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqrhgDSgrbLEZbkqD7xaAAAAJA"]
[Fri Apr 24 07:30:15.350753 2026] [:error] [pid 19102:tid 19171] [client 20.216.153.175:7705] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/5.php"] [unique_id "aeqrhwDSgrbLEZbkqD7xbgAAAIc"]
[Fri Apr 24 07:30:16.081532 2026] [:error] [pid 19100:tid 19134] [client 20.216.153.175:25579] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqriLF_hzQs4CqbifcpmAAAABg"]
[Fri Apr 24 07:30:16.933808 2026] [:error] [pid 19200:tid 19230] [client 20.216.153.175:29661] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqriDQ--M3-tsKAnhHYngAAANY"]
[Fri Apr 24 07:30:17.926166 2026] [:error] [pid 19102:tid 19174] [client 20.216.153.175:9477] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/6.php"] [unique_id "aeqriQDSgrbLEZbkqD7xdgAAAIo"]
[Fri Apr 24 07:30:21.138771 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:24.364269 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:26.854674 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:29.163803 2026] [proxy_fcgi:error] [pid 19200:tid 19215] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:31.597096 2026] [proxy_fcgi:error] [pid 19200:tid 19211] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:34.089323 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:36.415199 2026] [proxy_fcgi:error] [pid 19200:tid 19208] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:38.824320 2026] [proxy_fcgi:error] [pid 19200:tid 19219] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:40.623184 2026] [proxy_fcgi:error] [pid 19200:tid 19222] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:42.894559 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:45.338334 2026] [proxy_fcgi:error] [pid 19200:tid 19214] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:47.588912 2026] [proxy_fcgi:error] [pid 19200:tid 19225] [client 20.216.153.175:10498] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:30:47.864119 2026] [:error] [pid 19200:tid 19230] [client 20.216.153.175:10498] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqrpzQ--M3-tsKAnhHZIgAAANY"]
[Fri Apr 24 07:30:49.015166 2026] [:error] [pid 19101:tid 19150] [client 20.216.153.175:1688] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqrqWAHj9bEvrTgbO3yqwAAAE0"]
[Fri Apr 24 07:30:49.945394 2026] [:error] [pid 19200:tid 19217] [client 20.216.153.175:18916] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqrqTQ--M3-tsKAnhHZKgAAAMk"]
[Fri Apr 24 07:30:50.925922 2026] [:error] [pid 19102:tid 19180] [client 20.216.153.175:11344] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no18.php"] [unique_id "aeqrqgDSgrbLEZbkqD7yIQAAAJA"]
[Fri Apr 24 07:30:53.233826 2026] [:error] [pid 52129:tid 52136] [client 20.216.153.175:27104] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeqrreKCZKf8_u2LKiC12AAAAQM"]
[Fri Apr 24 07:30:54.487024 2026] [:error] [pid 52129:tid 52147] [client 20.216.153.175:18290] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeqrruKCZKf8_u2LKiC14gAAAQ4"]
[Fri Apr 24 07:30:55.126319 2026] [:error] [pid 52129:tid 52135] [client 20.216.153.175:26635] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeqrr-KCZKf8_u2LKiC15QAAAQI"]
[Fri Apr 24 07:30:55.897704 2026] [:error] [pid 52129:tid 52140] [client 20.216.153.175:27609] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fine.php"] [unique_id "aeqrr-KCZKf8_u2LKiC16QAAAQc"]
[Fri Apr 24 07:30:56.605029 2026] [:error] [pid 19101:tid 19159] [client 20.216.153.175:26687] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeqrsGAHj9bEvrTgbO3yxgAAAFY"]
[Fri Apr 24 07:30:57.302483 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:18250] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeqrseKCZKf8_u2LKiC19gAAARQ"]
[Fri Apr 24 07:30:58.503748 2026] [:error] [pid 19102:tid 19174] [client 20.216.153.175:63207] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeqrsgDSgrbLEZbkqD7yVwAAAIo"]
[Fri Apr 24 07:30:59.230651 2026] [:error] [pid 52129:tid 52136] [client 20.216.153.175:26650] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aeqrs-KCZKf8_u2LKiC2DQAAAQM"]
[Fri Apr 24 07:31:00.470528 2026] [:error] [pid 19101:tid 19148] [client 20.216.153.175:1559] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeqrtGAHj9bEvrTgbO3yzAAAAEs"]
[Fri Apr 24 07:31:01.832576 2026] [:error] [pid 19100:tid 19114] [client 20.216.153.175:24394] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeqrtbF_hzQs4Cqbifcp-wAAAAU"]
[Fri Apr 24 07:31:02.897701 2026] [:error] [pid 19100:tid 19119] [client 20.216.153.175:15349] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeqrtrF_hzQs4Cqbifcp_wAAAAk"]
[Fri Apr 24 07:31:03.862686 2026] [:error] [pid 19100:tid 19128] [client 20.216.153.175:47218] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aeqrt7F_hzQs4CqbifcqCAAAABI"]
[Fri Apr 24 07:31:05.045585 2026] [:error] [pid 19200:tid 19223] [client 20.216.153.175:38685] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeqruTQ--M3-tsKAnhHZSwAAAM8"]
[Fri Apr 24 07:31:06.066699 2026] [:error] [pid 19101:tid 19142] [client 20.216.153.175:63337] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeqrumAHj9bEvrTgbO3y6wAAAEU"]
[Fri Apr 24 07:31:07.290310 2026] [:error] [pid 19200:tid 19217] [client 20.216.153.175:47208] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeqruzQ--M3-tsKAnhHZVwAAAMk"]
[Fri Apr 24 07:31:08.367843 2026] [:error] [pid 52129:tid 52148] [client 20.216.153.175:13710] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/admin.php"] [unique_id "aeqrvOKCZKf8_u2LKiC2QgAAAQ8"]
[Fri Apr 24 07:31:10.016058 2026] [:error] [pid 52129:tid 52135] [client 20.216.153.175:54174] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "aeqrvuKCZKf8_u2LKiC2UwAAAQI"]
[Fri Apr 24 07:31:11.092935 2026] [:error] [pid 19100:tid 19134] [client 20.216.153.175:15311] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "aeqrv7F_hzQs4CqbifcqGQAAABg"]
[Fri Apr 24 07:31:12.035706 2026] [:error] [pid 19200:tid 19227] [client 20.216.153.175:54196] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "aeqrwDQ--M3-tsKAnhHZfQAAANM"]
[Fri Apr 24 07:31:13.119478 2026] [:error] [pid 19200:tid 19232] [client 20.216.153.175:12699] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/inege.php"] [unique_id "aeqrwTQ--M3-tsKAnhHZiQAAANg"]
[Fri Apr 24 07:31:14.056852 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:54152] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqrwuKCZKf8_u2LKiC2awAAAQU"]
[Fri Apr 24 07:31:14.890804 2026] [:error] [pid 19200:tid 19231] [client 20.216.153.175:63342] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqrwjQ--M3-tsKAnhHZpAAAANc"]
[Fri Apr 24 07:31:15.493859 2026] [:error] [pid 52129:tid 52148] [client 20.216.153.175:54180] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqrw-KCZKf8_u2LKiC2cwAAAQ8"]
[Fri Apr 24 07:31:16.230633 2026] [:error] [pid 19102:tid 19185] [client 20.216.153.175:38687] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqrxADSgrbLEZbkqD7ylwAAAJU"]
[Fri Apr 24 07:31:17.390491 2026] [:error] [pid 19200:tid 19228] [client 20.216.153.175:26586] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "aeqrxTQ--M3-tsKAnhHZsAAAANQ"]
[Fri Apr 24 07:31:18.752845 2026] [:error] [pid 52129:tid 52134] [client 20.216.153.175:58759] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "aeqrxuKCZKf8_u2LKiC2jQAAAQE"]
[Fri Apr 24 07:31:19.467053 2026] [:error] [pid 19100:tid 19125] [client 20.216.153.175:40180] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "aeqrx7F_hzQs4CqbifcqLwAAAA8"]
[Fri Apr 24 07:31:20.998252 2026] [:error] [pid 52129:tid 52134] [client 20.216.153.175:12735] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/uuu.php"] [unique_id "aeqryOKCZKf8_u2LKiC2lAAAAQE"]
[Fri Apr 24 07:31:21.982283 2026] [:error] [pid 52129:tid 52148] [client 20.216.153.175:1242] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "aeqryeKCZKf8_u2LKiC2nwAAAQ8"]
[Fri Apr 24 07:31:22.717111 2026] [:error] [pid 19200:tid 19231] [client 20.216.153.175:1228] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "aeqryjQ--M3-tsKAnhHZswAAANc"]
[Fri Apr 24 07:31:23.978415 2026] [:error] [pid 52129:tid 52150] [client 20.216.153.175:52116] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "aeqry-KCZKf8_u2LKiC2qgAAARE"]
[Fri Apr 24 07:31:25.400392 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:32167] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/no1.php"] [unique_id "aeqrzeKCZKf8_u2LKiC2uwAAAQ0"]
[Fri Apr 24 07:31:26.469203 2026] [:error] [pid 52129:tid 52135] [client 20.216.153.175:63299] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aeqrzuKCZKf8_u2LKiC2ygAAAQI"]
[Fri Apr 24 07:31:27.567973 2026] [:error] [pid 19100:tid 19118] [client 20.216.153.175:8189] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aeqrz7F_hzQs4CqbifcqSQAAAAg"]
[Fri Apr 24 07:31:28.672566 2026] [:error] [pid 52129:tid 52133] [client 20.216.153.175:8182] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aeqr0OKCZKf8_u2LKiC26wAAAQA"]
[Fri Apr 24 07:31:29.668561 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:13723] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/w2025.php"] [unique_id "aeqr0eKCZKf8_u2LKiC2-QAAARQ"]
[Fri Apr 24 07:31:30.817858 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:16840] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "aeqr0uKCZKf8_u2LKiC3CgAAAQU"]
[Fri Apr 24 07:31:31.651640 2026] [:error] [pid 19200:tid 19225] [client 20.216.153.175:38666] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "aeqr0zQ--M3-tsKAnhHZ4gAAANE"]
[Fri Apr 24 07:31:32.484812 2026] [:error] [pid 52129:tid 52155] [client 20.216.153.175:2006] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "aeqr1OKCZKf8_u2LKiC3HAAAARY"]
[Fri Apr 24 07:31:33.451000 2026] [:error] [pid 19100:tid 19109] [client 20.216.153.175:38610] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fvvff.php"] [unique_id "aeqr1bF_hzQs4CqbifcqXgAAAAA"]
[Fri Apr 24 07:31:34.187264 2026] [:error] [pid 19100:tid 19125] [client 20.216.153.175:16847] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aeqr1rF_hzQs4CqbifcqaAAAAA8"]
[Fri Apr 24 07:31:34.899124 2026] [:error] [pid 52129:tid 52145] [client 20.216.153.175:8622] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aeqr1uKCZKf8_u2LKiC3MgAAAQw"]
[Fri Apr 24 07:31:35.504903 2026] [:error] [pid 52129:tid 52152] [client 20.216.153.175:53699] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aeqr1-KCZKf8_u2LKiC3OgAAARM"]
[Fri Apr 24 07:31:36.349473 2026] [:error] [pid 52129:tid 52135] [client 20.216.153.175:40179] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a2.php"] [unique_id "aeqr2OKCZKf8_u2LKiC3SgAAAQI"]
[Fri Apr 24 07:31:37.198289 2026] [:error] [pid 52129:tid 52149] [client 20.216.153.175:1268] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqr2eKCZKf8_u2LKiC3XgAAARA"]
[Fri Apr 24 07:31:38.076329 2026] [:error] [pid 19102:tid 19164] [client 20.216.153.175:53704] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqr2gDSgrbLEZbkqD7y1QAAAIA"]
[Fri Apr 24 07:31:39.274331 2026] [:error] [pid 19102:tid 19172] [client 20.216.153.175:38609] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqr2wDSgrbLEZbkqD7y2gAAAIg"]
[Fri Apr 24 07:31:40.276485 2026] [:error] [pid 19200:tid 19214] [client 20.216.153.175:32160] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "aeqr3DQ--M3-tsKAnhHaDAAAAMY"]
[Fri Apr 24 07:31:41.081605 2026] [:error] [pid 19200:tid 19227] [client 20.216.153.175:26572] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqr3TQ--M3-tsKAnhHaFAAAANM"]
[Fri Apr 24 07:31:42.262792 2026] [:error] [pid 19102:tid 19166] [client 20.216.153.175:54179] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqr3gDSgrbLEZbkqD7y5QAAAII"]
[Fri Apr 24 07:31:43.129595 2026] [:error] [pid 19200:tid 19212] [client 20.216.153.175:32135] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqr3zQ--M3-tsKAnhHaHgAAAMQ"]
[Fri Apr 24 07:31:43.907826 2026] [:error] [pid 19200:tid 19210] [client 20.216.153.175:8596] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqr3zQ--M3-tsKAnhHaJAAAAMI"]
[Fri Apr 24 07:31:44.666295 2026] [:error] [pid 52129:tid 52141] [client 20.216.153.175:38606] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqr4OKCZKf8_u2LKiC3kAAAAQg"]
[Fri Apr 24 07:31:47.868365 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:31:50.983109 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:31:53.621337 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:31:55.937778 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:31:57.508067 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:31:59.889123 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:02.574471 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:04.929948 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:06.564999 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:08.978697 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:11.348173 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:13.862573 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:16.422819 2026] [proxy_fcgi:error] [pid 52129:tid 52151] [client 20.216.153.175:13753] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:32:16.676747 2026] [:error] [pid 52129:tid 52134] [client 20.216.153.175:13753] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqsAOKCZKf8_u2LKiC4jwAAAQE"]
[Fri Apr 24 07:32:17.654972 2026] [:error] [pid 19102:tid 19174] [client 20.216.153.175:50952] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqsAQDSgrbLEZbkqD7zqgAAAIo"]
[Fri Apr 24 07:32:18.410395 2026] [:error] [pid 19102:tid 19165] [client 20.216.153.175:54185] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqsAgDSgrbLEZbkqD7zsQAAAIE"]
[Fri Apr 24 07:32:20.138089 2026] [:error] [pid 19102:tid 19166] [client 20.216.153.175:26596] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqsBADSgrbLEZbkqD7zswAAAII"]
[Fri Apr 24 07:32:21.320902 2026] [:error] [pid 19200:tid 19210] [client 20.216.153.175:49299] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqsBTQ--M3-tsKAnhHa8wAAAMI"]
[Fri Apr 24 07:32:22.055148 2026] [:error] [pid 19101:tid 19146] [client 20.216.153.175:49315] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqsBmAHj9bEvrTgbO3ztgAAAEk"]
[Fri Apr 24 07:32:23.348364 2026] [:error] [pid 52129:tid 52145] [client 20.216.153.175:49281] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqsB-KCZKf8_u2LKiC4ugAAAQw"]
[Fri Apr 24 07:32:24.525625 2026] [:error] [pid 19101:tid 19157] [client 20.216.153.175:32169] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqsCGAHj9bEvrTgbO3zugAAAFQ"]
[Fri Apr 24 07:32:25.955154 2026] [:error] [pid 19200:tid 19232] [client 20.216.153.175:50980] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqsCTQ--M3-tsKAnhHbAQAAANg"]
[Fri Apr 24 07:32:27.592078 2026] [:error] [pid 19200:tid 19219] [client 20.216.153.175:53701] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqsCzQ--M3-tsKAnhHbEwAAAMs"]
[Fri Apr 24 07:32:29.872424 2026] [:error] [pid 19200:tid 19217] [client 20.216.153.175:53698] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqsDTQ--M3-tsKAnhHbJQAAAMk"]
[Fri Apr 24 07:32:30.788504 2026] [:error] [pid 19101:tid 19159] [client 20.216.153.175:54181] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "aeqsDmAHj9bEvrTgbO3z0QAAAFY"]
[Fri Apr 24 07:32:31.867808 2026] [:error] [pid 19102:tid 19187] [client 20.216.153.175:8076] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqsDwDSgrbLEZbkqD7z1wAAAJc"]
[Fri Apr 24 07:32:32.893417 2026] [:error] [pid 19102:tid 19175] [client 20.216.153.175:9292] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqsEADSgrbLEZbkqD7z2gAAAIs"]
[Fri Apr 24 07:32:33.584669 2026] [:error] [pid 52129:tid 52149] [client 20.216.153.175:16860] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqsEeKCZKf8_u2LKiC4-QAAARA"]
[Fri Apr 24 07:32:35.117097 2026] [:error] [pid 19100:tid 19121] [client 20.216.153.175:8105] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-blog.php"] [unique_id "aeqsE7F_hzQs4CqbifcrKgAAAAs"]
[Fri Apr 24 07:32:35.978179 2026] [:error] [pid 19102:tid 19179] [client 20.216.153.175:50972] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqsEwDSgrbLEZbkqD7z5AAAAI8"]
[Fri Apr 24 07:32:36.910471 2026] [:error] [pid 52129:tid 52151] [client 20.216.153.175:57890] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqsFOKCZKf8_u2LKiC5EgAAARI"]
[Fri Apr 24 07:32:37.795112 2026] [:error] [pid 19102:tid 19176] [client 20.216.153.175:53736] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqsFQDSgrbLEZbkqD7z5wAAAIw"]
[Fri Apr 24 07:32:38.472155 2026] [:error] [pid 19100:tid 19109] [client 20.216.153.175:50956] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeqsFrF_hzQs4CqbifcrMAAAAAA"]
[Fri Apr 24 07:32:39.270954 2026] [:error] [pid 19200:tid 19215] [client 20.216.153.175:57889] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqsFzQ--M3-tsKAnhHbcgAAAMc"]
[Fri Apr 24 07:32:40.089316 2026] [:error] [pid 19100:tid 19121] [client 20.216.153.175:26565] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqsGLF_hzQs4CqbifcrOgAAAAs"]
[Fri Apr 24 07:32:40.865447 2026] [:error] [pid 52129:tid 52150] [client 20.216.153.175:57905] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqsGOKCZKf8_u2LKiC5QwAAARE"]
[Fri Apr 24 07:32:41.780534 2026] [:error] [pid 19101:tid 19160] [client 20.216.153.175:8093] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqsGWAHj9bEvrTgbO30BgAAAFc"]
[Fri Apr 24 07:32:42.686340 2026] [:error] [pid 52129:tid 52137] [client 20.216.153.175:54166] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsGuKCZKf8_u2LKiC5XAAAAQQ"]
[Fri Apr 24 07:32:43.755400 2026] [:error] [pid 52129:tid 52150] [client 20.216.153.175:54205] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsG-KCZKf8_u2LKiC5aQAAARE"]
[Fri Apr 24 07:32:44.771049 2026] [:error] [pid 52129:tid 52150] [client 20.216.153.175:53729] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsHOKCZKf8_u2LKiC5eAAAARE"]
[Fri Apr 24 07:32:46.046876 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:16892] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsHuKCZKf8_u2LKiC5iwAAAQU"]
[Fri Apr 24 07:32:47.605674 2026] [:error] [pid 52129:tid 52133] [client 20.216.153.175:53755] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqsH-KCZKf8_u2LKiC5qAAAAQA"]
[Fri Apr 24 07:32:49.265651 2026] [:error] [pid 19200:tid 19215] [client 20.216.153.175:38626] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqsITQ--M3-tsKAnhHbmQAAAMc"]
[Fri Apr 24 07:32:50.881764 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:38602] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqsIuKCZKf8_u2LKiC5xAAAAQU"]
[Fri Apr 24 07:32:53.161515 2026] [:error] [pid 19200:tid 19212] [client 20.216.153.175:8081] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "aeqsJTQ--M3-tsKAnhHbwAAAAMQ"]
[Fri Apr 24 07:32:55.492745 2026] [:error] [pid 19101:tid 19147] [client 20.216.153.175:1243] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqsJ2AHj9bEvrTgbO30RgAAAEo"]
[Fri Apr 24 07:32:57.950342 2026] [:error] [pid 19200:tid 19226] [client 20.216.153.175:53711] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqsKTQ--M3-tsKAnhHb6wAAANI"]
[Fri Apr 24 07:32:59.021699 2026] [:error] [pid 19101:tid 19142] [client 20.216.153.175:53746] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqsK2AHj9bEvrTgbO30UgAAAEU"]
[Fri Apr 24 07:32:59.917048 2026] [:error] [pid 19101:tid 19156] [client 20.216.153.175:38633] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/goods.php"] [unique_id "aeqsK2AHj9bEvrTgbO30VwAAAFM"]
[Fri Apr 24 07:33:01.553142 2026] [:error] [pid 52129:tid 52138] [client 20.216.153.175:16832] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsLeKCZKf8_u2LKiC58AAAAQU"]
[Fri Apr 24 07:33:02.764918 2026] [:error] [pid 52129:tid 52152] [client 20.216.153.175:49437] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsLuKCZKf8_u2LKiC5-wAAARM"]
[Fri Apr 24 07:33:04.223920 2026] [:error] [pid 19101:tid 19152] [client 20.216.153.175:49308] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsMGAHj9bEvrTgbO30bAAAAE8"]
[Fri Apr 24 07:33:05.092654 2026] [:error] [pid 19200:tid 19221] [client 20.216.153.175:32145] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "aeqsMTQ--M3-tsKAnhHcQAAAAM0"]
[Fri Apr 24 07:33:06.316350 2026] [:error] [pid 19200:tid 19215] [client 20.216.153.175:31328] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqsMjQ--M3-tsKAnhHcWgAAAMc"]
[Fri Apr 24 07:33:07.278384 2026] [:error] [pid 19102:tid 19175] [client 20.216.153.175:1430] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqsMwDSgrbLEZbkqD70bgAAAIs"]
[Fri Apr 24 07:33:08.033698 2026] [:error] [pid 19100:tid 19111] [client 20.216.153.175:57897] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqsNLF_hzQs4CqbifcrlgAAAAI"]
[Fri Apr 24 07:33:09.372979 2026] [:error] [pid 19101:tid 19157] [client 20.216.153.175:49327] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/222.php"] [unique_id "aeqsNWAHj9bEvrTgbO30kQAAAFQ"]
[Fri Apr 24 07:33:10.964319 2026] [:error] [pid 19102:tid 19167] [client 20.216.153.175:1247] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqsNgDSgrbLEZbkqD70kgAAAIM"]
[Fri Apr 24 07:33:13.180521 2026] [:error] [pid 52129:tid 52139] [client 20.216.153.175:57856] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeqsOeKCZKf8_u2LKiC6TQAAAQY"]
[Fri Apr 24 07:33:15.671464 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:18.250084 2026] [proxy_fcgi:error] [pid 19101:tid 19157] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:21.561025 2026] [proxy_fcgi:error] [pid 19101:tid 19154] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:23.934367 2026] [proxy_fcgi:error] [pid 19101:tid 19153] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:26.335984 2026] [proxy_fcgi:error] [pid 19101:tid 19146] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:27.876547 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:30.107717 2026] [proxy_fcgi:error] [pid 19101:tid 19151] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:31.916150 2026] [proxy_fcgi:error] [pid 19101:tid 19143] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:34.278293 2026] [proxy_fcgi:error] [pid 19101:tid 19138] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:35.959841 2026] [proxy_fcgi:error] [pid 19101:tid 19145] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:38.264711 2026] [proxy_fcgi:error] [pid 19101:tid 19143] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:40.526947 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:42.283783 2026] [proxy_fcgi:error] [pid 19101:tid 19155] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:44.520875 2026] [proxy_fcgi:error] [pid 19101:tid 19138] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:46.893548 2026] [proxy_fcgi:error] [pid 19101:tid 19141] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:49.233908 2026] [proxy_fcgi:error] [pid 19101:tid 19161] [client 20.216.153.175:31332] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:33:49.507190 2026] [:error] [pid 19101:tid 19156] [client 20.216.153.175:31332] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqsXWAHj9bEvrTgbO31bAAAAFM"]
[Fri Apr 24 07:33:50.416923 2026] [:error] [pid 19101:tid 19149] [client 20.216.153.175:24172] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqsXmAHj9bEvrTgbO31eAAAAEw"]
[Fri Apr 24 07:33:51.445286 2026] [:error] [pid 19100:tid 19122] [client 20.216.153.175:32124] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqsX7F_hzQs4CqbifcsIwAAAAw"]
[Fri Apr 24 07:33:52.471036 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:32082] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqsYOKCZKf8_u2LKiC7WgAAAQ0"]
[Fri Apr 24 07:33:53.413942 2026] [:error] [pid 52129:tid 52135] [client 20.216.153.175:24902] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqsYeKCZKf8_u2LKiC7aAAAAQI"]
[Fri Apr 24 07:33:54.259365 2026] [:error] [pid 52129:tid 52147] [client 20.216.153.175:22652] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqsYuKCZKf8_u2LKiC7cgAAAQ4"]
[Fri Apr 24 07:33:55.370675 2026] [:error] [pid 19102:tid 19179] [client 20.216.153.175:19025] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqsYwDSgrbLEZbkqD71SAAAAI8"]
[Fri Apr 24 07:33:56.084521 2026] [:error] [pid 52129:tid 52133] [client 20.216.153.175:37435] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fe5.php"] [unique_id "aeqsZOKCZKf8_u2LKiC7fwAAAQA"]
[Fri Apr 24 07:33:57.085918 2026] [:error] [pid 19100:tid 19132] [client 20.216.153.175:64296] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqsZbF_hzQs4CqbifcsOgAAABY"]
[Fri Apr 24 07:33:57.987472 2026] [:error] [pid 52129:tid 52148] [client 20.216.153.175:20387] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqsZeKCZKf8_u2LKiC7mgAAAQ8"]
[Fri Apr 24 07:33:58.965425 2026] [:error] [pid 19102:tid 19168] [client 20.216.153.175:17704] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqsZgDSgrbLEZbkqD71VwAAAIQ"]
[Fri Apr 24 07:33:59.854007 2026] [:error] [pid 19101:tid 19161] [client 20.216.153.175:1615] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqsZ2AHj9bEvrTgbO31lAAAAFg"]
[Fri Apr 24 07:34:00.574456 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:39817] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqsaOKCZKf8_u2LKiC79wAAAQ0"]
[Fri Apr 24 07:34:01.194502 2026] [:error] [pid 19101:tid 19144] [client 20.216.153.175:20392] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqsaWAHj9bEvrTgbO31nwAAAEc"]
[Fri Apr 24 07:34:01.878120 2026] [:error] [pid 19100:tid 19131] [client 20.216.153.175:49360] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqsabF_hzQs4CqbifcsZQAAABU"]
[Fri Apr 24 07:34:02.717302 2026] [:error] [pid 19200:tid 19213] [client 20.216.153.175:50899] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/av.php"] [unique_id "aeqsajQ--M3-tsKAnhHdaQAAAMU"]
[Fri Apr 24 07:34:03.655177 2026] [:error] [pid 52129:tid 52152] [client 20.216.153.175:59828] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqsa-KCZKf8_u2LKiC8LAAAARM"]
[Fri Apr 24 07:34:04.662568 2026] [:error] [pid 19100:tid 19115] [client 20.216.153.175:21869] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqsbLF_hzQs4CqbifcsfAAAAAY"]
[Fri Apr 24 07:34:05.609205 2026] [:error] [pid 19102:tid 19186] [client 20.216.153.175:57656] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqsbQDSgrbLEZbkqD71vwAAAJY"]
[Fri Apr 24 07:34:06.198584 2026] [:error] [pid 19102:tid 19182] [client 20.216.153.175:49869] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/abcd.php"] [unique_id "aeqsbgDSgrbLEZbkqD71zQAAAJI"]
[Fri Apr 24 07:34:06.841979 2026] [:error] [pid 19101:tid 19148] [client 20.216.153.175:21417] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqsbmAHj9bEvrTgbO31twAAAEs"]
[Fri Apr 24 07:34:07.625320 2026] [:error] [pid 19200:tid 19215] [client 20.216.153.175:1854] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqsbzQ--M3-tsKAnhHdggAAAMc"]
[Fri Apr 24 07:34:08.491561 2026] [:error] [pid 19101:tid 19150] [client 20.216.153.175:28630] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqscGAHj9bEvrTgbO31vAAAAE0"]
[Fri Apr 24 07:34:09.311331 2026] [:error] [pid 19200:tid 19228] [client 20.216.153.175:57591] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/fi.php"] [unique_id "aeqscTQ--M3-tsKAnhHdkgAAANQ"]
[Fri Apr 24 07:34:10.113200 2026] [:error] [pid 19102:tid 19187] [client 20.216.153.175:57585] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqscgDSgrbLEZbkqD719wAAAJc"]
[Fri Apr 24 07:34:10.675649 2026] [:error] [pid 19101:tid 19157] [client 20.216.153.175:57595] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqscmAHj9bEvrTgbO31vwAAAFQ"]
[Fri Apr 24 07:34:11.469951 2026] [:error] [pid 19102:tid 19164] [client 20.216.153.175:42713] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqscwDSgrbLEZbkqD72AAAAAIA"]
[Fri Apr 24 07:34:12.138916 2026] [:error] [pid 52129:tid 52152] [client 20.216.153.175:7547] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "aeqsdOKCZKf8_u2LKiC8lwAAARM"]
[Fri Apr 24 07:34:12.898621 2026] [:error] [pid 19100:tid 19109] [client 20.216.153.175:57662] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqsdLF_hzQs4CqbifcsjAAAAAA"]
[Fri Apr 24 07:34:13.762935 2026] [:error] [pid 52129:tid 52151] [client 20.216.153.175:57316] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqsdeKCZKf8_u2LKiC8sQAAARI"]
[Fri Apr 24 07:34:14.650314 2026] [:error] [pid 19102:tid 19170] [client 20.216.153.175:47832] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqsdgDSgrbLEZbkqD72EwAAAIY"]
[Fri Apr 24 07:34:15.352526 2026] [:error] [pid 19101:tid 19154] [client 20.216.153.175:1806] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/update/f35.php"] [unique_id "aeqsd2AHj9bEvrTgbO31xQAAAFE"]
[Fri Apr 24 07:34:16.335684 2026] [:error] [pid 19102:tid 19173] [client 20.216.153.175:42711] [client 20.216.153.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeqseADSgrbLEZbkqD72KQAAAIk"]
[Fri Apr 24 07:34:17.401240 2026] [:error] [pid 19100:tid 19119] [client 20.216.153.175:47829] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aeqsebF_hzQs4CqbifcsowAAAAk"]
[Fri Apr 24 07:34:18.076173 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:57020] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aeqseuKCZKf8_u2LKiC87wAAAQ0"]
[Fri Apr 24 07:34:18.902455 2026] [:error] [pid 19102:tid 19169] [client 20.216.153.175:51987] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "aeqsegDSgrbLEZbkqD72YwAAAIU"]
[Fri Apr 24 07:34:19.823150 2026] [:error] [pid 19101:tid 19154] [client 20.216.153.175:12586] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqse2AHj9bEvrTgbO312AAAAFE"]
[Fri Apr 24 07:34:20.658512 2026] [:error] [pid 52129:tid 52146] [client 20.216.153.175:33414] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqsfOKCZKf8_u2LKiC9AQAAAQ0"]
[Fri Apr 24 07:34:21.687107 2026] [:error] [pid 19100:tid 19116] [client 20.216.153.175:54968] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqsfbF_hzQs4CqbifcssAAAAAc"]
[Fri Apr 24 07:34:22.573321 2026] [:error] [pid 52129:tid 52155] [client 20.216.153.175:1806] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqsfuKCZKf8_u2LKiC9GwAAARY"]
[Fri Apr 24 07:34:23.508118 2026] [:error] [pid 52129:tid 52137] [client 20.216.153.175:25301] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqsf-KCZKf8_u2LKiC9KwAAAQQ"]
[Fri Apr 24 07:34:24.513650 2026] [:error] [pid 19102:tid 19181] [client 20.216.153.175:33423] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqsgADSgrbLEZbkqD72iwAAAJE"]
[Fri Apr 24 07:34:25.314747 2026] [:error] [pid 19100:tid 19111] [client 20.216.153.175:7721] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqsgbF_hzQs4CqbifcsuwAAAAI"]
[Fri Apr 24 07:34:26.135598 2026] [:error] [pid 52129:tid 52150] [client 20.216.153.175:1043] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqsguKCZKf8_u2LKiC9QgAAARE"]
[Fri Apr 24 07:34:26.749609 2026] [:error] [pid 19101:tid 19154] [client 20.216.153.175:7710] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqsgmAHj9bEvrTgbO317AAAAFE"]
[Fri Apr 24 07:34:27.554454 2026] [:error] [pid 19101:tid 19147] [client 20.216.153.175:30260] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqsg2AHj9bEvrTgbO317QAAAEo"]
[Fri Apr 24 07:34:28.636093 2026] [:error] [pid 19101:tid 19139] [client 20.216.153.175:16781] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqshGAHj9bEvrTgbO317wAAAEI"]
[Fri Apr 24 07:34:29.656786 2026] [:error] [pid 19102:tid 19186] [client 20.216.153.175:25572] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/k.php"] [unique_id "aeqshQDSgrbLEZbkqD72qQAAAJY"]
[Fri Apr 24 07:34:30.777420 2026] [:error] [pid 19102:tid 19170] [client 20.216.153.175:15264] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww2.php"] [unique_id "aeqshgDSgrbLEZbkqD72rwAAAIY"]
[Fri Apr 24 07:34:31.574393 2026] [:error] [pid 19200:tid 19230] [client 20.216.153.175:59746] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww2.php"] [unique_id "aeqshzQ--M3-tsKAnhHd_gAAANY"]
[Fri Apr 24 07:34:32.869728 2026] [:error] [pid 52129:tid 52139] [client 20.216.153.175:33374] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww2.php"] [unique_id "aeqsiOKCZKf8_u2LKiC9ewAAAQY"]
[Fri Apr 24 07:34:34.077023 2026] [:error] [pid 19100:tid 19121] [client 20.216.153.175:39761] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww2.php"] [unique_id "aeqsirF_hzQs4CqbifcsxAAAAAs"]
[Fri Apr 24 07:34:34.755207 2026] [:error] [pid 19101:tid 19146] [client 20.216.153.175:15783] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww3.php"] [unique_id "aeqsimAHj9bEvrTgbO32AgAAAEk"]
[Fri Apr 24 07:34:36.851964 2026] [:error] [pid 52129:tid 52134] [client 20.216.153.175:10767] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww3.php"] [unique_id "aeqsjOKCZKf8_u2LKiC9mQAAAQE"]
[Fri Apr 24 07:34:37.890215 2026] [:error] [pid 52129:tid 52136] [client 20.216.153.175:19921] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww3.php"] [unique_id "aeqsjeKCZKf8_u2LKiC9pAAAAQM"]
[Fri Apr 24 07:34:38.717100 2026] [:error] [pid 19102:tid 19174] [client 20.216.153.175:54706] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ww3.php"] [unique_id "aeqsjgDSgrbLEZbkqD721AAAAIo"]
[Fri Apr 24 07:34:39.770508 2026] [:error] [pid 52129:tid 52151] [client 20.216.153.175:13310] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqsj-KCZKf8_u2LKiC9xgAAARI"]
[Fri Apr 24 07:34:41.078819 2026] [:error] [pid 52129:tid 52133] [client 20.216.153.175:15779] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqskeKCZKf8_u2LKiC96gAAAQA"]
[Fri Apr 24 07:34:42.167562 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:1280] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqskuKCZKf8_u2LKiC9_gAAARQ"]
[Fri Apr 24 07:34:42.911104 2026] [:error] [pid 19102:tid 19167] [client 20.216.153.175:24559] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "aeqskgDSgrbLEZbkqD728wAAAIM"]
[Fri Apr 24 07:34:43.837066 2026] [:error] [pid 52129:tid 52149] [client 20.216.153.175:63681] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqsk-KCZKf8_u2LKiC-CwAAARA"]
[Fri Apr 24 07:34:44.714494 2026] [:error] [pid 19101:tid 19160] [client 20.216.153.175:16343] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqslGAHj9bEvrTgbO32NQAAAFc"]
[Fri Apr 24 07:34:45.615008 2026] [:error] [pid 19102:tid 19173] [client 20.216.153.175:29238] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqslQDSgrbLEZbkqD72_wAAAIk"]
[Fri Apr 24 07:34:46.724157 2026] [:error] [pid 19200:tid 19226] [client 20.216.153.175:17673] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/in.php"] [unique_id "aeqsljQ--M3-tsKAnhHeWgAAANI"]
[Fri Apr 24 07:34:50.327004 2026] [proxy_fcgi:error] [pid 19200:tid 19231] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:34:52.737380 2026] [proxy_fcgi:error] [pid 19200:tid 19216] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:34:55.252172 2026] [proxy_fcgi:error] [pid 19200:tid 19221] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:34:57.758424 2026] [proxy_fcgi:error] [pid 19200:tid 19210] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:00.282706 2026] [proxy_fcgi:error] [pid 19200:tid 19220] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:02.757377 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:05.184513 2026] [proxy_fcgi:error] [pid 19200:tid 19229] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:07.606795 2026] [proxy_fcgi:error] [pid 19200:tid 19209] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:10.007605 2026] [proxy_fcgi:error] [pid 19200:tid 19226] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:12.450300 2026] [proxy_fcgi:error] [pid 19200:tid 19212] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:14.871687 2026] [proxy_fcgi:error] [pid 19200:tid 19228] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:17.431596 2026] [proxy_fcgi:error] [pid 19200:tid 19213] [client 20.216.153.175:50403] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 07:35:17.712366 2026] [:error] [pid 19200:tid 19231] [client 20.216.153.175:50403] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeqstTQ--M3-tsKAnhHfEAAAANc"]
[Fri Apr 24 07:35:18.901205 2026] [:error] [pid 19101:tid 19160] [client 20.216.153.175:50372] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeqstmAHj9bEvrTgbO32xQAAAFc"]
[Fri Apr 24 07:35:19.767735 2026] [:error] [pid 19101:tid 19137] [client 20.216.153.175:63031] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeqst2AHj9bEvrTgbO32ywAAAEA"]
[Fri Apr 24 07:35:20.490378 2026] [:error] [pid 52129:tid 52149] [client 20.216.153.175:29159] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/485.php"] [unique_id "aeqsuOKCZKf8_u2LKiC_UgAAARA"]
[Fri Apr 24 07:35:21.562329 2026] [:error] [pid 19102:tid 19167] [client 20.216.153.175:58293] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeqsuQDSgrbLEZbkqD73lQAAAIM"]
[Fri Apr 24 07:35:22.227627 2026] [:error] [pid 19101:tid 19151] [client 20.216.153.175:63033] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeqsumAHj9bEvrTgbO320wAAAE4"]
[Fri Apr 24 07:35:23.493944 2026] [:error] [pid 52129:tid 52157] [client 20.216.153.175:29189] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeqsu-KCZKf8_u2LKiC_hAAAARg"]
[Fri Apr 24 07:35:24.350480 2026] [:error] [pid 19102:tid 19170] [client 20.216.153.175:9783] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "aeqsvADSgrbLEZbkqD73pAAAAIY"]
[Fri Apr 24 07:35:25.303040 2026] [:error] [pid 19200:tid 19213] [client 20.216.153.175:62980] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xxx.php"] [unique_id "aeqsvTQ--M3-tsKAnhHfLQAAAMU"]
[Fri Apr 24 07:35:26.093712 2026] [:error] [pid 19102:tid 19176] [client 20.216.153.175:28144] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xxx.php"] [unique_id "aeqsvgDSgrbLEZbkqD73sQAAAIw"]
[Fri Apr 24 07:35:27.551979 2026] [:error] [pid 19102:tid 19172] [client 20.216.153.175:49370] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xxx.php"] [unique_id "aeqsvwDSgrbLEZbkqD73vgAAAIg"]
[Fri Apr 24 07:35:28.719180 2026] [:error] [pid 52129:tid 52137] [client 20.216.153.175:14835] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xxx.php"] [unique_id "aeqswOKCZKf8_u2LKiC_rgAAAQQ"]
[Fri Apr 24 07:35:30.157614 2026] [:error] [pid 19200:tid 19215] [client 20.216.153.175:20438] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqswjQ--M3-tsKAnhHfSgAAAMc"]
[Fri Apr 24 07:35:30.843408 2026] [:error] [pid 52129:tid 52133] [client 20.216.153.175:62989] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqswuKCZKf8_u2LKiC_tAAAAQA"]
[Fri Apr 24 07:35:31.492640 2026] [:error] [pid 19102:tid 19172] [client 20.216.153.175:29142] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqswwDSgrbLEZbkqD73zwAAAIg"]
[Fri Apr 24 07:35:32.444386 2026] [:error] [pid 19200:tid 19218] [client 20.216.153.175:62989] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hypo.php"] [unique_id "aeqsxDQ--M3-tsKAnhHfUgAAAMo"]
[Fri Apr 24 07:35:33.903173 2026] [:error] [pid 19100:tid 19121] [client 20.216.153.175:29164] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file18.php"] [unique_id "aeqsxbF_hzQs4CqbifctxAAAAAs"]
[Fri Apr 24 07:35:35.542227 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:29213] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file18.php"] [unique_id "aeqsx-KCZKf8_u2LKiC_1gAAARQ"]
[Fri Apr 24 07:35:36.268937 2026] [:error] [pid 19102:tid 19182] [client 20.216.153.175:58276] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file18.php"] [unique_id "aeqsyADSgrbLEZbkqD734AAAAJI"]
[Fri Apr 24 07:35:37.425316 2026] [:error] [pid 19100:tid 19133] [client 20.216.153.175:14839] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file18.php"] [unique_id "aeqsybF_hzQs4Cqbifct1AAAABc"]
[Fri Apr 24 07:35:38.474510 2026] [:error] [pid 52129:tid 52144] [client 20.216.153.175:28098] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeqsyuKCZKf8_u2LKiC_8gAAAQs"]
[Fri Apr 24 07:35:39.744138 2026] [:error] [pid 52129:tid 52143] [client 20.216.153.175:49973] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeqsy-KCZKf8_u2LKiDAAQAAAQo"]
[Fri Apr 24 07:35:40.639348 2026] [:error] [pid 19200:tid 19213] [client 20.216.153.175:25669] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeqszDQ--M3-tsKAnhHfggAAAMU"]
[Fri Apr 24 07:35:41.633816 2026] [:error] [pid 52129:tid 52145] [client 20.216.153.175:23304] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "aeqszeKCZKf8_u2LKiDAHQAAAQw"]
[Fri Apr 24 07:35:45.004202 2026] [:error] [pid 52129:tid 52152] [client 20.216.153.175:25678] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqs0eKCZKf8_u2LKiDAOAAAARM"]
[Fri Apr 24 07:35:46.132600 2026] [:error] [pid 19100:tid 19131] [client 20.216.153.175:30657] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqs0rF_hzQs4CqbifcuBwAAABU"]
[Fri Apr 24 07:35:46.994876 2026] [:error] [pid 19100:tid 19115] [client 20.216.153.175:23308] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqs0rF_hzQs4CqbifcuCQAAAAY"]
[Fri Apr 24 07:35:47.880918 2026] [:error] [pid 19200:tid 19208] [client 20.216.153.175:23303] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqs0zQ--M3-tsKAnhHfyQAAAMA"]
[Fri Apr 24 07:35:48.644929 2026] [:error] [pid 52129:tid 52157] [client 20.216.153.175:28132] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeqs1OKCZKf8_u2LKiDARwAAARg"]
[Fri Apr 24 07:35:49.411363 2026] [:error] [pid 19100:tid 19114] [client 20.216.153.175:18868] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeqs1bF_hzQs4CqbifcuIQAAAAU"]
[Fri Apr 24 07:35:50.097629 2026] [:error] [pid 19100:tid 19111] [client 20.216.153.175:28135] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeqs1rF_hzQs4CqbifcuIwAAAAI"]
[Fri Apr 24 07:35:50.674379 2026] [:error] [pid 52129:tid 52153] [client 20.216.153.175:63029] [client 20.216.153.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/chosen.php"] [unique_id "aeqs1uKCZKf8_u2LKiDAZAAAARQ"]
[Fri Apr 24 10:01:20.634697 2026] [proxy_fcgi:error] [pid 19101:tid 19142] [client 40.77.167.93:7800] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 10:01:22.295597 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 40.77.167.93:7800] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 10:01:31.337387 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 40.77.167.61:14284] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 10:13:09.964987 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:09.965016 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:39.238575 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:39.238613 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:57.028819 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:57.028876 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:03.872311 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:03.872336 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:15.217765 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:15.217806 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:41.071944 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:41.071992 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.491397 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.491433 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 11:07:47.848498 2026] [proxy_fcgi:error] [pid 17808:tid 17811] [client 45.94.31.201:53918] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 11:07:51.896902 2026] [proxy_fcgi:error] [pid 17721:tid 17805] [client 45.94.31.201:65318] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 11:07:52.163179 2026] [proxy_fcgi:error] [pid 22114:tid 22137] [client 45.94.31.201:65308] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 11:07:55.163315 2026] [proxy_fcgi:error] [pid 17808:tid 17816] [client 45.94.31.201:53918] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 16:05:20.299029 2026] [proxy_fcgi:error] [pid 22114:tid 22122] [client 52.167.144.199:51465] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 18:42:51.536045 2026] [:error] [pid 17720:tid 17757] [client 158.158.124.89:38973] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetJK-hlUs6BS3Ng7_Vu6QAAAMM"]
[Fri Apr 24 18:42:52.600952 2026] [:error] [pid 17808:tid 17810] [client 158.158.124.89:18632] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetJLOarbOEFI8qshvIL3QAAAEA"]
[Fri Apr 24 18:42:53.180973 2026] [:error] [pid 17808:tid 17830] [client 158.158.124.89:18654] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetJLearbOEFI8qshvIL4wAAAFQ"]
[Fri Apr 24 18:42:53.962775 2026] [:error] [pid 17808:tid 17824] [client 158.158.124.89:34785] [client 158.158.124.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetJLearbOEFI8qshvIL6QAAAE4"]
[Fri Apr 24 20:55:25.343036 2026] [proxy_fcgi:error] [pid 4177:tid 4196] [client 136.118.184.59:58992] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 20:55:25.347556 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 136.118.184.59:58998] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 20:55:25.541120 2026] [proxy_fcgi:error] [pid 17721:tid 17785] [client 136.118.184.59:52896] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 20:55:25.615047 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 136.118.184.59:52902] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:46:54.114589 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 20.203.209.229:27453] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:46:55.177311 2026] [:error] [pid 4177:tid 4202] [client 20.203.209.229:27453] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aet0T32asKnvdrSe0x4zigAAAZE"]
[Fri Apr 24 21:46:57.708083 2026] [:error] [pid 4177:tid 4200] [client 20.203.209.229:31804] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aet0UX2asKnvdrSe0x4zjQAAAY8"]
[Fri Apr 24 21:47:00.107483 2026] [:error] [pid 17721:tid 17796] [client 20.203.209.229:21937] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aet0VOFXXkLeyDnfk_9JYgAAAA8"]
[Fri Apr 24 21:47:03.229490 2026] [:error] [pid 17720:tid 17761] [client 20.203.209.229:59758] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "aet0V-hlUs6BS3Ng7_W9NAAAAMc"]
[Fri Apr 24 21:47:06.062083 2026] [:error] [pid 17808:tid 17811] [client 20.203.209.229:54640] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ox.php"] [unique_id "aet0WuarbOEFI8qshvJLWwAAAEE"]
[Fri Apr 24 21:47:06.729973 2026] [:error] [pid 17720:tid 17758] [client 20.203.209.229:31749] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ox.php"] [unique_id "aet0WuhlUs6BS3Ng7_W9OgAAAMQ"]
[Fri Apr 24 21:47:07.729745 2026] [:error] [pid 14531:tid 14557] [client 20.203.209.229:21931] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ox.php"] [unique_id "aet0W3fLU2gw-6KR-GbYVgAAAVg"]
[Fri Apr 24 21:47:10.431200 2026] [:error] [pid 4177:tid 4203] [client 20.203.209.229:42068] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ox.php"] [unique_id "aet0Xn2asKnvdrSe0x4znAAAAZI"]
[Fri Apr 24 21:47:13.417309 2026] [:error] [pid 17720:tid 17766] [client 20.203.209.229:36541] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/htto.php"] [unique_id "aet0YehlUs6BS3Ng7_W9RQAAAMw"]
[Fri Apr 24 21:47:15.890658 2026] [:error] [pid 17720:tid 17765] [client 20.203.209.229:21901] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/htto.php"] [unique_id "aet0Y-hlUs6BS3Ng7_W9SwAAAMs"]
[Fri Apr 24 21:47:18.792669 2026] [:error] [pid 17720:tid 17762] [client 20.203.209.229:31758] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/htto.php"] [unique_id "aet0ZuhlUs6BS3Ng7_W9TwAAAMg"]
[Fri Apr 24 21:47:22.157860 2026] [:error] [pid 17720:tid 17756] [client 20.203.209.229:5948] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/htto.php"] [unique_id "aet0auhlUs6BS3Ng7_W9UwAAAMI"]
[Fri Apr 24 21:47:25.266683 2026] [:error] [pid 17808:tid 17812] [client 20.203.209.229:28475] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gpt-sh.php"] [unique_id "aet0bearbOEFI8qshvJLfQAAAEI"]
[Fri Apr 24 21:47:26.824814 2026] [:error] [pid 17720:tid 17772] [client 20.203.209.229:31752] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gpt-sh.php"] [unique_id "aet0buhlUs6BS3Ng7_W9bQAAANI"]
[Fri Apr 24 21:47:31.935768 2026] [:error] [pid 17720:tid 17778] [client 20.203.209.229:54716] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gpt-sh.php"] [unique_id "aet0c-hlUs6BS3Ng7_W9fAAAANg"]
[Fri Apr 24 21:47:35.420401 2026] [:error] [pid 4177:tid 4203] [client 20.203.209.229:58796] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/gpt-sh.php"] [unique_id "aet0d32asKnvdrSe0x4z_gAAAZI"]
[Fri Apr 24 21:47:38.851957 2026] [:error] [pid 17719:tid 17728] [client 20.203.209.229:60624] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "aet0esTZ9gzEyL1BkPq2ogAAAIE"]
[Fri Apr 24 21:47:42.919803 2026] [:error] [pid 17719:tid 17751] [client 20.203.209.229:60671] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "aet0fsTZ9gzEyL1BkPq2pgAAAJg"]
[Fri Apr 24 21:47:45.078186 2026] [:error] [pid 17808:tid 17821] [client 20.203.209.229:22506] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "aet0gearbOEFI8qshvJLmAAAAEs"]
[Fri Apr 24 21:47:46.527682 2026] [:error] [pid 17720:tid 17766] [client 20.203.209.229:22476] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jp.php"] [unique_id "aet0guhlUs6BS3Ng7_W9iQAAAMw"]
[Fri Apr 24 21:47:49.391842 2026] [:error] [pid 4177:tid 4189] [client 20.203.209.229:5814] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "aet0hX2asKnvdrSe0x40RAAAAYQ"]
[Fri Apr 24 21:47:51.783467 2026] [:error] [pid 22114:tid 22139] [client 20.203.209.229:28462] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "aet0h4AuWGz3WlMQjof3EwAAARY"]
[Fri Apr 24 21:47:53.349246 2026] [:error] [pid 22114:tid 22140] [client 20.203.209.229:27915] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "aet0iYAuWGz3WlMQjof3FQAAARc"]
[Fri Apr 24 21:47:57.558957 2026] [proxy_fcgi:error] [pid 4177:tid 4197] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:02.236463 2026] [proxy_fcgi:error] [pid 4177:tid 4197] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:04.518653 2026] [proxy_fcgi:error] [pid 4177:tid 4200] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:06.629911 2026] [proxy_fcgi:error] [pid 4177:tid 4209] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:08.728204 2026] [proxy_fcgi:error] [pid 4177:tid 4200] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:10.772803 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:12.914903 2026] [proxy_fcgi:error] [pid 4177:tid 4207] [client 20.203.209.229:59762] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:48:13.174838 2026] [:error] [pid 4177:tid 4190] [client 20.203.209.229:59762] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "aet0nX2asKnvdrSe0x40mgAAAYU"]
[Fri Apr 24 21:48:15.540451 2026] [:error] [pid 17808:tid 17831] [client 20.203.209.229:13912] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "aet0n-arbOEFI8qshvJLtAAAAFU"]
[Fri Apr 24 21:48:19.651339 2026] [:error] [pid 17721:tid 17791] [client 20.203.209.229:44433] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "aet0o-FXXkLeyDnfk_9JnQAAAAo"]
[Fri Apr 24 21:48:21.535053 2026] [:error] [pid 14531:tid 14538] [client 20.203.209.229:38528] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "aet0pXfLU2gw-6KR-GbYigAAAUU"]
[Fri Apr 24 21:48:22.879734 2026] [:error] [pid 22114:tid 22117] [client 20.203.209.229:36543] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "aet0poAuWGz3WlMQjof3JgAAAQA"]
[Fri Apr 24 21:48:24.300575 2026] [:error] [pid 17720:tid 17758] [client 20.203.209.229:5162] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "aet0qOhlUs6BS3Ng7_W9wwAAAMQ"]
[Fri Apr 24 21:48:26.388730 2026] [:error] [pid 4177:tid 4195] [client 20.203.209.229:30047] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "aet0qn2asKnvdrSe0x40tAAAAYo"]
[Fri Apr 24 21:48:30.108691 2026] [:error] [pid 17720:tid 17756] [client 20.203.209.229:19196] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "aet0ruhlUs6BS3Ng7_W9xwAAAMI"]
[Fri Apr 24 21:48:33.277014 2026] [:error] [pid 17720:tid 17764] [client 20.203.209.229:16203] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet0sehlUs6BS3Ng7_W9zgAAAMo"]
[Fri Apr 24 21:48:35.607222 2026] [:error] [pid 17719:tid 17737] [client 20.203.209.229:41786] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet0s8TZ9gzEyL1BkPq2zQAAAIo"]
[Fri Apr 24 21:48:36.691823 2026] [:error] [pid 17720:tid 17765] [client 20.203.209.229:51842] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet0tOhlUs6BS3Ng7_W92QAAAMs"]
[Fri Apr 24 21:48:37.537206 2026] [:error] [pid 17719:tid 17744] [client 20.203.209.229:6059] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aet0tcTZ9gzEyL1BkPq2zwAAAJE"]
[Fri Apr 24 21:48:38.463514 2026] [:error] [pid 17721:tid 17788] [client 20.203.209.229:55059] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "aet0tuFXXkLeyDnfk_9JsAAAAAc"]
[Fri Apr 24 21:48:40.402998 2026] [:error] [pid 17720:tid 17759] [client 20.203.209.229:61711] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "aet0uOhlUs6BS3Ng7_W95wAAAMU"]
[Fri Apr 24 21:48:44.750717 2026] [:error] [pid 17720:tid 17770] [client 20.203.209.229:18367] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "aet0vOhlUs6BS3Ng7_W98AAAANA"]
[Fri Apr 24 21:48:49.040617 2026] [:error] [pid 17808:tid 17820] [client 20.203.209.229:23037] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "aet0wearbOEFI8qshvJL1gAAAEo"]
[Fri Apr 24 21:48:53.279439 2026] [:error] [pid 22114:tid 22129] [client 20.203.209.229:5176] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet0xYAuWGz3WlMQjof3PgAAAQw"]
[Fri Apr 24 21:48:57.751932 2026] [:error] [pid 4177:tid 4201] [client 20.203.209.229:30046] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet0yX2asKnvdrSe0x41DAAAAZA"]
[Fri Apr 24 21:48:58.771638 2026] [:error] [pid 17721:tid 17789] [client 20.203.209.229:35028] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet0yuFXXkLeyDnfk_9JvgAAAAg"]
[Fri Apr 24 21:49:00.629921 2026] [:error] [pid 17721:tid 17790] [client 20.203.209.229:30525] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aet0zOFXXkLeyDnfk_9JwwAAAAk"]
[Fri Apr 24 21:49:01.901295 2026] [:error] [pid 4177:tid 4189] [client 20.203.209.229:30513] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aet0zX2asKnvdrSe0x41FgAAAYQ"]
[Fri Apr 24 21:49:05.238436 2026] [:error] [pid 4177:tid 4208] [client 20.203.209.229:33580] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aet00X2asKnvdrSe0x41IgAAAZc"]
[Fri Apr 24 21:49:07.121739 2026] [:error] [pid 4177:tid 4198] [client 20.203.209.229:61755] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aet0032asKnvdrSe0x41JQAAAY0"]
[Fri Apr 24 21:49:08.338214 2026] [:error] [pid 4177:tid 4203] [client 20.203.209.229:5120] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/as.php"] [unique_id "aet01H2asKnvdrSe0x41JwAAAZI"]
[Fri Apr 24 21:49:09.312133 2026] [:error] [pid 4177:tid 4201] [client 20.203.209.229:5183] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ctex1.php"] [unique_id "aet01X2asKnvdrSe0x41LQAAAZA"]
[Fri Apr 24 21:49:10.687809 2026] [:error] [pid 14531:tid 14540] [client 20.203.209.229:26167] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ctex1.php"] [unique_id "aet01nfLU2gw-6KR-GbYugAAAUc"]
[Fri Apr 24 21:49:16.177799 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 20.203.209.229:31588] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:49:19.130190 2026] [proxy_fcgi:error] [pid 17720:tid 17773] [client 20.203.209.229:31588] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:49:21.424842 2026] [proxy_fcgi:error] [pid 17720:tid 17765] [client 20.203.209.229:31588] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:49:23.530030 2026] [proxy_fcgi:error] [pid 17720:tid 17770] [client 20.203.209.229:31588] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:49:26.071482 2026] [proxy_fcgi:error] [pid 17720:tid 17776] [client 20.203.209.229:31588] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:49:28.174127 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 20.203.209.229:31588] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:49:28.451895 2026] [:error] [pid 17720:tid 17756] [client 20.203.209.229:31588] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet06OhlUs6BS3Ng7_W-GAAAAMI"]
[Fri Apr 24 21:49:30.656445 2026] [:error] [pid 17719:tid 17736] [client 20.203.209.229:5886] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet06sTZ9gzEyL1BkPq28wAAAIk"]
[Fri Apr 24 21:49:34.310890 2026] [:error] [pid 17808:tid 17816] [client 20.203.209.229:15713] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet07uarbOEFI8qshvJL5gAAAEY"]
[Fri Apr 24 21:49:37.250102 2026] [:error] [pid 17721:tid 17786] [client 20.203.209.229:21910] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet08eFXXkLeyDnfk_9J1gAAAAU"]
[Fri Apr 24 21:49:38.148891 2026] [:error] [pid 17720:tid 17767] [client 20.203.209.229:60478] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aet08uhlUs6BS3Ng7_W-KQAAAM0"]
[Fri Apr 24 21:49:40.377570 2026] [:error] [pid 17721:tid 17805] [client 20.203.209.229:14990] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aet09OFXXkLeyDnfk_9J4wAAABg"]
[Fri Apr 24 21:49:42.867576 2026] [:error] [pid 22114:tid 22121] [client 20.203.209.229:60421] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aet09oAuWGz3WlMQjof3WgAAAQQ"]
[Fri Apr 24 21:49:44.641373 2026] [:error] [pid 17720:tid 17762] [client 20.203.209.229:15027] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/about.php"] [unique_id "aet0-OhlUs6BS3Ng7_W-LwAAAMg"]
[Fri Apr 24 21:49:45.685114 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:44542] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aet0-X2asKnvdrSe0x41gAAAAYc"]
[Fri Apr 24 21:49:47.940937 2026] [:error] [pid 4177:tid 4195] [client 20.203.209.229:60082] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aet0-32asKnvdrSe0x41jwAAAYo"]
[Fri Apr 24 21:49:50.553164 2026] [:error] [pid 4177:tid 4208] [client 20.203.209.229:37503] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aet0_n2asKnvdrSe0x41owAAAZc"]
[Fri Apr 24 21:49:52.857432 2026] [:error] [pid 4177:tid 4198] [client 20.203.209.229:19824] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "aet1AH2asKnvdrSe0x41rgAAAY0"]
[Fri Apr 24 21:49:54.449800 2026] [:error] [pid 17719:tid 17733] [client 20.203.209.229:60423] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "aet1AsTZ9gzEyL1BkPq2_AAAAIY"]
[Fri Apr 24 21:49:58.043522 2026] [:error] [pid 17720:tid 17771] [client 20.203.209.229:32702] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "aet1BuhlUs6BS3Ng7_W-PAAAANE"]
[Fri Apr 24 21:50:01.366971 2026] [:error] [pid 14531:tid 14556] [client 20.203.209.229:34949] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "aet1CXfLU2gw-6KR-GbY5AAAAVc"]
[Fri Apr 24 21:50:03.735022 2026] [:error] [pid 17720:tid 17756] [client 20.203.209.229:34971] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "aet1C-hlUs6BS3Ng7_W-RgAAAMI"]
[Fri Apr 24 21:50:05.861731 2026] [:error] [pid 17719:tid 17748] [client 20.203.209.229:60444] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aet1DcTZ9gzEyL1BkPq3BgAAAJU"]
[Fri Apr 24 21:50:07.472331 2026] [:error] [pid 17720:tid 17761] [client 20.203.209.229:17374] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aet1D-hlUs6BS3Ng7_W-UQAAAMc"]
[Fri Apr 24 21:50:08.880477 2026] [:error] [pid 17720:tid 17774] [client 20.203.209.229:18787] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aet1EOhlUs6BS3Ng7_W-VwAAANQ"]
[Fri Apr 24 21:50:10.963519 2026] [:error] [pid 17719:tid 17747] [client 20.203.209.229:49752] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8.php"] [unique_id "aet1EsTZ9gzEyL1BkPq3CgAAAJQ"]
[Fri Apr 24 21:50:12.685729 2026] [:error] [pid 4177:tid 4206] [client 20.203.209.229:32701] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet1FH2asKnvdrSe0x412AAAAZU"]
[Fri Apr 24 21:50:14.488421 2026] [:error] [pid 4177:tid 4198] [client 20.203.209.229:15032] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet1Fn2asKnvdrSe0x414QAAAY0"]
[Fri Apr 24 21:50:17.312881 2026] [:error] [pid 14531:tid 14554] [client 20.203.209.229:42763] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet1GXfLU2gw-6KR-GbY9AAAAVU"]
[Fri Apr 24 21:50:19.056338 2026] [:error] [pid 4177:tid 4193] [client 20.203.209.229:14072] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aet1G32asKnvdrSe0x419AAAAYg"]
[Fri Apr 24 21:50:46.771971 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 20.203.209.229:11112] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:50:49.776145 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 20.203.209.229:11112] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:50:50.067023 2026] [:error] [pid 17808:tid 17829] [client 20.203.209.229:11112] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aet1OuarbOEFI8qshvJMfgAAAFM"]
[Fri Apr 24 21:50:52.126642 2026] [:error] [pid 17808:tid 17830] [client 20.203.209.229:32518] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aet1POarbOEFI8qshvJMgAAAAFQ"]
[Fri Apr 24 21:50:53.974799 2026] [:error] [pid 17719:tid 17746] [client 20.203.209.229:53516] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aet1PcTZ9gzEyL1BkPq3FQAAAJM"]
[Fri Apr 24 21:50:55.079150 2026] [:error] [pid 14531:tid 14536] [client 20.203.209.229:37419] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "aet1P3fLU2gw-6KR-GbZHgAAAUM"]
[Fri Apr 24 21:50:57.533338 2026] [:error] [pid 17808:tid 17834] [client 20.203.209.229:49742] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aet1QearbOEFI8qshvJMjgAAAFg"]
[Fri Apr 24 21:50:59.192549 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:57340] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aet1Q32asKnvdrSe0x42cAAAAYc"]
[Fri Apr 24 21:51:04.311170 2026] [:error] [pid 14531:tid 14542] [client 20.203.209.229:61972] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aet1SHfLU2gw-6KR-GbZJgAAAUk"]
[Fri Apr 24 21:51:05.283856 2026] [:error] [pid 17719:tid 17727] [client 20.203.209.229:26445] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "aet1ScTZ9gzEyL1BkPq3HAAAAIA"]
[Fri Apr 24 21:51:07.165126 2026] [:error] [pid 4177:tid 4209] [client 20.203.209.229:45144] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "aet1S32asKnvdrSe0x42fwAAAZg"]
[Fri Apr 24 21:51:14.272680 2026] [:error] [pid 17808:tid 17824] [client 20.203.209.229:44341] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "aet1UuarbOEFI8qshvJMqQAAAE4"]
[Fri Apr 24 21:51:16.965296 2026] [:error] [pid 17720:tid 17757] [client 20.203.209.229:19103] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "aet1VOhlUs6BS3Ng7_W-2AAAAMM"]
[Fri Apr 24 21:51:19.098491 2026] [:error] [pid 22114:tid 22134] [client 20.203.209.229:64793] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "aet1V4AuWGz3WlMQjof3lwAAARE"]
[Fri Apr 24 21:51:21.464858 2026] [:error] [pid 4177:tid 4189] [client 20.203.209.229:19779] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "aet1WX2asKnvdrSe0x42lgAAAYQ"]
[Fri Apr 24 21:51:23.710493 2026] [:error] [pid 17808:tid 17815] [client 20.203.209.229:37713] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "aet1W-arbOEFI8qshvJMvQAAAEU"]
[Fri Apr 24 21:51:25.646784 2026] [:error] [pid 4177:tid 4197] [client 20.203.209.229:17712] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "aet1XX2asKnvdrSe0x42sQAAAYw"]
[Fri Apr 24 21:51:27.134862 2026] [:error] [pid 14531:tid 14556] [client 20.203.209.229:19085] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "aet1X3fLU2gw-6KR-GbZNAAAAVc"]
[Fri Apr 24 21:51:30.170740 2026] [:error] [pid 14531:tid 14554] [client 20.203.209.229:37939] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aet1YnfLU2gw-6KR-GbZOAAAAVU"]
[Fri Apr 24 21:51:33.622840 2026] [:error] [pid 14531:tid 14553] [client 20.203.209.229:19836] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aet1ZXfLU2gw-6KR-GbZOwAAAVQ"]
[Fri Apr 24 21:51:34.575285 2026] [:error] [pid 17721:tid 17802] [client 20.203.209.229:19081] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aet1ZuFXXkLeyDnfk_9KTwAAABU"]
[Fri Apr 24 21:51:37.151781 2026] [:error] [pid 17721:tid 17781] [client 20.203.209.229:37724] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "aet1aeFXXkLeyDnfk_9KVAAAAAA"]
[Fri Apr 24 21:51:40.266855 2026] [:error] [pid 17808:tid 17823] [client 20.203.209.229:57349] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aet1bOarbOEFI8qshvJM3wAAAE0"]
[Fri Apr 24 21:51:41.936583 2026] [:error] [pid 17721:tid 17805] [client 20.203.209.229:58984] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aet1beFXXkLeyDnfk_9KVQAAABg"]
[Fri Apr 24 21:51:45.909987 2026] [:error] [pid 14531:tid 14537] [client 20.203.209.229:50845] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "aet1cXfLU2gw-6KR-GbZTQAAAUQ"]
[Fri Apr 24 21:51:51.460485 2026] [proxy_fcgi:error] [pid 4177:tid 4202] [client 20.203.209.229:24030] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:51:54.256805 2026] [proxy_fcgi:error] [pid 4177:tid 4194] [client 20.203.209.229:24030] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:51:56.600654 2026] [proxy_fcgi:error] [pid 4177:tid 4200] [client 20.203.209.229:24030] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:51:58.745971 2026] [proxy_fcgi:error] [pid 4177:tid 4195] [client 20.203.209.229:24030] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:52:01.084683 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 20.203.209.229:24030] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:52:03.209566 2026] [proxy_fcgi:error] [pid 4177:tid 4191] [client 20.203.209.229:24030] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:52:03.465158 2026] [:error] [pid 4177:tid 4209] [client 20.203.209.229:24030] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aet1g32asKnvdrSe0x43OgAAAZg"]
[Fri Apr 24 21:52:06.618508 2026] [:error] [pid 4177:tid 4197] [client 20.203.209.229:32638] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aet1hn2asKnvdrSe0x43TgAAAYw"]
[Fri Apr 24 21:52:11.934677 2026] [:error] [pid 4177:tid 4197] [client 20.203.209.229:29906] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aet1i32asKnvdrSe0x43hwAAAYw"]
[Fri Apr 24 21:52:15.462971 2026] [:error] [pid 22114:tid 22131] [client 20.203.209.229:33629] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/100.php"] [unique_id "aet1j4AuWGz3WlMQjof3qgAAAQ4"]
[Fri Apr 24 21:52:18.639720 2026] [:error] [pid 17720:tid 17773] [client 20.203.209.229:40216] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "aet1kuhlUs6BS3Ng7_W_ZAAAANM"]
[Fri Apr 24 21:52:20.383983 2026] [:error] [pid 17808:tid 17830] [client 20.203.209.229:55110] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "aet1lOarbOEFI8qshvJM_AAAAFQ"]
[Fri Apr 24 21:52:32.690782 2026] [:error] [pid 17719:tid 17736] [client 20.203.209.229:38847] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/koiy.php"] [unique_id "aet1oMTZ9gzEyL1BkPq3jwAAAIk"]
[Fri Apr 24 21:52:38.626777 2026] [:error] [pid 17721:tid 17785] [client 20.203.209.229:60649] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/koiy.php"] [unique_id "aet1puFXXkLeyDnfk_9KeQAAAAQ"]
[Fri Apr 24 21:52:40.080603 2026] [:error] [pid 4177:tid 4208] [client 20.203.209.229:31510] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/koiy.php"] [unique_id "aet1qH2asKnvdrSe0x43_gAAAZc"]
[Fri Apr 24 21:52:41.313539 2026] [:error] [pid 14531:tid 14536] [client 20.203.209.229:57992] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/koiy.php"] [unique_id "aet1qXfLU2gw-6KR-GbZkAAAAUM"]
[Fri Apr 24 21:52:47.304657 2026] [:error] [pid 17720:tid 17759] [client 20.203.209.229:38632] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "aet1r-hlUs6BS3Ng7_W_dAAAAMU"]
[Fri Apr 24 21:52:49.326171 2026] [:error] [pid 17720:tid 17761] [client 20.203.209.229:38607] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "aet1sehlUs6BS3Ng7_W_eAAAAMc"]
[Fri Apr 24 21:52:51.511325 2026] [:error] [pid 17721:tid 17787] [client 20.203.209.229:17951] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "aet1s-FXXkLeyDnfk_9KgAAAAAY"]
[Fri Apr 24 21:52:55.313355 2026] [:error] [pid 4177:tid 4209] [client 20.203.209.229:13262] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "aet1t32asKnvdrSe0x44IgAAAZg"]
[Fri Apr 24 21:52:56.923805 2026] [:error] [pid 17719:tid 17748] [client 20.203.209.229:18747] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "aet1uMTZ9gzEyL1BkPq3mgAAAJU"]
[Fri Apr 24 21:53:04.545751 2026] [proxy_fcgi:error] [pid 14531:tid 14552] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:07.501894 2026] [proxy_fcgi:error] [pid 14531:tid 14550] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:09.769509 2026] [proxy_fcgi:error] [pid 14531:tid 14555] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:11.936728 2026] [proxy_fcgi:error] [pid 14531:tid 14553] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:14.114684 2026] [proxy_fcgi:error] [pid 14531:tid 14545] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:16.205546 2026] [proxy_fcgi:error] [pid 14531:tid 14537] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:18.291857 2026] [proxy_fcgi:error] [pid 14531:tid 14535] [client 20.203.209.229:13257] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:53:18.539112 2026] [:error] [pid 14531:tid 14533] [client 20.203.209.229:13257] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file61.php"] [unique_id "aet1znfLU2gw-6KR-GbZ5QAAAUA"]
[Fri Apr 24 21:53:23.493127 2026] [:error] [pid 14531:tid 14536] [client 20.203.209.229:19528] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file61.php"] [unique_id "aet103fLU2gw-6KR-GbZ-AAAAUM"]
[Fri Apr 24 21:53:26.364133 2026] [:error] [pid 22114:tid 22134] [client 20.203.209.229:64988] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file61.php"] [unique_id "aet11oAuWGz3WlMQjof39gAAARE"]
[Fri Apr 24 21:53:27.644511 2026] [:error] [pid 4177:tid 4190] [client 20.203.209.229:15058] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/file61.php"] [unique_id "aet1132asKnvdrSe0x44WAAAAYU"]
[Fri Apr 24 21:53:30.179222 2026] [:error] [pid 17720:tid 17767] [client 20.203.209.229:12503] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Cap.php"] [unique_id "aet12uhlUs6BS3Ng7_W_tQAAAM0"]
[Fri Apr 24 21:53:35.618709 2026] [:error] [pid 17720:tid 17765] [client 20.203.209.229:64980] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Cap.php"] [unique_id "aet13-hlUs6BS3Ng7_W_xgAAAMs"]
[Fri Apr 24 21:53:39.812518 2026] [:error] [pid 17720:tid 17764] [client 20.203.209.229:64995] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/Cap.php"] [unique_id "aet14-hlUs6BS3Ng7_W_2QAAAMo"]
[Fri Apr 24 21:53:47.144189 2026] [:error] [pid 17808:tid 17831] [client 20.203.209.229:38574] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aet16-arbOEFI8qshvJNVQAAAFU"]
[Fri Apr 24 21:53:50.781678 2026] [:error] [pid 17719:tid 17727] [client 20.203.209.229:44444] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aet17sTZ9gzEyL1BkPq3wgAAAIA"]
[Fri Apr 24 21:53:55.018545 2026] [:error] [pid 17721:tid 17804] [client 20.203.209.229:28406] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aet18-FXXkLeyDnfk_9K3gAAABc"]
[Fri Apr 24 21:53:57.209938 2026] [:error] [pid 4177:tid 4196] [client 20.203.209.229:52603] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "aet19X2asKnvdrSe0x44ngAAAYs"]
[Fri Apr 24 21:53:59.044023 2026] [:error] [pid 17808:tid 17832] [client 20.203.209.229:5178] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aet19-arbOEFI8qshvJNZwAAAFY"]
[Fri Apr 24 21:54:01.806459 2026] [:error] [pid 14531:tid 14541] [client 20.203.209.229:62169] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aet1-XfLU2gw-6KR-GbaLAAAAUg"]
[Fri Apr 24 21:54:04.571384 2026] [:error] [pid 17720:tid 17773] [client 20.203.209.229:30078] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aet1_OhlUs6BS3Ng7_XAQQAAANM"]
[Fri Apr 24 21:54:05.397392 2026] [:error] [pid 17719:tid 17743] [client 20.203.209.229:44429] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "aet1_cTZ9gzEyL1BkPq3ygAAAJA"]
[Fri Apr 24 21:54:08.042286 2026] [:error] [pid 17720:tid 17768] [client 20.203.209.229:13940] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "aet2AOhlUs6BS3Ng7_XATQAAAM4"]
[Fri Apr 24 21:54:11.313104 2026] [:error] [pid 14531:tid 14538] [client 20.203.209.229:64942] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "aet2A3fLU2gw-6KR-GbaPgAAAUU"]
[Fri Apr 24 21:54:14.111827 2026] [:error] [pid 17720:tid 17769] [client 20.203.209.229:34659] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "aet2BuhlUs6BS3Ng7_XAaAAAAM8"]
[Fri Apr 24 21:54:22.319394 2026] [proxy_fcgi:error] [pid 17720:tid 17765] [client 20.203.209.229:34667] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:54:25.517379 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 20.203.209.229:55017] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:54:28.634861 2026] [proxy_fcgi:error] [pid 17720:tid 17760] [client 20.203.209.229:55017] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:54:30.825319 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 20.203.209.229:55017] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:54:32.958915 2026] [proxy_fcgi:error] [pid 17720:tid 17764] [client 20.203.209.229:55017] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:54:35.068106 2026] [proxy_fcgi:error] [pid 17720:tid 17761] [client 20.203.209.229:55017] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:54:35.324131 2026] [:error] [pid 17720:tid 17766] [client 20.203.209.229:55017] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aet2G-hlUs6BS3Ng7_XArwAAAMw"]
[Fri Apr 24 21:54:38.930058 2026] [:error] [pid 4177:tid 4195] [client 20.203.209.229:12225] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aet2Hn2asKnvdrSe0x44_wAAAYo"]
[Fri Apr 24 21:54:40.352979 2026] [:error] [pid 17719:tid 17728] [client 20.203.209.229:17358] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aet2IMTZ9gzEyL1BkPq33wAAAIE"]
[Fri Apr 24 21:54:43.514283 2026] [:error] [pid 17720:tid 17767] [client 20.203.209.229:26149] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/press.php"] [unique_id "aet2I-hlUs6BS3Ng7_XAtAAAAM0"]
[Fri Apr 24 21:54:46.576149 2026] [:error] [pid 17720:tid 17761] [client 20.203.209.229:17381] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "aet2JuhlUs6BS3Ng7_XAtgAAAMc"]
[Fri Apr 24 21:54:47.691872 2026] [:error] [pid 4177:tid 4193] [client 20.203.209.229:29965] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "aet2J32asKnvdrSe0x45FAAAAYg"]
[Fri Apr 24 21:54:50.421478 2026] [:error] [pid 17720:tid 17757] [client 20.203.209.229:38148] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "aet2KuhlUs6BS3Ng7_XAvQAAAMM"]
[Fri Apr 24 21:54:52.779520 2026] [:error] [pid 4177:tid 4205] [client 20.203.209.229:42757] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "aet2LH2asKnvdrSe0x45IAAAAZQ"]
[Fri Apr 24 21:54:54.414794 2026] [:error] [pid 4177:tid 4204] [client 20.203.209.229:40787] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "aet2Ln2asKnvdrSe0x45LQAAAZM"]
[Fri Apr 24 21:54:55.489027 2026] [:error] [pid 4177:tid 4202] [client 20.203.209.229:46326] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "aet2L32asKnvdrSe0x45NwAAAZE"]
[Fri Apr 24 21:54:57.747181 2026] [:error] [pid 17719:tid 17740] [client 20.203.209.229:28255] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "aet2McTZ9gzEyL1BkPq35gAAAI0"]
[Fri Apr 24 21:55:00.182010 2026] [:error] [pid 17808:tid 17820] [client 20.203.209.229:17405] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "aet2NOarbOEFI8qshvJN1wAAAEo"]
[Fri Apr 24 21:55:03.599540 2026] [:error] [pid 17719:tid 17730] [client 20.203.209.229:44511] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aet2N8TZ9gzEyL1BkPq36wAAAIM"]
[Fri Apr 24 21:55:04.763744 2026] [:error] [pid 17720:tid 17768] [client 20.203.209.229:32684] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aet2OOhlUs6BS3Ng7_XA1gAAAM4"]
[Fri Apr 24 21:55:06.796970 2026] [:error] [pid 17720:tid 17778] [client 20.203.209.229:39919] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aet2OuhlUs6BS3Ng7_XA3wAAANg"]
[Fri Apr 24 21:55:08.747818 2026] [:error] [pid 17808:tid 17817] [client 20.203.209.229:32516] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "aet2POarbOEFI8qshvJN8wAAAEc"]
[Fri Apr 24 21:55:11.243806 2026] [:error] [pid 4177:tid 4208] [client 20.203.209.229:15719] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aet2P32asKnvdrSe0x45YQAAAZc"]
[Fri Apr 24 21:55:13.346791 2026] [:error] [pid 17720:tid 17766] [client 20.203.209.229:40714] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aet2QehlUs6BS3Ng7_XA6gAAAMw"]
[Fri Apr 24 21:55:14.391542 2026] [:error] [pid 17720:tid 17776] [client 20.203.209.229:40724] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aet2QuhlUs6BS3Ng7_XA6wAAANY"]
[Fri Apr 24 21:55:16.131769 2026] [:error] [pid 4177:tid 4189] [client 20.203.209.229:58296] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "aet2RH2asKnvdrSe0x45awAAAYQ"]
[Fri Apr 24 21:55:17.149628 2026] [:error] [pid 22114:tid 22119] [client 20.203.209.229:47345] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aet2RYAuWGz3WlMQjof4PQAAAQI"]
[Fri Apr 24 21:55:20.152091 2026] [:error] [pid 4177:tid 4188] [client 20.203.209.229:26273] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aet2SH2asKnvdrSe0x45dwAAAYM"]
[Fri Apr 24 21:55:21.456803 2026] [:error] [pid 17720:tid 17763] [client 20.203.209.229:57316] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aet2SehlUs6BS3Ng7_XA9QAAAMk"]
[Fri Apr 24 21:55:23.380110 2026] [:error] [pid 17721:tid 17785] [client 20.203.209.229:60460] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "aet2S-FXXkLeyDnfk_9LpQAAAAQ"]
[Fri Apr 24 21:55:24.394615 2026] [:error] [pid 4177:tid 4187] [client 20.203.209.229:11084] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "aet2TH2asKnvdrSe0x45igAAAYI"]
[Fri Apr 24 21:55:26.620620 2026] [:error] [pid 17808:tid 17829] [client 20.203.209.229:53513] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "aet2TuarbOEFI8qshvJOIQAAAFM"]
[Fri Apr 24 21:55:28.018482 2026] [:error] [pid 17719:tid 17747] [client 20.203.209.229:44343] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "aet2UMTZ9gzEyL1BkPq4IAAAAJQ"]
[Fri Apr 24 21:55:30.943477 2026] [:error] [pid 22114:tid 22126] [client 20.203.209.229:17646] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "aet2UoAuWGz3WlMQjof4VAAAAQk"]
[Fri Apr 24 21:55:32.238162 2026] [:error] [pid 17720:tid 17776] [client 20.203.209.229:44349] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aet2VOhlUs6BS3Ng7_XBFwAAANY"]
[Fri Apr 24 21:55:32.766280 2026] [:error] [pid 4177:tid 4197] [client 20.203.209.229:17610] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/666.php"] [unique_id "aet2VH2asKnvdrSe0x45qQAAAYw"]
[Fri Apr 24 21:55:37.979578 2026] [proxy_fcgi:error] [pid 4177:tid 4196] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:41.003325 2026] [proxy_fcgi:error] [pid 4177:tid 4192] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:43.434009 2026] [proxy_fcgi:error] [pid 4177:tid 4205] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:45.610000 2026] [proxy_fcgi:error] [pid 4177:tid 4204] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:47.863605 2026] [proxy_fcgi:error] [pid 4177:tid 4188] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:50.054385 2026] [proxy_fcgi:error] [pid 4177:tid 4194] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:52.231311 2026] [proxy_fcgi:error] [pid 4177:tid 4205] [client 20.203.209.229:53551] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:55:52.522487 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:53551] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "aet2aH2asKnvdrSe0x45-gAAAYc"]
[Fri Apr 24 21:55:57.493747 2026] [:error] [pid 14531:tid 14540] [client 20.203.209.229:53843] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "aet2bXfLU2gw-6KR-GbatAAAAUc"]
[Fri Apr 24 21:56:01.646287 2026] [:error] [pid 17808:tid 17826] [client 20.203.209.229:19083] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "aet2cearbOEFI8qshvJOcwAAAFA"]
[Fri Apr 24 21:56:02.528072 2026] [:error] [pid 17719:tid 17737] [client 20.203.209.229:5757] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "aet2csTZ9gzEyL1BkPq4OAAAAIo"]
[Fri Apr 24 21:56:03.862478 2026] [:error] [pid 4177:tid 4201] [client 20.203.209.229:50826] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aet2c32asKnvdrSe0x46JwAAAZA"]
[Fri Apr 24 21:56:05.756454 2026] [:error] [pid 17719:tid 17744] [client 20.203.209.229:40764] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aet2dcTZ9gzEyL1BkPq4PgAAAJE"]
[Fri Apr 24 21:56:09.081391 2026] [:error] [pid 4177:tid 4196] [client 20.203.209.229:5585] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aet2eX2asKnvdrSe0x46OQAAAYs"]
[Fri Apr 24 21:56:13.044750 2026] [:error] [pid 4177:tid 4207] [client 20.203.209.229:24000] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "aet2fX2asKnvdrSe0x46UgAAAZY"]
[Fri Apr 24 21:56:14.943577 2026] [:error] [pid 17719:tid 17733] [client 20.203.209.229:37936] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "aet2fsTZ9gzEyL1BkPq4UgAAAIY"]
[Fri Apr 24 21:56:16.206752 2026] [:error] [pid 17720:tid 17778] [client 20.203.209.229:5575] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "aet2gOhlUs6BS3Ng7_XBSAAAANg"]
[Fri Apr 24 21:56:20.775191 2026] [:error] [pid 17721:tid 17786] [client 20.203.209.229:50873] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "aet2hOFXXkLeyDnfk_9MBAAAAAU"]
[Fri Apr 24 21:56:27.935629 2026] [:error] [pid 4177:tid 4200] [client 20.203.209.229:31808] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "aet2i32asKnvdrSe0x46cQAAAY8"]
[Fri Apr 24 21:56:30.494526 2026] [:error] [pid 4177:tid 4191] [client 20.203.209.229:54900] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aet2jn2asKnvdrSe0x46gAAAAYY"]
[Fri Apr 24 21:56:34.962167 2026] [:error] [pid 4177:tid 4192] [client 20.203.209.229:33612] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aet2kn2asKnvdrSe0x46lQAAAYc"]
[Fri Apr 24 21:56:38.066551 2026] [:error] [pid 14531:tid 14555] [client 20.203.209.229:60913] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aet2lnfLU2gw-6KR-Gba1QAAAVY"]
[Fri Apr 24 21:56:40.178486 2026] [:error] [pid 4177:tid 4198] [client 20.203.209.229:23985] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "aet2mH2asKnvdrSe0x46sgAAAY0"]
[Fri Apr 24 21:56:42.555686 2026] [:error] [pid 17720:tid 17760] [client 20.203.209.229:64886] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "aet2muhlUs6BS3Ng7_XBawAAAMY"]
[Fri Apr 24 21:56:46.186284 2026] [:error] [pid 14531:tid 14550] [client 20.203.209.229:23961] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "aet2nnfLU2gw-6KR-Gba3gAAAVE"]
[Fri Apr 24 21:56:47.675228 2026] [:error] [pid 17721:tid 17800] [client 20.203.209.229:15396] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "aet2n-FXXkLeyDnfk_9MKQAAABM"]
[Fri Apr 24 21:56:49.030841 2026] [:error] [pid 17720:tid 17763] [client 20.203.209.229:57369] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "aet2oehlUs6BS3Ng7_XBfgAAAMk"]
[Fri Apr 24 21:56:49.858901 2026] [:error] [pid 4177:tid 4186] [client 20.203.209.229:11139] [client 20.203.209.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/jga.php"] [unique_id "aet2oX2asKnvdrSe0x46vwAAAYE"]
[Fri Apr 24 21:56:54.790702 2026] [proxy_fcgi:error] [pid 17808:tid 17828] [client 20.203.209.229:31841] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:56:58.002448 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 20.203.209.229:31841] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:57:00.613264 2026] [proxy_fcgi:error] [pid 17808:tid 17818] [client 20.203.209.229:31841] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:57:02.932001 2026] [proxy_fcgi:error] [pid 17808:tid 17825] [client 20.203.209.229:31841] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 21:57:05.138643 2026] [proxy_fcgi:error] [pid 17808:tid 17816] [client 20.203.209.229:31841] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 22:18:31.258314 2026] [proxy_fcgi:error] [pid 4177:tid 4196] [client 194.31.52.96:46458] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 22:18:37.935326 2026] [proxy_fcgi:error] [pid 4177:tid 4187] [client 194.31.52.96:46458] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Fri Apr 24 22:18:38.882939 2026] [:error] [pid 4177:tid 4192] [client 194.31.52.96:46458] [client 194.31.52.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.local"] [unique_id "aet7vn2asKnvdrSe0x5F4gAAAYc"]
[Sat Apr 25 00:01:49.208825 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:49.208864 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 01:16:58.583566 2026] [proxy_fcgi:error] [pid 42852:tid 42865] [client 74.7.230.36:37516] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 25 01:17:01.444225 2026] [proxy_fcgi:error] [pid 42792:tid 42834] [client 74.7.241.25:47382] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 25 03:25:48.434858 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:48.434883 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.543764 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.543789 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.758342 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.758368 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:06.766043 2026] [:error] [pid 40306:tid 40318] [client 154.58.229.82:38788] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aevDzlB_-s7WCDDK3qVN1QAAAAg"]
[Sat Apr 25 03:26:06.767287 2026] [:error] [pid 40306:tid 40321] [client 154.58.229.82:38758] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/HEAD"] [unique_id "aevDzlB_-s7WCDDK3qVN1gAAAAs"]
[Sat Apr 25 03:26:08.653016 2026] [proxy_fcgi:error] [pid 40306:tid 40320] [client 154.58.229.82:38774] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 25 03:26:15.065586 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:15.065615 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:28.924153 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:28.924190 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:30.923161 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:30.923188 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:02.126853 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:02.126917 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:04.217215 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:04.217292 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:47.114589 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:47.114616 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:49.209299 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:49.209325 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:14.376731 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:14.376760 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:17.793513 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:17.793543 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.747347 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.747375 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:34.883864 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:34.883890 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:39:37.626395 2026] [proxy_fcgi:error] [pid 59897:tid 59937] [client 74.7.230.36:40182] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 25 22:18:08.499665 2026] [proxy_fcgi:error] [pid 3212:tid 3238] [client 52.167.144.204:4136] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 25 22:37:57.689680 2026] [proxy_fcgi:error] [pid 59898:tid 59971] [client 34.11.225.63:36812] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sat Apr 25 22:37:57.823538 2026] [proxy_fcgi:error] [pid 59898:tid 59966] [client 34.11.225.63:11603] AH01071: Got error 'PHP message: PHP Warning: file_put_contents(/home/end2endh/public_html/wp-content/uploads/unlimited_elements_cache/index.html): Failed to open stream: Permission denied in /home/end2endh/public_html/wp-content/plugins/unlimited-elements-for-elementor/inc_php/framework/functions.class.php on line 4322'
[Sun Apr 26 03:48:45.468575 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:45.468604 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.571173 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.571199 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:01.395196 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:01.395223 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:11.238823 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:11.238848 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:18.070561 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:18.070587 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:20.094594 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:20.094623 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:38.047867 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:38.047897 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:40.325797 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:40.325825 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:16.960206 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:16.960233 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:18.948673 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:18.948720 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 12:42:16.685199 2026] [:error] [pid 8491:tid 8508] [client 137.184.226.220:54806] [client 137.184.226.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "ae2XqCq7I7e6CJooQM3ULQAAAMk"]
[Sun Apr 26 22:06:52.082781 2026] [authz_core:error] [pid 8383:tid 8401] [client 31.134.5.119:55925] AH01630: client denied by server configuration: /home/end2endh/public_html/.aws
[Sun Apr 26 22:06:55.244519 2026] [authz_core:error] [pid 8383:tid 8406] [client 31.134.5.119:38905] AH01630: client denied by server configuration: /home/end2endh/public_html/.aws
[Mon Apr 27 03:36:43.444102 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:43.444128 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.584761 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.584786 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:00.877016 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:00.877052 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.548144 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.548170 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:16.312778 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:16.312807 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:18.318089 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:18.318113 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:43.881611 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:43.881651 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:45.913590 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:45.913616 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:14.981764 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:14.981807 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:17.020092 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:17.020119 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:15.100471 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:15.100514 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:29.918037 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:29.918065 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:39:36.242348 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:12444] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tmpls.php"] [unique_id "ae6iONnrZBzXPaJGSeLrZAAAAMg"]
[Mon Apr 27 07:39:37.427786 2026] [:error] [pid 36789:tid 36800] [client 51.13.123.225:21259] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tmpls.php"] [unique_id "ae6iOdnrZBzXPaJGSeLraAAAAMk"]
[Mon Apr 27 07:39:38.222784 2026] [:error] [pid 36488:tid 36510] [client 51.13.123.225:37485] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tmpls.php"] [unique_id "ae6iOsIA2VZgjxmwXxP6yQAAABE"]
[Mon Apr 27 07:39:39.663899 2026] [:error] [pid 36490:tid 36561] [client 51.13.123.225:63449] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tmpls.php"] [unique_id "ae6iO0xiWa1s9LPhuWK30QAAAI0"]
[Mon Apr 27 07:39:41.018608 2026] [:error] [pid 36575:tid 36579] [client 51.13.123.225:56201] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3.php"] [unique_id "ae6iPbeGZIkifrMjcl9P0wAAAQI"]
[Mon Apr 27 07:39:42.385382 2026] [:error] [pid 36490:tid 36562] [client 51.13.123.225:37451] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3.php"] [unique_id "ae6iPkxiWa1s9LPhuWK31AAAAI4"]
[Mon Apr 27 07:39:43.529684 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:52460] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3.php"] [unique_id "ae6iP9nrZBzXPaJGSeLreAAAAMg"]
[Mon Apr 27 07:39:44.870554 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:37467] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3.php"] [unique_id "ae6iQNnrZBzXPaJGSeLrgQAAAMg"]
[Mon Apr 27 07:39:46.048451 2026] [:error] [pid 36575:tid 36599] [client 51.13.123.225:56253] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6iQreGZIkifrMjcl9P1wAAARY"]
[Mon Apr 27 07:39:47.256468 2026] [:error] [pid 36789:tid 36815] [client 51.13.123.225:4957] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6iQ9nrZBzXPaJGSeLrhwAAANg"]
[Mon Apr 27 07:39:48.559155 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:21275] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6iRLeGZIkifrMjcl9P2gAAAQs"]
[Mon Apr 27 07:39:49.680829 2026] [:error] [pid 36789:tid 36802] [client 51.13.123.225:14810] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-aaa.php"] [unique_id "ae6iRdnrZBzXPaJGSeLrigAAAMs"]
[Mon Apr 27 07:39:50.602876 2026] [:error] [pid 36489:tid 36543] [client 51.13.123.225:4986] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6iRo6sRkW8OfGv18q4JAAAAFY"]
[Mon Apr 27 07:39:51.848806 2026] [:error] [pid 36489:tid 36538] [client 51.13.123.225:14786] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6iR46sRkW8OfGv18q4LgAAAFE"]
[Mon Apr 27 07:39:53.419806 2026] [:error] [pid 36489:tid 36526] [client 51.13.123.225:13927] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6iSY6sRkW8OfGv18q4OAAAAEU"]
[Mon Apr 27 07:39:54.621522 2026] [:error] [pid 36489:tid 36535] [client 51.13.123.225:63474] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae6iSo6sRkW8OfGv18q4PgAAAE4"]
[Mon Apr 27 07:39:55.794360 2026] [:error] [pid 36789:tid 36808] [client 51.13.123.225:53086] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mo.php"] [unique_id "ae6iS9nrZBzXPaJGSeLrlAAAANE"]
[Mon Apr 27 07:39:56.625561 2026] [:error] [pid 36789:tid 36811] [client 51.13.123.225:37471] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mo.php"] [unique_id "ae6iTNnrZBzXPaJGSeLrmAAAANQ"]
[Mon Apr 27 07:39:57.875170 2026] [:error] [pid 36490:tid 36557] [client 51.13.123.225:53068] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mo.php"] [unique_id "ae6iTUxiWa1s9LPhuWK34QAAAIk"]
[Mon Apr 27 07:39:59.163883 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:37475] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mo.php"] [unique_id "ae6iT9nrZBzXPaJGSeLrmwAAAMY"]
[Mon Apr 27 07:40:00.146478 2026] [:error] [pid 36575:tid 36595] [client 51.13.123.225:42089] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file5.php"] [unique_id "ae6iULeGZIkifrMjcl9P5wAAARI"]
[Mon Apr 27 07:40:01.215450 2026] [:error] [pid 36575:tid 36590] [client 51.13.123.225:4589] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file5.php"] [unique_id "ae6iUbeGZIkifrMjcl9P6QAAAQ0"]
[Mon Apr 27 07:40:02.468102 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:11004] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file5.php"] [unique_id "ae6iUkxiWa1s9LPhuWK35QAAAJQ"]
[Mon Apr 27 07:40:03.650853 2026] [:error] [pid 36490:tid 36549] [client 51.13.123.225:4586] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file5.php"] [unique_id "ae6iU0xiWa1s9LPhuWK35wAAAIE"]
[Mon Apr 27 07:40:04.747007 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:4835] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6iVNnrZBzXPaJGSeLrogAAANc"]
[Mon Apr 27 07:40:05.982189 2026] [:error] [pid 36789:tid 36810] [client 51.13.123.225:4800] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6iVdnrZBzXPaJGSeLrpAAAANM"]
[Mon Apr 27 07:40:07.175445 2026] [:error] [pid 36490:tid 36566] [client 51.13.123.225:56235] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6iV0xiWa1s9LPhuWK37AAAAJI"]
[Mon Apr 27 07:40:08.242643 2026] [:error] [pid 36490:tid 36551] [client 51.13.123.225:7441] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xrm.php"] [unique_id "ae6iWExiWa1s9LPhuWK3-QAAAIM"]
[Mon Apr 27 07:40:09.375947 2026] [:error] [pid 36490:tid 36556] [client 51.13.123.225:7450] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6iWUxiWa1s9LPhuWK4BwAAAIg"]
[Mon Apr 27 07:40:10.627211 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:10998] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6iWreGZIkifrMjcl9P-QAAAQs"]
[Mon Apr 27 07:40:11.556302 2026] [:error] [pid 36575:tid 36600] [client 51.13.123.225:4851] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6iW7eGZIkifrMjcl9P_AAAARc"]
[Mon Apr 27 07:40:16.538791 2026] [:error] [pid 36488:tid 36497] [client 51.13.123.225:56218] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-asudo.php"] [unique_id "ae6iYMIA2VZgjxmwXxP63QAAAAQ"]
[Mon Apr 27 07:40:17.314490 2026] [:error] [pid 36488:tid 36493] [client 51.13.123.225:26540] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wdone1.php"] [unique_id "ae6iYcIA2VZgjxmwXxP63wAAAAE"]
[Mon Apr 27 07:40:18.369184 2026] [:error] [pid 36490:tid 36559] [client 51.13.123.225:54753] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wdone1.php"] [unique_id "ae6iYkxiWa1s9LPhuWK4DwAAAIs"]
[Mon Apr 27 07:40:19.399665 2026] [:error] [pid 36490:tid 36551] [client 51.13.123.225:24643] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wdone1.php"] [unique_id "ae6iY0xiWa1s9LPhuWK4EAAAAIM"]
[Mon Apr 27 07:40:20.749246 2026] [:error] [pid 36575:tid 36592] [client 51.13.123.225:26545] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wdone1.php"] [unique_id "ae6iZLeGZIkifrMjcl9QDAAAAQ8"]
[Mon Apr 27 07:40:21.622758 2026] [:error] [pid 36575:tid 36598] [client 51.13.123.225:47785] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file3.php"] [unique_id "ae6iZbeGZIkifrMjcl9QDgAAARU"]
[Mon Apr 27 07:40:23.432664 2026] [:error] [pid 36789:tid 36793] [client 51.13.123.225:18483] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file3.php"] [unique_id "ae6iZ9nrZBzXPaJGSeLrrwAAAMI"]
[Mon Apr 27 07:40:24.661589 2026] [:error] [pid 36575:tid 36598] [client 51.13.123.225:63402] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file3.php"] [unique_id "ae6iaLeGZIkifrMjcl9QFwAAARU"]
[Mon Apr 27 07:40:25.950061 2026] [:error] [pid 36575:tid 36589] [client 51.13.123.225:49056] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file3.php"] [unique_id "ae6iabeGZIkifrMjcl9QHAAAAQw"]
[Mon Apr 27 07:40:27.048462 2026] [:error] [pid 36575:tid 36581] [client 51.13.123.225:18440] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "ae6ia7eGZIkifrMjcl9QIAAAAQQ"]
[Mon Apr 27 07:40:28.249968 2026] [:error] [pid 36488:tid 36515] [client 51.13.123.225:15143] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "ae6ibMIA2VZgjxmwXxP65gAAABY"]
[Mon Apr 27 07:40:29.427458 2026] [:error] [pid 36488:tid 36494] [client 51.13.123.225:4244] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "ae6ibcIA2VZgjxmwXxP65wAAAAI"]
[Mon Apr 27 07:40:30.513181 2026] [:error] [pid 36789:tid 36794] [client 51.13.123.225:49057] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/G-In.php"] [unique_id "ae6ibtnrZBzXPaJGSeLrzAAAAMM"]
[Mon Apr 27 07:40:31.381820 2026] [:error] [pid 36488:tid 36506] [client 51.13.123.225:49084] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blox.php"] [unique_id "ae6ib8IA2VZgjxmwXxP66AAAAA0"]
[Mon Apr 27 07:40:32.256830 2026] [:error] [pid 36488:tid 36512] [client 51.13.123.225:23513] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blox.php"] [unique_id "ae6icMIA2VZgjxmwXxP66gAAABM"]
[Mon Apr 27 07:40:33.274444 2026] [:error] [pid 36488:tid 36516] [client 51.13.123.225:47779] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/blox.php"] [unique_id "ae6iccIA2VZgjxmwXxP67AAAABc"]
[Mon Apr 27 07:41:00.477548 2026] [:error] [pid 36490:tid 36566] [client 51.13.123.225:23498] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/r4f_1.php"] [unique_id "ae6ijExiWa1s9LPhuWK4RwAAAJI"]
[Mon Apr 27 07:41:02.033730 2026] [:error] [pid 36490:tid 36560] [client 51.13.123.225:39998] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/r4f_1.php"] [unique_id "ae6ijkxiWa1s9LPhuWK4TAAAAIw"]
[Mon Apr 27 07:41:02.931818 2026] [:error] [pid 36490:tid 36553] [client 51.13.123.225:47796] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/r4f_1.php"] [unique_id "ae6ijkxiWa1s9LPhuWK4UAAAAIU"]
[Mon Apr 27 07:41:03.945465 2026] [:error] [pid 36488:tid 36517] [client 51.13.123.225:61103] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/r4f_1.php"] [unique_id "ae6ij8IA2VZgjxmwXxP7AQAAABg"]
[Mon Apr 27 07:41:04.883474 2026] [:error] [pid 36488:tid 36497] [client 51.13.123.225:39953] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ae6ikMIA2VZgjxmwXxP7AgAAAAQ"]
[Mon Apr 27 07:41:05.832057 2026] [:error] [pid 36789:tid 36792] [client 51.13.123.225:54674] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ae6ikdnrZBzXPaJGSeLsGQAAAME"]
[Mon Apr 27 07:41:06.681815 2026] [:error] [pid 36490:tid 36564] [client 51.13.123.225:22296] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ae6ikkxiWa1s9LPhuWK4VAAAAJA"]
[Mon Apr 27 07:41:07.388793 2026] [:error] [pid 36489:tid 36521] [client 51.13.123.225:30714] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp1.php"] [unique_id "ae6ik46sRkW8OfGv18q45wAAAEA"]
[Mon Apr 27 07:41:08.375129 2026] [:error] [pid 36575:tid 36578] [client 51.13.123.225:47748] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/33.php"] [unique_id "ae6ilLeGZIkifrMjcl9QQAAAAQE"]
[Mon Apr 27 07:41:09.247045 2026] [:error] [pid 36575:tid 36597] [client 51.13.123.225:50770] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/33.php"] [unique_id "ae6ilbeGZIkifrMjcl9QQwAAARQ"]
[Mon Apr 27 07:41:10.551610 2026] [:error] [pid 36575:tid 36582] [client 51.13.123.225:39958] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/33.php"] [unique_id "ae6ilreGZIkifrMjcl9QSAAAAQU"]
[Mon Apr 27 07:41:11.473243 2026] [:error] [pid 36490:tid 36567] [client 51.13.123.225:50768] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/33.php"] [unique_id "ae6il0xiWa1s9LPhuWK4VwAAAJM"]
[Mon Apr 27 07:41:12.437961 2026] [:error] [pid 36789:tid 36805] [client 51.13.123.225:15169] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-gr.php"] [unique_id "ae6imNnrZBzXPaJGSeLsJgAAAM4"]
[Mon Apr 27 07:41:13.318926 2026] [:error] [pid 36789:tid 36792] [client 51.13.123.225:22876] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-gr.php"] [unique_id "ae6imdnrZBzXPaJGSeLsLAAAAME"]
[Mon Apr 27 07:41:14.287707 2026] [:error] [pid 36789:tid 36813] [client 51.13.123.225:47770] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-gr.php"] [unique_id "ae6imtnrZBzXPaJGSeLsMwAAANY"]
[Mon Apr 27 07:41:15.342959 2026] [:error] [pid 36488:tid 36499] [client 51.13.123.225:32977] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-gr.php"] [unique_id "ae6im8IA2VZgjxmwXxP7BQAAAAY"]
[Mon Apr 27 07:41:16.336299 2026] [:error] [pid 36488:tid 36514] [client 51.13.123.225:33707] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mans.php"] [unique_id "ae6inMIA2VZgjxmwXxP7BgAAABU"]
[Mon Apr 27 07:41:17.158730 2026] [:error] [pid 36488:tid 36511] [client 51.13.123.225:32993] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mans.php"] [unique_id "ae6incIA2VZgjxmwXxP7CQAAABI"]
[Mon Apr 27 07:41:18.409954 2026] [:error] [pid 36490:tid 36560] [client 51.13.123.225:30682] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mans.php"] [unique_id "ae6inkxiWa1s9LPhuWK4YQAAAIw"]
[Mon Apr 27 07:41:19.316027 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:15209] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mans.php"] [unique_id "ae6in0xiWa1s9LPhuWK4YwAAAJQ"]
[Mon Apr 27 07:41:20.184811 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:33006] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ae6ioNnrZBzXPaJGSeLsPwAAAMg"]
[Mon Apr 27 07:41:21.133940 2026] [:error] [pid 36488:tid 36505] [client 51.13.123.225:13855] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ae6iocIA2VZgjxmwXxP7EAAAAAw"]
[Mon Apr 27 07:41:22.183276 2026] [:error] [pid 36490:tid 36566] [client 51.13.123.225:61091] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ae6iokxiWa1s9LPhuWK4ZAAAAJI"]
[Mon Apr 27 07:41:23.450331 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:33710] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ae6io7eGZIkifrMjcl9QUwAAAQA"]
[Mon Apr 27 07:41:25.033658 2026] [:error] [pid 36489:tid 36538] [client 51.13.123.225:17046] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxin.php"] [unique_id "ae6ipY6sRkW8OfGv18q49gAAAFE"]
[Mon Apr 27 07:41:26.489602 2026] [:error] [pid 36575:tid 36589] [client 51.13.123.225:23491] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxin.php"] [unique_id "ae6ipreGZIkifrMjcl9QXAAAAQw"]
[Mon Apr 27 07:41:27.595603 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:33016] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxin.php"] [unique_id "ae6ip7eGZIkifrMjcl9QXwAAAQs"]
[Mon Apr 27 07:41:28.799300 2026] [:error] [pid 36575:tid 36583] [client 51.13.123.225:30707] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zxin.php"] [unique_id "ae6iqLeGZIkifrMjcl9QYgAAAQY"]
[Mon Apr 27 07:41:29.965322 2026] [:error] [pid 36490:tid 36571] [client 51.13.123.225:33023] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ae6iqUxiWa1s9LPhuWK4bwAAAJc"]
[Mon Apr 27 07:41:31.071863 2026] [:error] [pid 36488:tid 36504] [client 51.13.123.225:30709] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ae6iq8IA2VZgjxmwXxP7GgAAAAs"]
[Mon Apr 27 07:41:31.962556 2026] [:error] [pid 36490:tid 36555] [client 51.13.123.225:50795] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ae6iq0xiWa1s9LPhuWK4dgAAAIc"]
[Mon Apr 27 07:41:32.806949 2026] [:error] [pid 36490:tid 36560] [client 51.13.123.225:50776] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ae6irExiWa1s9LPhuWK4dwAAAIw"]
[Mon Apr 27 07:41:33.909364 2026] [:error] [pid 36490:tid 36569] [client 51.13.123.225:33684] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ae6irUxiWa1s9LPhuWK4ewAAAJU"]
[Mon Apr 27 07:41:34.724223 2026] [:error] [pid 36488:tid 36516] [client 51.13.123.225:33003] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ae6irsIA2VZgjxmwXxP7IgAAABc"]
[Mon Apr 27 07:41:35.698791 2026] [:error] [pid 36488:tid 36511] [client 51.13.123.225:23547] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ae6ir8IA2VZgjxmwXxP7JAAAABI"]
[Mon Apr 27 07:41:36.565688 2026] [:error] [pid 36488:tid 36509] [client 51.13.123.225:23489] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ae6isMIA2VZgjxmwXxP7JgAAABA"]
[Mon Apr 27 07:41:37.352188 2026] [:error] [pid 36489:tid 36524] [client 51.13.123.225:15228] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hk.php"] [unique_id "ae6isY6sRkW8OfGv18q5AwAAAEM"]
[Mon Apr 27 07:41:38.486819 2026] [:error] [pid 36575:tid 36586] [client 51.13.123.225:54710] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hk.php"] [unique_id "ae6isreGZIkifrMjcl9QcgAAAQk"]
[Mon Apr 27 07:41:39.270160 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:30694] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hk.php"] [unique_id "ae6is7eGZIkifrMjcl9QdgAAAQc"]
[Mon Apr 27 07:41:40.139600 2026] [:error] [pid 36488:tid 36506] [client 51.13.123.225:47759] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hk.php"] [unique_id "ae6itMIA2VZgjxmwXxP7KgAAAA0"]
[Mon Apr 27 07:41:41.193962 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:50792] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lco.php"] [unique_id "ae6itbeGZIkifrMjcl9QfQAAAQA"]
[Mon Apr 27 07:41:42.358373 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:23508] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lco.php"] [unique_id "ae6itkxiWa1s9LPhuWK4kAAAAJQ"]
[Mon Apr 27 07:41:43.715093 2026] [:error] [pid 36489:tid 36540] [client 51.13.123.225:61073] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lco.php"] [unique_id "ae6it46sRkW8OfGv18q5BwAAAFM"]
[Mon Apr 27 07:41:44.536777 2026] [:error] [pid 36489:tid 36535] [client 51.13.123.225:15231] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lco.php"] [unique_id "ae6iuI6sRkW8OfGv18q5CAAAAE4"]
[Mon Apr 27 07:41:46.032409 2026] [:error] [pid 36575:tid 36593] [client 51.13.123.225:13839] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ae6iureGZIkifrMjcl9QiQAAARA"]
[Mon Apr 27 07:41:46.913592 2026] [:error] [pid 36488:tid 36512] [client 51.13.123.225:61058] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ae6iusIA2VZgjxmwXxP7NQAAABM"]
[Mon Apr 27 07:41:47.708202 2026] [:error] [pid 36575:tid 36591] [client 51.13.123.225:30693] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ae6iu7eGZIkifrMjcl9QigAAAQ4"]
[Mon Apr 27 07:41:49.318250 2026] [:error] [pid 36789:tid 36807] [client 51.13.123.225:39980] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ae6ivdnrZBzXPaJGSeLsXwAAANA"]
[Mon Apr 27 07:41:50.251464 2026] [:error] [pid 36575:tid 36578] [client 51.13.123.225:22304] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "ae6ivreGZIkifrMjcl9QjgAAAQE"]
[Mon Apr 27 07:41:51.191827 2026] [:error] [pid 36575:tid 36585] [client 51.13.123.225:13887] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "ae6iv7eGZIkifrMjcl9QlAAAAQg"]
[Mon Apr 27 07:41:52.210613 2026] [:error] [pid 36575:tid 36591] [client 51.13.123.225:54687] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "ae6iwLeGZIkifrMjcl9QmAAAAQ4"]
[Mon Apr 27 07:41:53.340818 2026] [:error] [pid 36490:tid 36559] [client 51.13.123.225:54689] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "ae6iwUxiWa1s9LPhuWK4qAAAAIs"]
[Mon Apr 27 07:41:54.225228 2026] [:error] [pid 36488:tid 36505] [client 51.13.123.225:23509] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huyaa.php"] [unique_id "ae6iwsIA2VZgjxmwXxP7OwAAAAw"]
[Mon Apr 27 07:41:55.095210 2026] [:error] [pid 36490:tid 36552] [client 51.13.123.225:4225] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huyaa.php"] [unique_id "ae6iw0xiWa1s9LPhuWK4rQAAAIQ"]
[Mon Apr 27 07:41:56.006596 2026] [:error] [pid 36489:tid 36526] [client 51.13.123.225:33720] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huyaa.php"] [unique_id "ae6ixI6sRkW8OfGv18q5FgAAAEU"]
[Mon Apr 27 07:41:57.231148 2026] [:error] [pid 36490:tid 36563] [client 51.13.123.225:54670] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/huyaa.php"] [unique_id "ae6ixUxiWa1s9LPhuWK4tQAAAI8"]
[Mon Apr 27 07:42:27.357146 2026] [:error] [pid 36489:tid 36534] [client 51.13.123.225:15196] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v4.php"] [unique_id "ae6i446sRkW8OfGv18q5PQAAAE0"]
[Mon Apr 27 07:42:28.341489 2026] [:error] [pid 36489:tid 36533] [client 51.13.123.225:27787] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v4.php"] [unique_id "ae6i5I6sRkW8OfGv18q5PwAAAEw"]
[Mon Apr 27 07:42:29.272588 2026] [:error] [pid 36488:tid 36514] [client 51.13.123.225:4166] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v4.php"] [unique_id "ae6i5cIA2VZgjxmwXxP7XQAAABU"]
[Mon Apr 27 07:42:30.166383 2026] [:error] [pid 36489:tid 36545] [client 51.13.123.225:21331] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v4.php"] [unique_id "ae6i5o6sRkW8OfGv18q5QwAAAFg"]
[Mon Apr 27 07:42:31.060046 2026] [:error] [pid 36489:tid 36543] [client 51.13.123.225:30645] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp4.php"] [unique_id "ae6i546sRkW8OfGv18q5SQAAAFY"]
[Mon Apr 27 07:42:31.963044 2026] [:error] [pid 36490:tid 36569] [client 51.13.123.225:21314] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp4.php"] [unique_id "ae6i50xiWa1s9LPhuWK44gAAAJU"]
[Mon Apr 27 07:42:32.892053 2026] [:error] [pid 36488:tid 36513] [client 51.13.123.225:59422] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp4.php"] [unique_id "ae6i6MIA2VZgjxmwXxP7YQAAABQ"]
[Mon Apr 27 07:42:34.017737 2026] [:error] [pid 36489:tid 36527] [client 51.13.123.225:28417] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp4.php"] [unique_id "ae6i6o6sRkW8OfGv18q5TwAAAEY"]
[Mon Apr 27 07:42:34.841162 2026] [:error] [pid 36490:tid 36557] [client 51.13.123.225:28462] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6i6kxiWa1s9LPhuWK46gAAAIk"]
[Mon Apr 27 07:42:35.749992 2026] [:error] [pid 36488:tid 36505] [client 51.13.123.225:45639] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6i68IA2VZgjxmwXxP7ZwAAAAw"]
[Mon Apr 27 07:42:36.638960 2026] [:error] [pid 36575:tid 36579] [client 51.13.123.225:21357] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6i7LeGZIkifrMjcl9Q4QAAAQI"]
[Mon Apr 27 07:42:37.504959 2026] [:error] [pid 36575:tid 36590] [client 51.13.123.225:35991] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6i7beGZIkifrMjcl9Q4wAAAQ0"]
[Mon Apr 27 07:42:38.637092 2026] [:error] [pid 36789:tid 36792] [client 51.13.123.225:26618] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mamzi.php"] [unique_id "ae6i7tnrZBzXPaJGSeLtBAAAAME"]
[Mon Apr 27 07:42:39.893031 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:4477] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mamzi.php"] [unique_id "ae6i77eGZIkifrMjcl9Q6AAAAQc"]
[Mon Apr 27 07:42:41.234784 2026] [:error] [pid 36575:tid 36590] [client 51.13.123.225:62760] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mamzi.php"] [unique_id "ae6i8beGZIkifrMjcl9Q6QAAAQ0"]
[Mon Apr 27 07:42:42.373216 2026] [:error] [pid 36789:tid 36811] [client 51.13.123.225:4339] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mamzi.php"] [unique_id "ae6i8tnrZBzXPaJGSeLtCwAAANQ"]
[Mon Apr 27 07:42:43.250362 2026] [:error] [pid 36789:tid 36796] [client 51.13.123.225:62771] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpls.php"] [unique_id "ae6i89nrZBzXPaJGSeLtDAAAAMU"]
[Mon Apr 27 07:42:44.354711 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:38219] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpls.php"] [unique_id "ae6i9NnrZBzXPaJGSeLtDgAAAMY"]
[Mon Apr 27 07:42:45.528642 2026] [:error] [pid 36789:tid 36795] [client 51.13.123.225:50739] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpls.php"] [unique_id "ae6i9dnrZBzXPaJGSeLtEwAAAMQ"]
[Mon Apr 27 07:42:46.468515 2026] [:error] [pid 36789:tid 36798] [client 51.13.123.225:38263] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpls.php"] [unique_id "ae6i9tnrZBzXPaJGSeLtFQAAAMc"]
[Mon Apr 27 07:42:47.580505 2026] [:error] [pid 36789:tid 36809] [client 51.13.123.225:24023] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xrp.php"] [unique_id "ae6i99nrZBzXPaJGSeLtGgAAANI"]
[Mon Apr 27 07:42:48.722170 2026] [:error] [pid 36489:tid 36535] [client 51.13.123.225:22876] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xrp.php"] [unique_id "ae6i-I6sRkW8OfGv18q5VQAAAE4"]
[Mon Apr 27 07:42:49.683516 2026] [:error] [pid 36575:tid 36590] [client 51.13.123.225:30157] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xrp.php"] [unique_id "ae6i-beGZIkifrMjcl9Q7QAAAQ0"]
[Mon Apr 27 07:42:50.825570 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:23962] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xrp.php"] [unique_id "ae6i-tnrZBzXPaJGSeLtLgAAAMg"]
[Mon Apr 27 07:42:51.732444 2026] [:error] [pid 36789:tid 36791] [client 51.13.123.225:33730] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2.php"] [unique_id "ae6i-9nrZBzXPaJGSeLtNgAAAMA"]
[Mon Apr 27 07:42:53.039977 2026] [:error] [pid 36789:tid 36811] [client 51.13.123.225:30183] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2.php"] [unique_id "ae6i_dnrZBzXPaJGSeLtPwAAANQ"]
[Mon Apr 27 07:42:53.931804 2026] [:error] [pid 36490:tid 36550] [client 51.13.123.225:20840] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2.php"] [unique_id "ae6i_UxiWa1s9LPhuWK5AQAAAII"]
[Mon Apr 27 07:42:54.862067 2026] [:error] [pid 36789:tid 36793] [client 51.13.123.225:36086] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/v2.php"] [unique_id "ae6i_tnrZBzXPaJGSeLtTAAAAMI"]
[Mon Apr 27 07:42:55.922046 2026] [:error] [pid 36575:tid 36582] [client 51.13.123.225:20838] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-acc.php"] [unique_id "ae6i_7eGZIkifrMjcl9Q-gAAAQU"]
[Mon Apr 27 07:42:56.917604 2026] [:error] [pid 36789:tid 36793] [client 51.13.123.225:30196] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-acc.php"] [unique_id "ae6jANnrZBzXPaJGSeLtbAAAAMI"]
[Mon Apr 27 07:42:58.075949 2026] [:error] [pid 36575:tid 36599] [client 51.13.123.225:51530] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-acc.php"] [unique_id "ae6jAreGZIkifrMjcl9RBwAAARY"]
[Mon Apr 27 07:42:59.044249 2026] [:error] [pid 36789:tid 36803] [client 51.13.123.225:17458] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-acc.php"] [unique_id "ae6jA9nrZBzXPaJGSeLtiQAAAMw"]
[Mon Apr 27 07:43:00.174894 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:33755] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/333.php"] [unique_id "ae6jBLeGZIkifrMjcl9RDAAAAQc"]
[Mon Apr 27 07:43:01.143633 2026] [:error] [pid 36575:tid 36586] [client 51.13.123.225:24607] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/333.php"] [unique_id "ae6jBbeGZIkifrMjcl9REgAAAQk"]
[Mon Apr 27 07:43:02.020900 2026] [:error] [pid 36488:tid 36504] [client 51.13.123.225:51534] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/333.php"] [unique_id "ae6jBsIA2VZgjxmwXxP7dgAAAAs"]
[Mon Apr 27 07:43:03.266917 2026] [:error] [pid 36575:tid 36593] [client 51.13.123.225:25365] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/333.php"] [unique_id "ae6jB7eGZIkifrMjcl9RFAAAARA"]
[Mon Apr 27 07:43:04.256276 2026] [:error] [pid 36575:tid 36596] [client 51.13.123.225:4339] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/031.php"] [unique_id "ae6jCLeGZIkifrMjcl9RFQAAARM"]
[Mon Apr 27 07:43:05.048212 2026] [:error] [pid 36490:tid 36557] [client 51.13.123.225:24583] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/031.php"] [unique_id "ae6jCUxiWa1s9LPhuWK5JAAAAIk"]
[Mon Apr 27 07:43:06.061899 2026] [:error] [pid 36789:tid 36806] [client 51.13.123.225:29621] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/031.php"] [unique_id "ae6jCtnrZBzXPaJGSeLtrwAAAM8"]
[Mon Apr 27 07:43:06.898590 2026] [:error] [pid 36575:tid 36582] [client 51.13.123.225:4692] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/031.php"] [unique_id "ae6jCreGZIkifrMjcl9RHAAAAQU"]
[Mon Apr 27 07:43:07.999220 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:17470] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6jC7eGZIkifrMjcl9RHwAAAQc"]
[Mon Apr 27 07:43:09.504724 2026] [:error] [pid 36488:tid 36501] [client 51.13.123.225:39056] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6jDcIA2VZgjxmwXxP7fgAAAAg"]
[Mon Apr 27 07:43:10.409909 2026] [:error] [pid 36488:tid 36512] [client 51.13.123.225:5004] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6jDsIA2VZgjxmwXxP7ggAAABM"]
[Mon Apr 27 07:43:11.481780 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:25377] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-trackback.php"] [unique_id "ae6jD9nrZBzXPaJGSeLtzwAAANc"]
[Mon Apr 27 07:43:12.299576 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:7979] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xx.php"] [unique_id "ae6jENnrZBzXPaJGSeLt1gAAAMg"]
[Mon Apr 27 07:43:13.149840 2026] [:error] [pid 36490:tid 36565] [client 51.13.123.225:20313] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xx.php"] [unique_id "ae6jEUxiWa1s9LPhuWK5MAAAAJE"]
[Mon Apr 27 07:43:14.066824 2026] [:error] [pid 36789:tid 36800] [client 51.13.123.225:29605] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xx.php"] [unique_id "ae6jEtnrZBzXPaJGSeLt6AAAAMk"]
[Mon Apr 27 07:43:15.247644 2026] [:error] [pid 36789:tid 36805] [client 51.13.123.225:19862] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xx.php"] [unique_id "ae6jE9nrZBzXPaJGSeLt8wAAAM4"]
[Mon Apr 27 07:43:15.988002 2026] [:error] [pid 36575:tid 36580] [client 51.13.123.225:7958] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/testo.php"] [unique_id "ae6jE7eGZIkifrMjcl9RJgAAAQM"]
[Mon Apr 27 07:43:17.032245 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:12146] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/testo.php"] [unique_id "ae6jFdnrZBzXPaJGSeLuBAAAAMY"]
[Mon Apr 27 07:43:18.523251 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:19860] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/testo.php"] [unique_id "ae6jFreGZIkifrMjcl9RKwAAAQA"]
[Mon Apr 27 07:43:19.699856 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:7998] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/testo.php"] [unique_id "ae6jF7eGZIkifrMjcl9RLgAAAQs"]
[Mon Apr 27 07:43:20.668827 2026] [:error] [pid 36490:tid 36549] [client 51.13.123.225:7975] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/row.php"] [unique_id "ae6jGExiWa1s9LPhuWK5MwAAAIE"]
[Mon Apr 27 07:43:21.641686 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:4998] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/row.php"] [unique_id "ae6jGdnrZBzXPaJGSeLuGQAAAMY"]
[Mon Apr 27 07:43:22.526234 2026] [:error] [pid 36789:tid 36811] [client 51.13.123.225:25437] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/row.php"] [unique_id "ae6jGtnrZBzXPaJGSeLuIQAAANQ"]
[Mon Apr 27 07:43:23.464987 2026] [:error] [pid 36789:tid 36800] [client 51.13.123.225:20339] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/row.php"] [unique_id "ae6jG9nrZBzXPaJGSeLuIwAAAMk"]
[Mon Apr 27 07:43:24.248851 2026] [:error] [pid 36789:tid 36807] [client 51.13.123.225:56282] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/555.php"] [unique_id "ae6jHNnrZBzXPaJGSeLuJwAAANA"]
[Mon Apr 27 07:43:52.776901 2026] [:error] [pid 36488:tid 36493] [client 51.13.123.225:42046] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-config.php"] [unique_id "ae6jOMIA2VZgjxmwXxP7sgAAAAE"]
[Mon Apr 27 07:43:54.316324 2026] [:error] [pid 36489:tid 36531] [client 51.13.123.225:64240] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-config.php"] [unique_id "ae6jOo6sRkW8OfGv18q5gQAAAEo"]
[Mon Apr 27 07:43:55.486065 2026] [:error] [pid 36575:tid 36598] [client 51.13.123.225:25446] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-config.php"] [unique_id "ae6jO7eGZIkifrMjcl9RbgAAARU"]
[Mon Apr 27 07:43:56.820431 2026] [:error] [pid 36575:tid 36579] [client 51.13.123.225:29152] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-config.php"] [unique_id "ae6jPLeGZIkifrMjcl9RcwAAAQI"]
[Mon Apr 27 07:43:58.120068 2026] [:error] [pid 36789:tid 36800] [client 51.13.123.225:12086] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ae6jPtnrZBzXPaJGSeLuUgAAAMk"]
[Mon Apr 27 07:43:58.900782 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:19403] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ae6jPtnrZBzXPaJGSeLuVwAAAMY"]
[Mon Apr 27 07:43:59.652445 2026] [:error] [pid 36789:tid 36793] [client 51.13.123.225:64249] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ae6jP9nrZBzXPaJGSeLuXwAAAMI"]
[Mon Apr 27 07:44:00.428621 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:25417] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ae6jQNnrZBzXPaJGSeLuZgAAAMg"]
[Mon Apr 27 07:44:01.146131 2026] [:error] [pid 36490:tid 36569] [client 51.13.123.225:32907] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/444.php"] [unique_id "ae6jQUxiWa1s9LPhuWK5WgAAAJU"]
[Mon Apr 27 07:44:02.016279 2026] [:error] [pid 36789:tid 36803] [client 51.13.123.225:41631] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/444.php"] [unique_id "ae6jQtnrZBzXPaJGSeLuaQAAAMw"]
[Mon Apr 27 07:44:02.810553 2026] [:error] [pid 36488:tid 36492] [client 51.13.123.225:19399] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/444.php"] [unique_id "ae6jQsIA2VZgjxmwXxP7uQAAAAA"]
[Mon Apr 27 07:44:03.654126 2026] [:error] [pid 36575:tid 36593] [client 51.13.123.225:12532] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/444.php"] [unique_id "ae6jQ7eGZIkifrMjcl9RfQAAARA"]
[Mon Apr 27 07:44:04.398846 2026] [:error] [pid 36490:tid 36564] [client 51.13.123.225:25972] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ae6jRExiWa1s9LPhuWK5XQAAAJA"]
[Mon Apr 27 07:44:05.952886 2026] [:error] [pid 36488:tid 36513] [client 51.13.123.225:41646] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ae6jRcIA2VZgjxmwXxP7vAAAABQ"]
[Mon Apr 27 07:44:07.069757 2026] [:error] [pid 36489:tid 36535] [client 51.13.123.225:59485] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ae6jR46sRkW8OfGv18q5iQAAAE4"]
[Mon Apr 27 07:44:08.130303 2026] [:error] [pid 36789:tid 36812] [client 51.13.123.225:19330] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bnm.php"] [unique_id "ae6jSNnrZBzXPaJGSeLuhgAAANU"]
[Mon Apr 27 07:44:09.454468 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:12528] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/himu.php"] [unique_id "ae6jSbeGZIkifrMjcl9RgwAAAQc"]
[Mon Apr 27 07:44:10.431542 2026] [:error] [pid 36490:tid 36554] [client 51.13.123.225:59464] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/himu.php"] [unique_id "ae6jSkxiWa1s9LPhuWK5YQAAAIY"]
[Mon Apr 27 07:44:11.529850 2026] [:error] [pid 36789:tid 36809] [client 51.13.123.225:19403] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/himu.php"] [unique_id "ae6jS9nrZBzXPaJGSeLulgAAANI"]
[Mon Apr 27 07:44:13.117012 2026] [:error] [pid 36789:tid 36801] [client 51.13.123.225:25901] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/himu.php"] [unique_id "ae6jTdnrZBzXPaJGSeLunQAAAMo"]
[Mon Apr 27 07:44:14.300470 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:10889] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ae6jTtnrZBzXPaJGSeLupgAAANc"]
[Mon Apr 27 07:44:15.216087 2026] [:error] [pid 36490:tid 36551] [client 51.13.123.225:49084] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ae6jT0xiWa1s9LPhuWK5ZAAAAIM"]
[Mon Apr 27 07:44:16.317333 2026] [:error] [pid 36789:tid 36798] [client 51.13.123.225:25858] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ae6jUNnrZBzXPaJGSeLurQAAAMc"]
[Mon Apr 27 07:44:17.278098 2026] [:error] [pid 36789:tid 36806] [client 51.13.123.225:25982] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ae6jUdnrZBzXPaJGSeLutAAAAM8"]
[Mon Apr 27 07:44:18.246682 2026] [:error] [pid 36789:tid 36795] [client 51.13.123.225:41645] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ae6jUtnrZBzXPaJGSeLuvAAAAMQ"]
[Mon Apr 27 07:44:18.984049 2026] [:error] [pid 36789:tid 36812] [client 51.13.123.225:55516] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ae6jUtnrZBzXPaJGSeLuxQAAANU"]
[Mon Apr 27 07:44:20.336811 2026] [:error] [pid 36490:tid 36564] [client 51.13.123.225:25962] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ae6jVExiWa1s9LPhuWK5ZwAAAJA"]
[Mon Apr 27 07:44:22.745881 2026] [:error] [pid 36575:tid 36599] [client 51.13.123.225:27877] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ae6jVreGZIkifrMjcl9RkwAAARY"]
[Mon Apr 27 07:44:23.817208 2026] [:error] [pid 36789:tid 36800] [client 51.13.123.225:32939] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hans.php"] [unique_id "ae6jV9nrZBzXPaJGSeLuzQAAAMk"]
[Mon Apr 27 07:44:24.861903 2026] [:error] [pid 36789:tid 36808] [client 51.13.123.225:42060] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hans.php"] [unique_id "ae6jWNnrZBzXPaJGSeLu0wAAANE"]
[Mon Apr 27 07:44:25.625685 2026] [:error] [pid 36488:tid 36517] [client 51.13.123.225:40700] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hans.php"] [unique_id "ae6jWcIA2VZgjxmwXxP7yAAAABg"]
[Mon Apr 27 07:44:26.956260 2026] [:error] [pid 36488:tid 36516] [client 51.13.123.225:55492] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hans.php"] [unique_id "ae6jWsIA2VZgjxmwXxP7ywAAABc"]
[Mon Apr 27 07:44:28.125715 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:42087] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lgr.php"] [unique_id "ae6jXExiWa1s9LPhuWK5cQAAAJQ"]
[Mon Apr 27 07:44:29.413207 2026] [:error] [pid 36488:tid 36514] [client 51.13.123.225:42071] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lgr.php"] [unique_id "ae6jXcIA2VZgjxmwXxP7zQAAABU"]
[Mon Apr 27 07:44:30.568849 2026] [:error] [pid 36490:tid 36567] [client 51.13.123.225:41644] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lgr.php"] [unique_id "ae6jXkxiWa1s9LPhuWK5dwAAAJM"]
[Mon Apr 27 07:44:31.881065 2026] [:error] [pid 36789:tid 36810] [client 51.13.123.225:41627] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lgr.php"] [unique_id "ae6jX9nrZBzXPaJGSeLu2gAAANM"]
[Mon Apr 27 07:44:32.775409 2026] [:error] [pid 36575:tid 36587] [client 51.13.123.225:41639] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an7.php"] [unique_id "ae6jYLeGZIkifrMjcl9RsgAAAQo"]
[Mon Apr 27 07:44:34.021223 2026] [:error] [pid 36490:tid 36572] [client 51.13.123.225:55534] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an7.php"] [unique_id "ae6jYkxiWa1s9LPhuWK5hgAAAJg"]
[Mon Apr 27 07:44:34.809231 2026] [:error] [pid 36789:tid 36807] [client 51.13.123.225:12539] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an7.php"] [unique_id "ae6jYtnrZBzXPaJGSeLu4AAAANA"]
[Mon Apr 27 07:44:36.042179 2026] [:error] [pid 36488:tid 36500] [client 51.13.123.225:10921] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/an7.php"] [unique_id "ae6jZMIA2VZgjxmwXxP71wAAAAc"]
[Mon Apr 27 07:44:37.292380 2026] [:error] [pid 36488:tid 36510] [client 51.13.123.225:12521] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file1.php"] [unique_id "ae6jZcIA2VZgjxmwXxP72gAAABE"]
[Mon Apr 27 07:44:38.178278 2026] [:error] [pid 36489:tid 36539] [client 51.13.123.225:40680] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file1.php"] [unique_id "ae6jZo6sRkW8OfGv18q5qwAAAFI"]
[Mon Apr 27 07:44:39.261405 2026] [:error] [pid 36490:tid 36565] [client 51.13.123.225:40678] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file1.php"] [unique_id "ae6jZ0xiWa1s9LPhuWK5kQAAAJE"]
[Mon Apr 27 07:44:40.178640 2026] [:error] [pid 36489:tid 36523] [client 51.13.123.225:10442] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file1.php"] [unique_id "ae6jaI6sRkW8OfGv18q5uAAAAEI"]
[Mon Apr 27 07:44:41.150592 2026] [:error] [pid 36575:tid 36601] [client 51.13.123.225:61148] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/luxe.php"] [unique_id "ae6jabeGZIkifrMjcl9RuwAAARg"]
[Mon Apr 27 07:44:42.055921 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:10435] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/luxe.php"] [unique_id "ae6jareGZIkifrMjcl9RvwAAAQA"]
[Mon Apr 27 07:44:43.063678 2026] [:error] [pid 36575:tid 36583] [client 51.13.123.225:25890] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/luxe.php"] [unique_id "ae6ja7eGZIkifrMjcl9RxQAAAQY"]
[Mon Apr 27 07:44:44.279414 2026] [:error] [pid 36489:tid 36536] [client 51.13.123.225:31261] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/luxe.php"] [unique_id "ae6jbI6sRkW8OfGv18q5vAAAAE8"]
[Mon Apr 27 07:44:46.218654 2026] [:error] [pid 36575:tid 36595] [client 51.13.123.225:18911] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp_ok.php"] [unique_id "ae6jbreGZIkifrMjcl9R0wAAARI"]
[Mon Apr 27 07:44:48.174203 2026] [:error] [pid 36488:tid 36492] [client 51.13.123.225:10484] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp_ok.php"] [unique_id "ae6jcMIA2VZgjxmwXxP74wAAAAA"]
[Mon Apr 27 07:44:49.645274 2026] [:error] [pid 36488:tid 36504] [client 51.13.123.225:25876] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp_ok.php"] [unique_id "ae6jccIA2VZgjxmwXxP75gAAAAs"]
[Mon Apr 27 07:45:19.827457 2026] [:error] [pid 36488:tid 36499] [client 51.13.123.225:42091] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ae6jj8IA2VZgjxmwXxP8FgAAAAY"]
[Mon Apr 27 07:45:20.677822 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:55543] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ae6jkLeGZIkifrMjcl9SGQAAAQA"]
[Mon Apr 27 07:45:21.533221 2026] [:error] [pid 36489:tid 36534] [client 51.13.123.225:10908] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ae6jkY6sRkW8OfGv18q56AAAAE0"]
[Mon Apr 27 07:45:22.526277 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:55550] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ae6jktnrZBzXPaJGSeLvfwAAANc"]
[Mon Apr 27 07:45:23.946855 2026] [:error] [pid 36575:tid 36599] [client 51.13.123.225:55525] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6jk7eGZIkifrMjcl9SJAAAARY"]
[Mon Apr 27 07:45:26.289461 2026] [:error] [pid 36789:tid 36801] [client 51.13.123.225:15655] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6jltnrZBzXPaJGSeLvigAAAMo"]
[Mon Apr 27 07:45:28.385733 2026] [:error] [pid 36575:tid 36585] [client 51.13.123.225:42101] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6jmLeGZIkifrMjcl9SKwAAAQg"]
[Mon Apr 27 07:45:30.426032 2026] [:error] [pid 36575:tid 36600] [client 51.13.123.225:42062] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ae6jmreGZIkifrMjcl9SLwAAARc"]
[Mon Apr 27 07:45:32.651652 2026] [:error] [pid 36490:tid 36551] [client 51.13.123.225:10492] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cache.php"] [unique_id "ae6jnExiWa1s9LPhuWK5zAAAAIM"]
[Mon Apr 27 07:45:34.227971 2026] [:error] [pid 36789:tid 36813] [client 51.13.123.225:28462] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cache.php"] [unique_id "ae6jntnrZBzXPaJGSeLvrgAAANY"]
[Mon Apr 27 07:45:35.498785 2026] [:error] [pid 36489:tid 36544] [client 51.13.123.225:57907] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cache.php"] [unique_id "ae6jn46sRkW8OfGv18q57gAAAFc"]
[Mon Apr 27 07:45:36.420139 2026] [:error] [pid 36789:tid 36810] [client 51.13.123.225:36937] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cache.php"] [unique_id "ae6joNnrZBzXPaJGSeLvtAAAANM"]
[Mon Apr 27 07:45:37.367294 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:40663] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/error.php"] [unique_id "ae6jobeGZIkifrMjcl9SOgAAAQc"]
[Mon Apr 27 07:45:38.444366 2026] [:error] [pid 36490:tid 36569] [client 51.13.123.225:42066] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/error.php"] [unique_id "ae6jokxiWa1s9LPhuWK55wAAAJU"]
[Mon Apr 27 07:45:39.330040 2026] [:error] [pid 36490:tid 36570] [client 51.13.123.225:18937] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/error.php"] [unique_id "ae6jo0xiWa1s9LPhuWK57gAAAJY"]
[Mon Apr 27 07:45:40.290828 2026] [:error] [pid 36490:tid 36571] [client 51.13.123.225:14722] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/error.php"] [unique_id "ae6jpExiWa1s9LPhuWK58AAAAJc"]
[Mon Apr 27 07:45:41.157043 2026] [:error] [pid 36490:tid 36566] [client 51.13.123.225:18907] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file32.php"] [unique_id "ae6jpUxiWa1s9LPhuWK58gAAAJI"]
[Mon Apr 27 07:45:41.892136 2026] [:error] [pid 36489:tid 36539] [client 51.13.123.225:15653] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file32.php"] [unique_id "ae6jpY6sRkW8OfGv18q59wAAAFI"]
[Mon Apr 27 07:45:42.730650 2026] [:error] [pid 36488:tid 36500] [client 51.13.123.225:57868] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file32.php"] [unique_id "ae6jpsIA2VZgjxmwXxP8JQAAAAc"]
[Mon Apr 27 07:45:43.632304 2026] [:error] [pid 36575:tid 36590] [client 51.13.123.225:25860] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file32.php"] [unique_id "ae6jp7eGZIkifrMjcl9SQQAAAQ0"]
[Mon Apr 27 07:45:44.383141 2026] [:error] [pid 36490:tid 36550] [client 51.13.123.225:15630] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cvrvk.php"] [unique_id "ae6jqExiWa1s9LPhuWK5_wAAAII"]
[Mon Apr 27 07:45:45.572043 2026] [:error] [pid 36490:tid 36572] [client 51.13.123.225:40003] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cvrvk.php"] [unique_id "ae6jqUxiWa1s9LPhuWK6AQAAAJg"]
[Mon Apr 27 07:45:46.652123 2026] [:error] [pid 36489:tid 36536] [client 51.13.123.225:4592] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cvrvk.php"] [unique_id "ae6jqo6sRkW8OfGv18q5_AAAAE8"]
[Mon Apr 27 07:45:47.573494 2026] [:error] [pid 36789:tid 36796] [client 51.13.123.225:31289] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cvrvk.php"] [unique_id "ae6jq9nrZBzXPaJGSeLv5gAAAMU"]
[Mon Apr 27 07:45:48.345847 2026] [:error] [pid 36789:tid 36794] [client 51.13.123.225:40006] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-wp.php"] [unique_id "ae6jrNnrZBzXPaJGSeLv7QAAAMM"]
[Mon Apr 27 07:45:49.332102 2026] [:error] [pid 36789:tid 36801] [client 51.13.123.225:14734] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-wp.php"] [unique_id "ae6jrdnrZBzXPaJGSeLv8AAAAMo"]
[Mon Apr 27 07:45:50.396158 2026] [:error] [pid 36575:tid 36597] [client 51.13.123.225:30640] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-wp.php"] [unique_id "ae6jrreGZIkifrMjcl9SSwAAARQ"]
[Mon Apr 27 07:45:51.439740 2026] [:error] [pid 36575:tid 36586] [client 51.13.123.225:40058] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-wp.php"] [unique_id "ae6jr7eGZIkifrMjcl9SUAAAAQk"]
[Mon Apr 27 07:45:52.178741 2026] [:error] [pid 36488:tid 36515] [client 51.13.123.225:4559] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-t.api.php"] [unique_id "ae6jsMIA2VZgjxmwXxP8OAAAABY"]
[Mon Apr 27 07:45:52.969984 2026] [:error] [pid 36789:tid 36791] [client 51.13.123.225:31268] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-t.api.php"] [unique_id "ae6jsNnrZBzXPaJGSeLv-gAAAMA"]
[Mon Apr 27 07:45:54.111419 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:40024] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-t.api.php"] [unique_id "ae6jskxiWa1s9LPhuWK6CgAAAJQ"]
[Mon Apr 27 07:45:55.151647 2026] [:error] [pid 36789:tid 36803] [client 51.13.123.225:42092] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class-t.api.php"] [unique_id "ae6js9nrZBzXPaJGSeLwBAAAAMw"]
[Mon Apr 27 07:45:55.948009 2026] [:error] [pid 36789:tid 36792] [client 51.13.123.225:4605] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hello.php"] [unique_id "ae6js9nrZBzXPaJGSeLwDAAAAME"]
[Mon Apr 27 07:45:56.901689 2026] [:error] [pid 36489:tid 36534] [client 51.13.123.225:7551] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hello.php"] [unique_id "ae6jtI6sRkW8OfGv18q6DQAAAE0"]
[Mon Apr 27 07:45:57.823203 2026] [:error] [pid 36575:tid 36586] [client 51.13.123.225:36932] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hello.php"] [unique_id "ae6jtbeGZIkifrMjcl9SXAAAAQk"]
[Mon Apr 27 07:45:58.803395 2026] [:error] [pid 36490:tid 36564] [client 51.13.123.225:43106] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hello.php"] [unique_id "ae6jtkxiWa1s9LPhuWK6HgAAAJA"]
[Mon Apr 27 07:45:59.693766 2026] [:error] [pid 36488:tid 36509] [client 51.13.123.225:61132] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae6jt8IA2VZgjxmwXxP8SQAAABA"]
[Mon Apr 27 07:46:01.010461 2026] [:error] [pid 36490:tid 36548] [client 51.13.123.225:7496] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae6juUxiWa1s9LPhuWK6NQAAAIA"]
[Mon Apr 27 07:46:01.755637 2026] [:error] [pid 36575:tid 36601] [client 51.13.123.225:7516] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae6jubeGZIkifrMjcl9SeQAAARg"]
[Mon Apr 27 07:46:02.682573 2026] [:error] [pid 36490:tid 36561] [client 51.13.123.225:14754] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae6jukxiWa1s9LPhuWK6QQAAAI0"]
[Mon Apr 27 07:46:03.685512 2026] [:error] [pid 36789:tid 36799] [client 51.13.123.225:31248] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lti.php"] [unique_id "ae6ju9nrZBzXPaJGSeLwIwAAAMg"]
[Mon Apr 27 07:46:04.950606 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:14729] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lti.php"] [unique_id "ae6jvNnrZBzXPaJGSeLwKQAAAMY"]
[Mon Apr 27 07:46:05.785404 2026] [:error] [pid 36488:tid 36499] [client 51.13.123.225:36990] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lti.php"] [unique_id "ae6jvcIA2VZgjxmwXxP8eAAAAAY"]
[Mon Apr 27 07:46:06.503897 2026] [:error] [pid 36789:tid 36803] [client 51.13.123.225:61174] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lti.php"] [unique_id "ae6jvtnrZBzXPaJGSeLwMgAAAMw"]
[Mon Apr 27 07:46:07.459780 2026] [:error] [pid 36489:tid 36528] [client 51.13.123.225:30620] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "ae6jv46sRkW8OfGv18q6LQAAAEc"]
[Mon Apr 27 07:46:08.452892 2026] [:error] [pid 36789:tid 36810] [client 51.13.123.225:61159] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "ae6jwNnrZBzXPaJGSeLwOQAAANM"]
[Mon Apr 27 07:46:09.541410 2026] [:error] [pid 36490:tid 36559] [client 51.13.123.225:15668] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "ae6jwUxiWa1s9LPhuWK6TwAAAIs"]
[Mon Apr 27 07:46:10.423815 2026] [:error] [pid 36489:tid 36538] [client 51.13.123.225:40060] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "ae6jwo6sRkW8OfGv18q6NgAAAFE"]
[Mon Apr 27 07:46:11.561525 2026] [:error] [pid 36490:tid 36556] [client 51.13.123.225:57963] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shellalfa.php"] [unique_id "ae6jw0xiWa1s9LPhuWK6VwAAAIg"]
[Mon Apr 27 07:46:12.473291 2026] [:error] [pid 36575:tid 36579] [client 51.13.123.225:14764] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shellalfa.php"] [unique_id "ae6jxLeGZIkifrMjcl9SpQAAAQI"]
[Mon Apr 27 07:46:13.395986 2026] [:error] [pid 36489:tid 36544] [client 51.13.123.225:21303] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shellalfa.php"] [unique_id "ae6jxY6sRkW8OfGv18q6PgAAAFc"]
[Mon Apr 27 07:46:14.502683 2026] [:error] [pid 36575:tid 36578] [client 51.13.123.225:43081] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shellalfa.php"] [unique_id "ae6jxreGZIkifrMjcl9SqwAAAQE"]
[Mon Apr 27 07:46:15.478527 2026] [:error] [pid 36789:tid 36796] [client 51.13.123.225:30600] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless11.php"] [unique_id "ae6jx9nrZBzXPaJGSeLwWgAAAMU"]
[Mon Apr 27 07:46:16.522390 2026] [:error] [pid 36489:tid 36532] [client 51.13.123.225:4264] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bless11.php"] [unique_id "ae6jyI6sRkW8OfGv18q6RQAAAEs"]
[Mon Apr 27 07:46:45.377168 2026] [:error] [pid 36789:tid 36792] [client 51.13.123.225:43090] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file9.php"] [unique_id "ae6j5dnrZBzXPaJGSeLwvQAAAME"]
[Mon Apr 27 07:46:46.733573 2026] [:error] [pid 36789:tid 36805] [client 51.13.123.225:15137] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file9.php"] [unique_id "ae6j5tnrZBzXPaJGSeLwwQAAAM4"]
[Mon Apr 27 07:46:48.335910 2026] [:error] [pid 36789:tid 36794] [client 51.13.123.225:28423] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file9.php"] [unique_id "ae6j6NnrZBzXPaJGSeLw1QAAAMM"]
[Mon Apr 27 07:46:49.587857 2026] [:error] [pid 36489:tid 36525] [client 51.13.123.225:27346] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file9.php"] [unique_id "ae6j6Y6sRkW8OfGv18q6lgAAAEQ"]
[Mon Apr 27 07:46:51.933274 2026] [:error] [pid 36489:tid 36543] [client 51.13.123.225:47809] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ae6j646sRkW8OfGv18q6nQAAAFY"]
[Mon Apr 27 07:46:53.229687 2026] [:error] [pid 36489:tid 36538] [client 51.13.123.225:54731] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ae6j7Y6sRkW8OfGv18q6pQAAAFE"]
[Mon Apr 27 07:46:54.960947 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:54775] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ae6j7tnrZBzXPaJGSeLxBgAAAMY"]
[Mon Apr 27 07:46:56.151181 2026] [:error] [pid 36575:tid 36597] [client 51.13.123.225:36878] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ae6j8LeGZIkifrMjcl9S4gAAARQ"]
[Mon Apr 27 07:46:57.288593 2026] [:error] [pid 36490:tid 36553] [client 51.13.123.225:54766] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ae6j8UxiWa1s9LPhuWK6kwAAAIU"]
[Mon Apr 27 07:46:58.247128 2026] [:error] [pid 36789:tid 36793] [client 51.13.123.225:61089] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ae6j8tnrZBzXPaJGSeLxDwAAAMI"]
[Mon Apr 27 07:46:59.194732 2026] [:error] [pid 36575:tid 36580] [client 51.13.123.225:36865] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ae6j87eGZIkifrMjcl9S6wAAAQM"]
[Mon Apr 27 07:47:00.366077 2026] [:error] [pid 36789:tid 36807] [client 51.13.123.225:61084] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ae6j9NnrZBzXPaJGSeLxGAAAANA"]
[Mon Apr 27 07:47:01.407724 2026] [:error] [pid 36789:tid 36796] [client 51.13.123.225:15206] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ae6j9dnrZBzXPaJGSeLxJQAAAMU"]
[Mon Apr 27 07:47:02.313790 2026] [:error] [pid 36789:tid 36803] [client 51.13.123.225:61105] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ae6j9tnrZBzXPaJGSeLxMgAAAMw"]
[Mon Apr 27 07:47:03.434096 2026] [:error] [pid 36490:tid 36559] [client 51.13.123.225:26561] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ae6j90xiWa1s9LPhuWK6nwAAAIs"]
[Mon Apr 27 07:47:04.363730 2026] [:error] [pid 36575:tid 36594] [client 51.13.123.225:10411] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ae6j-LeGZIkifrMjcl9S8wAAARE"]
[Mon Apr 27 07:47:05.440251 2026] [:error] [pid 36488:tid 36499] [client 51.13.123.225:15180] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/06.php"] [unique_id "ae6j-cIA2VZgjxmwXxP81AAAAAY"]
[Mon Apr 27 07:47:06.427581 2026] [:error] [pid 36489:tid 36531] [client 51.13.123.225:40612] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/06.php"] [unique_id "ae6j-o6sRkW8OfGv18q6vAAAAEo"]
[Mon Apr 27 07:47:07.736831 2026] [:error] [pid 36489:tid 36540] [client 51.13.123.225:5090] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/06.php"] [unique_id "ae6j-46sRkW8OfGv18q6vwAAAFM"]
[Mon Apr 27 07:47:08.932800 2026] [:error] [pid 36575:tid 36578] [client 51.13.123.225:43889] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/06.php"] [unique_id "ae6j_LeGZIkifrMjcl9TAgAAAQE"]
[Mon Apr 27 07:47:09.791005 2026] [:error] [pid 36575:tid 36597] [client 51.13.123.225:43884] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ae6j_beGZIkifrMjcl9TBAAAARQ"]
[Mon Apr 27 07:47:11.200953 2026] [:error] [pid 36789:tid 36796] [client 51.13.123.225:43867] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ae6j_9nrZBzXPaJGSeLxZgAAAMU"]
[Mon Apr 27 07:47:12.320588 2026] [:error] [pid 36490:tid 36561] [client 51.13.123.225:59419] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ae6kAExiWa1s9LPhuWK6sQAAAI0"]
[Mon Apr 27 07:47:13.428249 2026] [:error] [pid 36789:tid 36808] [client 51.13.123.225:8006] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ae6kAdnrZBzXPaJGSeLxbAAAANE"]
[Mon Apr 27 07:47:14.619199 2026] [:error] [pid 36575:tid 36598] [client 51.13.123.225:28495] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/owl.php"] [unique_id "ae6kAreGZIkifrMjcl9TFgAAARU"]
[Mon Apr 27 07:47:15.570524 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:5073] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/owl.php"] [unique_id "ae6kA7eGZIkifrMjcl9THAAAAQs"]
[Mon Apr 27 07:47:16.426094 2026] [:error] [pid 36575:tid 36578] [client 51.13.123.225:52408] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/owl.php"] [unique_id "ae6kBLeGZIkifrMjcl9THgAAAQE"]
[Mon Apr 27 07:47:17.343026 2026] [:error] [pid 36789:tid 36791] [client 51.13.123.225:51457] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/owl.php"] [unique_id "ae6kBdnrZBzXPaJGSeLxfwAAAMA"]
[Mon Apr 27 07:47:18.081108 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:50688] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hook.php"] [unique_id "ae6kBreGZIkifrMjcl9TIwAAAQA"]
[Mon Apr 27 07:47:18.918724 2026] [:error] [pid 36490:tid 36567] [client 51.13.123.225:50739] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hook.php"] [unique_id "ae6kBkxiWa1s9LPhuWK6wgAAAJM"]
[Mon Apr 27 07:47:20.016053 2026] [:error] [pid 36789:tid 36809] [client 51.13.123.225:10414] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hook.php"] [unique_id "ae6kCNnrZBzXPaJGSeLxkgAAANI"]
[Mon Apr 27 07:47:20.912708 2026] [:error] [pid 36789:tid 36813] [client 51.13.123.225:51494] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hook.php"] [unique_id "ae6kCNnrZBzXPaJGSeLxnAAAANY"]
[Mon Apr 27 07:47:21.736713 2026] [:error] [pid 36789:tid 36801] [client 51.13.123.225:4905] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file59.php"] [unique_id "ae6kCdnrZBzXPaJGSeLxpgAAAMo"]
[Mon Apr 27 07:47:22.576184 2026] [:error] [pid 36789:tid 36813] [client 51.13.123.225:33018] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file59.php"] [unique_id "ae6kCtnrZBzXPaJGSeLxqwAAANY"]
[Mon Apr 27 07:47:23.957250 2026] [:error] [pid 36789:tid 36798] [client 51.13.123.225:5098] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file59.php"] [unique_id "ae6kC9nrZBzXPaJGSeLyAwAAAMc"]
[Mon Apr 27 07:47:24.735115 2026] [:error] [pid 36490:tid 36558] [client 51.13.123.225:52389] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file59.php"] [unique_id "ae6kDExiWa1s9LPhuWK7DQAAAIo"]
[Mon Apr 27 07:47:25.744407 2026] [:error] [pid 36489:tid 36534] [client 51.13.123.225:63435] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ae6kDY6sRkW8OfGv18q61AAAAE0"]
[Mon Apr 27 07:47:26.634705 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:52387] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ae6kDkxiWa1s9LPhuWK7EgAAAJQ"]
[Mon Apr 27 07:47:27.428095 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:14218] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ae6kD7eGZIkifrMjcl9TOQAAAQs"]
[Mon Apr 27 07:47:28.397584 2026] [:error] [pid 36488:tid 36500] [client 51.13.123.225:35986] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ok.php"] [unique_id "ae6kEMIA2VZgjxmwXxP85wAAAAc"]
[Mon Apr 27 07:47:29.297450 2026] [:error] [pid 36489:tid 36537] [client 51.13.123.225:22292] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "ae6kEY6sRkW8OfGv18q61wAAAFA"]
[Mon Apr 27 07:47:30.717181 2026] [:error] [pid 36488:tid 36502] [client 51.13.123.225:4906] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "ae6kEsIA2VZgjxmwXxP86wAAAAk"]
[Mon Apr 27 07:47:31.602066 2026] [:error] [pid 36488:tid 36492] [client 51.13.123.225:14237] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "ae6kE8IA2VZgjxmwXxP87wAAAAA"]
[Mon Apr 27 07:47:33.164092 2026] [:error] [pid 36490:tid 36549] [client 51.13.123.225:22367] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/less.php"] [unique_id "ae6kFUxiWa1s9LPhuWK7GwAAAIE"]
[Mon Apr 27 07:47:34.047066 2026] [:error] [pid 36488:tid 36508] [client 51.13.123.225:56232] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/clirp.php"] [unique_id "ae6kFsIA2VZgjxmwXxP88QAAAA8"]
[Mon Apr 27 07:47:35.050661 2026] [:error] [pid 36489:tid 36537] [client 51.13.123.225:35973] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/clirp.php"] [unique_id "ae6kF46sRkW8OfGv18q65wAAAFA"]
[Mon Apr 27 07:47:36.202103 2026] [:error] [pid 36575:tid 36579] [client 51.13.123.225:4219] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/clirp.php"] [unique_id "ae6kGLeGZIkifrMjcl9TVAAAAQI"]
[Mon Apr 27 07:47:37.398887 2026] [:error] [pid 36789:tid 36794] [client 51.13.123.225:20736] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/clirp.php"] [unique_id "ae6kGdnrZBzXPaJGSeLySgAAAMM"]
[Mon Apr 27 07:47:38.550388 2026] [:error] [pid 36789:tid 36809] [client 51.13.123.225:38162] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/domains.php"] [unique_id "ae6kGtnrZBzXPaJGSeLyVwAAANI"]
[Mon Apr 27 07:47:39.749561 2026] [:error] [pid 36488:tid 36492] [client 51.13.123.225:38168] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/domains.php"] [unique_id "ae6kG8IA2VZgjxmwXxP8-gAAAAA"]
[Mon Apr 27 07:47:41.586423 2026] [:error] [pid 36789:tid 36807] [client 51.13.123.225:30147] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/domains.php"] [unique_id "ae6kHdnrZBzXPaJGSeLyZQAAANA"]
[Mon Apr 27 07:47:42.570250 2026] [:error] [pid 36789:tid 36805] [client 51.13.123.225:18846] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/domains.php"] [unique_id "ae6kHtnrZBzXPaJGSeLyagAAAM4"]
[Mon Apr 27 07:48:09.192104 2026] [:error] [pid 36489:tid 36532] [client 51.13.123.225:56221] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ton.php"] [unique_id "ae6kOY6sRkW8OfGv18q7gwAAAEs"]
[Mon Apr 27 07:48:11.341537 2026] [:error] [pid 36490:tid 36562] [client 51.13.123.225:30126] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ton.php"] [unique_id "ae6kO0xiWa1s9LPhuWK7WwAAAI4"]
[Mon Apr 27 07:48:12.430061 2026] [:error] [pid 36488:tid 36504] [client 51.13.123.225:30682] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ton.php"] [unique_id "ae6kPMIA2VZgjxmwXxP9EAAAAAs"]
[Mon Apr 27 07:48:13.568816 2026] [:error] [pid 36488:tid 36496] [client 51.13.123.225:53962] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ton.php"] [unique_id "ae6kPcIA2VZgjxmwXxP9EgAAAAM"]
[Mon Apr 27 07:48:15.348769 2026] [:error] [pid 36575:tid 36593] [client 51.13.123.225:30686] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ae6kP7eGZIkifrMjcl9TbAAAARA"]
[Mon Apr 27 07:48:16.432858 2026] [:error] [pid 36490:tid 36557] [client 51.13.123.225:33772] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ae6kQExiWa1s9LPhuWK7YQAAAIk"]
[Mon Apr 27 07:48:17.671362 2026] [:error] [pid 36575:tid 36598] [client 51.13.123.225:13945] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ae6kQbeGZIkifrMjcl9TcAAAARU"]
[Mon Apr 27 07:48:18.337731 2026] [:error] [pid 36488:tid 36515] [client 51.13.123.225:34477] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ae6kQsIA2VZgjxmwXxP9GQAAABY"]
[Mon Apr 27 07:48:19.533768 2026] [:error] [pid 36489:tid 36539] [client 51.13.123.225:18006] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zzkhe.php"] [unique_id "ae6kQ46sRkW8OfGv18q7tAAAAFI"]
[Mon Apr 27 07:48:20.374836 2026] [:error] [pid 36575:tid 36580] [client 51.13.123.225:50790] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zzkhe.php"] [unique_id "ae6kRLeGZIkifrMjcl9TeAAAAQM"]
[Mon Apr 27 07:48:21.465961 2026] [:error] [pid 36575:tid 36601] [client 51.13.123.225:43041] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zzkhe.php"] [unique_id "ae6kRbeGZIkifrMjcl9TewAAARg"]
[Mon Apr 27 07:48:22.620623 2026] [:error] [pid 36575:tid 36578] [client 51.13.123.225:54716] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zzkhe.php"] [unique_id "ae6kRreGZIkifrMjcl9TfwAAAQE"]
[Mon Apr 27 07:48:23.834860 2026] [:error] [pid 36488:tid 36499] [client 51.13.123.225:49113] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xm.php"] [unique_id "ae6kR8IA2VZgjxmwXxP9HQAAAAY"]
[Mon Apr 27 07:48:26.528396 2026] [:error] [pid 36490:tid 36569] [client 51.13.123.225:53981] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xm.php"] [unique_id "ae6kSkxiWa1s9LPhuWK7dQAAAJU"]
[Mon Apr 27 07:48:28.336439 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:49119] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xm.php"] [unique_id "ae6kTNnrZBzXPaJGSeLzBQAAANc"]
[Mon Apr 27 07:48:29.949358 2026] [:error] [pid 36789:tid 36797] [client 51.13.123.225:17998] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-xm.php"] [unique_id "ae6kTdnrZBzXPaJGSeLzDgAAAMY"]
[Mon Apr 27 07:48:31.699631 2026] [:error] [pid 36575:tid 36599] [client 51.13.123.225:18026] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cc13.php"] [unique_id "ae6kT7eGZIkifrMjcl9TmwAAARY"]
[Mon Apr 27 07:48:33.833738 2026] [:error] [pid 36789:tid 36806] [client 51.13.123.225:4372] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cc13.php"] [unique_id "ae6kUdnrZBzXPaJGSeLzHAAAAM8"]
[Mon Apr 27 07:48:35.097268 2026] [:error] [pid 36789:tid 36802] [client 51.13.123.225:4357] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cc13.php"] [unique_id "ae6kU9nrZBzXPaJGSeLzJAAAAMs"]
[Mon Apr 27 07:48:36.098957 2026] [:error] [pid 36575:tid 36593] [client 51.13.123.225:18043] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cc13.php"] [unique_id "ae6kVLeGZIkifrMjcl9TqgAAARA"]
[Mon Apr 27 07:48:37.148109 2026] [:error] [pid 36575:tid 36579] [client 51.13.123.225:54703] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yas.php"] [unique_id "ae6kVbeGZIkifrMjcl9TsAAAAQI"]
[Mon Apr 27 07:48:38.385878 2026] [:error] [pid 36490:tid 36549] [client 51.13.123.225:4311] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yas.php"] [unique_id "ae6kVkxiWa1s9LPhuWK7gwAAAIE"]
[Mon Apr 27 07:48:39.494933 2026] [:error] [pid 36575:tid 36591] [client 51.13.123.225:33767] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yas.php"] [unique_id "ae6kV7eGZIkifrMjcl9TugAAAQ4"]
[Mon Apr 27 07:48:40.383263 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:49108] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yas.php"] [unique_id "ae6kWNnrZBzXPaJGSeLzNwAAANc"]
[Mon Apr 27 07:48:41.633837 2026] [:error] [pid 36488:tid 36503] [client 51.13.123.225:30709] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ae6kWcIA2VZgjxmwXxP9IgAAAAo"]
[Mon Apr 27 07:48:42.946523 2026] [:error] [pid 36575:tid 36588] [client 51.13.123.225:27272] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ae6kWreGZIkifrMjcl9TxgAAAQs"]
[Mon Apr 27 07:48:44.466467 2026] [:error] [pid 36575:tid 36600] [client 51.13.123.225:27321] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ae6kXLeGZIkifrMjcl9TyAAAARc"]
[Mon Apr 27 07:48:45.582823 2026] [:error] [pid 36575:tid 36601] [client 51.13.123.225:54706] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ae6kXbeGZIkifrMjcl9TywAAARg"]
[Mon Apr 27 07:48:46.784519 2026] [:error] [pid 36488:tid 36515] [client 51.13.123.225:18004] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asas.php"] [unique_id "ae6kXsIA2VZgjxmwXxP9LQAAABY"]
[Mon Apr 27 07:48:47.694158 2026] [:error] [pid 36575:tid 36582] [client 51.13.123.225:4385] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asas.php"] [unique_id "ae6kX7eGZIkifrMjcl9T0wAAAQU"]
[Mon Apr 27 07:48:49.060436 2026] [:error] [pid 36489:tid 36525] [client 51.13.123.225:4392] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asas.php"] [unique_id "ae6kYY6sRkW8OfGv18q78QAAAEQ"]
[Mon Apr 27 07:48:50.714555 2026] [:error] [pid 36575:tid 36585] [client 51.13.123.225:4411] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asas.php"] [unique_id "ae6kYreGZIkifrMjcl9T2AAAAQg"]
[Mon Apr 27 07:48:51.994740 2026] [:error] [pid 36488:tid 36501] [client 51.13.123.225:33778] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "ae6kY8IA2VZgjxmwXxP9NwAAAAg"]
[Mon Apr 27 07:48:53.750147 2026] [:error] [pid 36490:tid 36553] [client 51.13.123.225:39948] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "ae6kZUxiWa1s9LPhuWK7sAAAAIU"]
[Mon Apr 27 07:48:55.035435 2026] [:error] [pid 36488:tid 36494] [client 51.13.123.225:19953] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "ae6kZ8IA2VZgjxmwXxP9OgAAAAI"]
[Mon Apr 27 07:48:56.283538 2026] [:error] [pid 36488:tid 36492] [client 51.13.123.225:49105] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class19.php"] [unique_id "ae6kaMIA2VZgjxmwXxP9OwAAAAA"]
[Mon Apr 27 07:48:58.199225 2026] [:error] [pid 36575:tid 36601] [client 51.13.123.225:50773] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ae6kareGZIkifrMjcl9T_AAAARg"]
[Mon Apr 27 07:49:00.035845 2026] [:error] [pid 36489:tid 36542] [client 51.13.123.225:42041] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ae6kbI6sRkW8OfGv18q8AgAAAFU"]
[Mon Apr 27 07:49:01.158651 2026] [:error] [pid 36789:tid 36815] [client 51.13.123.225:22823] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ae6kbdnrZBzXPaJGSeLzagAAANg"]
[Mon Apr 27 07:49:02.675338 2026] [:error] [pid 36489:tid 36532] [client 51.13.123.225:39941] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ae6kbo6sRkW8OfGv18q8BgAAAEs"]
[Mon Apr 27 07:49:03.867343 2026] [:error] [pid 36789:tid 36803] [client 51.13.123.225:4359] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ae6kb9nrZBzXPaJGSeLzfAAAAMw"]
[Mon Apr 27 07:49:05.202492 2026] [:error] [pid 36489:tid 36522] [client 51.13.123.225:22820] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ae6kcY6sRkW8OfGv18q8CAAAAEE"]
[Mon Apr 27 07:49:06.408268 2026] [:error] [pid 36575:tid 36582] [client 51.13.123.225:20845] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ae6kcreGZIkifrMjcl9UFAAAAQU"]
[Mon Apr 27 07:49:35.193054 2026] [:error] [pid 36575:tid 36592] [client 51.13.123.225:4396] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xml.php"] [unique_id "ae6kj7eGZIkifrMjcl9UUgAAAQ8"]
[Mon Apr 27 07:49:36.578818 2026] [:error] [pid 36789:tid 36802] [client 51.13.123.225:62804] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xml.php"] [unique_id "ae6kkNnrZBzXPaJGSeLzwgAAAMs"]
[Mon Apr 27 07:49:37.635464 2026] [:error] [pid 36575:tid 36596] [client 51.13.123.225:14274] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xml.php"] [unique_id "ae6kkbeGZIkifrMjcl9UWgAAARM"]
[Mon Apr 27 07:49:39.146684 2026] [:error] [pid 36575:tid 36600] [client 51.13.123.225:7970] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xml.php"] [unique_id "ae6kk7eGZIkifrMjcl9UXgAAARc"]
[Mon Apr 27 07:49:40.128900 2026] [:error] [pid 36789:tid 36812] [client 51.13.123.225:59494] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moon3.php"] [unique_id "ae6klNnrZBzXPaJGSeLzyAAAANU"]
[Mon Apr 27 07:49:41.292152 2026] [:error] [pid 36575:tid 36592] [client 51.13.123.225:62834] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moon3.php"] [unique_id "ae6klbeGZIkifrMjcl9UZAAAAQ8"]
[Mon Apr 27 07:49:42.636853 2026] [:error] [pid 36789:tid 36812] [client 51.13.123.225:62811] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moon3.php"] [unique_id "ae6kltnrZBzXPaJGSeLz1gAAANU"]
[Mon Apr 27 07:49:43.685298 2026] [:error] [pid 36575:tid 36577] [client 51.13.123.225:59463] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moon3.php"] [unique_id "ae6kl7eGZIkifrMjcl9UZwAAAQA"]
[Mon Apr 27 07:49:44.526114 2026] [:error] [pid 36490:tid 36554] [client 51.13.123.225:12136] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ae6kmExiWa1s9LPhuWK8NQAAAIY"]
[Mon Apr 27 07:49:46.526083 2026] [:error] [pid 36490:tid 36568] [client 51.13.123.225:12491] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ae6kmkxiWa1s9LPhuWK8PgAAAJQ"]
[Mon Apr 27 07:49:47.743641 2026] [:error] [pid 36488:tid 36506] [client 51.13.123.225:29680] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ae6km8IA2VZgjxmwXxP9cAAAAA0"]
[Mon Apr 27 07:49:49.331588 2026] [:error] [pid 36789:tid 36792] [client 51.13.123.225:14300] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ae6kndnrZBzXPaJGSeLz3wAAAME"]
[Mon Apr 27 07:49:50.783439 2026] [:error] [pid 36789:tid 36801] [client 51.13.123.225:19866] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "ae6kntnrZBzXPaJGSeLz4gAAAMo"]
[Mon Apr 27 07:49:51.954174 2026] [:error] [pid 36488:tid 36496] [client 51.13.123.225:25469] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "ae6kn8IA2VZgjxmwXxP9hAAAAAM"]
[Mon Apr 27 07:49:52.598789 2026] [:error] [pid 36488:tid 36501] [client 51.13.123.225:19347] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "ae6koMIA2VZgjxmwXxP9iAAAAAg"]
[Mon Apr 27 07:49:53.637102 2026] [:error] [pid 36490:tid 36558] [client 51.13.123.225:62800] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xy.php"] [unique_id "ae6koUxiWa1s9LPhuWK8VgAAAIo"]
[Mon Apr 27 07:49:55.111888 2026] [:error] [pid 36489:tid 36528] [client 51.13.123.225:25438] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/revealability.php"] [unique_id "ae6ko46sRkW8OfGv18q8TQAAAEc"]
[Mon Apr 27 07:49:56.392094 2026] [:error] [pid 36789:tid 36800] [client 51.13.123.225:32930] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/revealability.php"] [unique_id "ae6kpNnrZBzXPaJGSeLz7wAAAMk"]
[Mon Apr 27 07:49:57.509824 2026] [:error] [pid 36490:tid 36572] [client 51.13.123.225:25462] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/revealability.php"] [unique_id "ae6kpUxiWa1s9LPhuWK8ZgAAAJg"]
[Mon Apr 27 07:49:58.588045 2026] [:error] [pid 36575:tid 36587] [client 51.13.123.225:21733] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/revealability.php"] [unique_id "ae6kpreGZIkifrMjcl9UcQAAAQo"]
[Mon Apr 27 07:49:59.618727 2026] [:error] [pid 36789:tid 36814] [client 51.13.123.225:25422] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tox.php"] [unique_id "ae6kp9nrZBzXPaJGSeLz9QAAANc"]
[Mon Apr 27 07:50:00.855747 2026] [:error] [pid 36489:tid 36533] [client 51.13.123.225:18910] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tox.php"] [unique_id "ae6kqI6sRkW8OfGv18q8UAAAAEw"]
[Mon Apr 27 07:50:01.899912 2026] [:error] [pid 36575:tid 36584] [client 51.13.123.225:19870] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tox.php"] [unique_id "ae6kqbeGZIkifrMjcl9UeQAAAQc"]
[Mon Apr 27 07:50:03.280684 2026] [:error] [pid 36490:tid 36565] [client 51.13.123.225:14284] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tox.php"] [unique_id "ae6kq0xiWa1s9LPhuWK8eQAAAJE"]
[Mon Apr 27 07:50:04.635369 2026] [:error] [pid 36490:tid 36571] [client 51.13.123.225:25404] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packed.php"] [unique_id "ae6krExiWa1s9LPhuWK8fwAAAJc"]
[Mon Apr 27 07:50:05.637558 2026] [:error] [pid 36575:tid 36590] [client 51.13.123.225:4674] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packed.php"] [unique_id "ae6krbeGZIkifrMjcl9UgAAAAQ0"]
[Mon Apr 27 07:50:06.730131 2026] [:error] [pid 36489:tid 36523] [client 51.13.123.225:56260] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packed.php"] [unique_id "ae6kro6sRkW8OfGv18q8VwAAAEI"]
[Mon Apr 27 07:50:08.325992 2026] [:error] [pid 36575:tid 36583] [client 51.13.123.225:51535] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packed.php"] [unique_id "ae6ksLeGZIkifrMjcl9UiQAAAQY"]
[Mon Apr 27 07:50:09.439505 2026] [:error] [pid 36489:tid 36533] [client 51.13.123.225:20316] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ae6ksY6sRkW8OfGv18q8XgAAAEw"]
[Mon Apr 27 07:50:10.473976 2026] [:error] [pid 36489:tid 36545] [client 51.13.123.225:39987] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ae6kso6sRkW8OfGv18q8YQAAAFg"]
[Mon Apr 27 07:50:11.922547 2026] [:error] [pid 36490:tid 36553] [client 51.13.123.225:54685] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ae6ks0xiWa1s9LPhuWK8iwAAAIU"]
[Mon Apr 27 07:50:13.107857 2026] [:error] [pid 36789:tid 36793] [client 51.13.123.225:23986] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ae6ktdnrZBzXPaJGSeL0FAAAAMI"]
[Mon Apr 27 07:50:14.297535 2026] [:error] [pid 36490:tid 36565] [client 51.13.123.225:31320] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "ae6ktkxiWa1s9LPhuWK8jgAAAJE"]
[Mon Apr 27 07:50:15.865937 2026] [:error] [pid 36490:tid 36566] [client 51.13.123.225:39940] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "ae6kt0xiWa1s9LPhuWK8lQAAAJI"]
[Mon Apr 27 07:50:17.524678 2026] [:error] [pid 36490:tid 36564] [client 51.13.123.225:4394] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "ae6kuUxiWa1s9LPhuWK8nAAAAJA"]
[Mon Apr 27 07:50:18.753529 2026] [:error] [pid 36789:tid 36804] [client 51.13.123.225:42108] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccu.php"] [unique_id "ae6kutnrZBzXPaJGSeL0KwAAAM0"]
[Mon Apr 27 07:50:19.914981 2026] [:error] [pid 36789:tid 36812] [client 51.13.123.225:18020] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ffile.php"] [unique_id "ae6ku9nrZBzXPaJGSeL0MQAAANU"]
[Mon Apr 27 07:50:20.987329 2026] [:error] [pid 36575:tid 36585] [client 51.13.123.225:31332] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ffile.php"] [unique_id "ae6kvLeGZIkifrMjcl9UlAAAAQg"]
[Mon Apr 27 07:50:22.441202 2026] [:error] [pid 36489:tid 36530] [client 51.13.123.225:54689] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ffile.php"] [unique_id "ae6kvo6sRkW8OfGv18q8bgAAAEk"]
[Mon Apr 27 07:50:24.966606 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:24.966633 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:25.629995 2026] [:error] [pid 50861:tid 50874] [client 51.13.123.225:31243] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ffile.php"] [unique_id "ae6kwWCmVQOCiCZfqR5ekgAAAAk"]
[Mon Apr 27 07:50:29.325188 2026] [:error] [pid 50861:tid 50880] [client 51.13.123.225:54696] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class.1.php"] [unique_id "ae6kxWCmVQOCiCZfqR5epwAAAA8"]
[Mon Apr 27 07:50:30.074702 2026] [:error] [pid 50861:tid 50888] [client 51.13.123.225:31311] [client 51.13.123.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/class.1.php"] [unique_id "ae6kxmCmVQOCiCZfqR5eqAAAABc"]
[Mon Apr 27 09:00:41.307824 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:41.307824 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:09.337600 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:09.337604 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:34.196178 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:34.196205 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.559406 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.559436 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:10.232972 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:10.233001 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:46.321759 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:46.321806 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.551695 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.551723 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.424091 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.424117 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.618484 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.618512 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:49.731521 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:49.731552 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.779733 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.779769 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.724352 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.724379 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:14.897047 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:14.897074 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:21.160670 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:21.160707 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.508767 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.508792 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:54.418873 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:54.418900 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:56.359047 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:56.359072 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:30.952854 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:30.952904 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:32.862527 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:32.862554 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.689577 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.689604 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.662859 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.662885 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:30.291530 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:30.291556 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:25.917861 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:25.917889 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:46.318017 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:46.318048 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:48.391872 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:48.391910 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:57.233447 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:57.233474 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.529047 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.529074 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:14.315155 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:14.315183 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:16.281049 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:16.281084 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:39.966110 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:39.966136 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:41.906801 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:41.906824 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:16.966533 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:16.966561 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:18.942056 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:18.942084 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:12.130618 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:12.130651 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.526360 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.526397 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.773732 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.773770 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:51.123847 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:51.123886 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:11.882868 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:11.882894 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.726475 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.726477 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:37.068180 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:37.068182 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:06.750818 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:06.750862 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:08.827425 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:08.827462 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:23.022924 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:23.022951 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:32.196284 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:32.196313 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:39.107556 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:39.107586 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:41.058316 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:41.058343 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:07.226681 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:07.226710 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:09.179040 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:09.179066 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:52.316814 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:52.316867 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:54.309543 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:54.309573 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:13.665993 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:13.666021 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:52.883450 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:52.883473 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.516541 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.516575 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:02.037600 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:02.037627 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:50.816303 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:50.816331 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:35.374166 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:35.374194 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:00.309907 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:00.309936 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:36.010805 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:36.010832 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.491501 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.491529 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.772330 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.772330 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.580158 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.580210 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:03.045321 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:03.045357 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.660091 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.660118 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.697990 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.698016 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:06.910601 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:06.910629 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:16.059446 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:16.059475 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:28.989004 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:28.989039 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:31.004728 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:31.004754 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:17.051120 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:17.051148 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:19.408702 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:19.408728 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.553296 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.553322 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.525730 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.525767 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 09:57:17.021371 2026] [:error] [pid 38117:tid 38141] [client 149.102.230.119:52624] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "afQIfWhRYBrFpu8czJpNewAAANA"]
[Fri May 01 09:57:17.546117 2026] [:error] [pid 38117:tid 38142] [client 149.102.230.119:52626] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "afQIfWhRYBrFpu8czJpNfQAAANE"]
[Fri May 01 09:57:18.571007 2026] [:error] [pid 38015:tid 38063] [client 149.102.230.117:19062] [client 149.102.230.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "afQIfsNJWoh41gYMCSWwZAAAAEw"]
[Fri May 01 09:57:19.095642 2026] [:error] [pid 38015:tid 38074] [client 149.102.230.117:19076] [client 149.102.230.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.end2end.hostone.com.au"] [uri "/"] [unique_id "afQIf8NJWoh41gYMCSWwZQAAAFc"]
[Fri May 01 10:29:07.834021 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:07.834053 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:16.939069 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:16.939101 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.666678 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.666716 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.670718 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.670746 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:09.033132 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:09.033159 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:18.054969 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:18.055017 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:25.959422 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:25.959457 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:27.850270 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:27.850308 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.472493 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.472589 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:46.387210 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:46.387290 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:04.816643 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:04.816669 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.737448 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.737448 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:54.805884 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:54.805912 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:56.951851 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:56.952083 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:04.822428 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:04.822455 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:14.275616 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:14.275644 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:28.296286 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:28.296311 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:30.268505 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:30.268532 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.449925 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.449955 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.463131 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.463168 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.720834 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.720863 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.727315 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.727315 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:22.971521 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:22.971612 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:53.765724 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:53.765752 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:55.833170 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:55.833202 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.743893 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.743919 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:27.953617 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:27.953645 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.730330 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.730372 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.631664 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.631703 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:32.051937 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:32.051964 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:33.949780 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:33.949805 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.794525 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.794555 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.721531 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.721559 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 04:38:12.653965 2026] [:error] [pid 31168:tid 31173] [client 68.168.29.130:57564] [client 68.168.29.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "afeyNLJUVgN8GV2P4h4_2gAAAUM"]
[Mon May 04 04:38:12.655472 2026] [:error] [pid 31168:tid 31186] [client 68.168.29.130:57566] [client 68.168.29.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "afeyNLJUVgN8GV2P4h4_2wAAAVA"]
[Mon May 04 07:24:47.377407 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:47.377434 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.643413 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.643439 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:40.235569 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:40.235597 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:02.280651 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:02.280678 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 09:02:34.654315 2026] [:error] [pid 12022:tid 12028] [client 68.168.29.183:38340] [client 68.168.29.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "affwKkVhgvCNKBWnaTIz4QAAAIQ"]
[Mon May 04 09:02:34.663948 2026] [:error] [pid 33186:tid 33210] [client 68.168.29.183:38330] [client 68.168.29.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "affwKrqlqe0DcmBS9VzOCwAAABU"]
[Mon May 04 09:56:07.744645 2026] [:error] [pid 12022:tid 12028] [client 68.168.29.130:53840] [client 68.168.29.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app_dev.php/_profiler/open"] [unique_id "aff8t0VhgvCNKBWnaTJG3gAAAIQ"]
[Mon May 04 09:56:07.745123 2026] [:error] [pid 12022:tid 12038] [client 68.168.29.130:53844] [client 68.168.29.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "aff8t0VhgvCNKBWnaTJG3wAAAI4"]
[Mon May 04 14:18:00.347649 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:18:00.347681 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:15.315688 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:15.315716 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.684916 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.684942 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:23.985612 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:23.985639 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:40.395788 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:40.395816 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:51.211939 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:51.211955 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:04.413971 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:04.414017 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:13.152920 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:13.152946 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.621310 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.621310 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:40.354972 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:40.355000 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:49.358445 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:49.358471 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:52.391020 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:52.391049 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.458136 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.458165 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.688379 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.688408 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.809923 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.809973 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:32.883985 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:32.884011 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:34.917532 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:34.917558 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.609603 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.609632 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.537540 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.537569 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:31.963940 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:31.963967 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:33.830440 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:33.830470 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:44.896794 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:44.896829 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 02:39:08.078699 2026] [:error] [pid 2324:tid 2330] [client 34.9.194.25:54903] [client 34.9.194.25] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "afo5TGqe2hrcI52A1Hz27gAAAUQ"]
[Wed May 06 02:39:09.925037 2026] [:error] [pid 2324:tid 2337] [client 34.9.194.25:54903] [client 34.9.194.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.194.25, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "afo5TWqe2hrcI52A1Hz28AAAAUs"]
[Wed May 06 02:39:09.925483 2026] [authz_core:error] [pid 2324:tid 2337] [client 34.9.194.25:54903] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Wed May 06 02:39:11.858223 2026] [:error] [pid 2324:tid 2347] [client 34.9.194.25:54903] [client 34.9.194.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.194.25, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "afo5T2qe2hrcI52A1Hz28gAAAVU"]
[Wed May 06 02:39:11.858626 2026] [authz_core:error] [pid 2324:tid 2347] [client 34.9.194.25:54903] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Wed May 06 03:19:43.530501 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:43.530530 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.475686 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.475711 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.639697 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.639723 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:12.279456 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:12.279482 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:17.194875 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:17.194897 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:19.076611 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:19.076651 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:00.039724 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:00.039751 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:01.959284 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:01.959325 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:47.244090 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:47.244121 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:49.183184 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:49.183210 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.792992 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.793021 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:18.966547 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:18.966578 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.514733 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.514762 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:07.261305 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:07.261338 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:52.181625 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:52.181651 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:54.208817 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:54.208865 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.479508 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.479535 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.461063 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.461089 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:26.166996 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:26.167028 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:28.061118 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:28.061144 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:52.966764 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:52.966792 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:54.895210 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:54.895265 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.777139 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.777168 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.677283 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.677310 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 06:43:33.034020 2026] [:error] [pid 29605:tid 29615] [client 135.119.49.165:57037] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "afvEFYnxrTjETioEY0TwGQAAAAE"]
[Thu May 07 06:43:33.424699 2026] [:error] [pid 29710:tid 29723] [client 135.119.49.165:56966] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "afvEFf0atTQld9Y2ht_5LwAAAMs"]
[Thu May 07 06:43:33.807375 2026] [:error] [pid 29607:tid 29684] [client 135.119.49.165:57080] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "afvEFabP7TJOAh7WSUN-OwAAAJA"]
[Thu May 07 06:43:34.183282 2026] [:error] [pid 29605:tid 29628] [client 135.119.49.165:57030] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/elp.php"] [unique_id "afvEFonxrTjETioEY0TwHAAAAA4"]
[Thu May 07 06:43:34.585267 2026] [:error] [pid 29607:tid 29676] [client 135.119.49.165:56971] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zc-243.php"] [unique_id "afvEFqbP7TJOAh7WSUN-PwAAAIg"]
[Thu May 07 06:43:34.966338 2026] [:error] [pid 29606:tid 29647] [client 135.119.49.165:56964] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zc-243.php"] [unique_id "afvEFhR5HjZ1PlSAiKt0WwAAAEY"]
[Thu May 07 06:43:35.351348 2026] [:error] [pid 29607:tid 29687] [client 135.119.49.165:57057] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zc-243.php"] [unique_id "afvEF6bP7TJOAh7WSUN-RgAAAJM"]
[Thu May 07 06:43:35.758643 2026] [:error] [pid 29606:tid 29652] [client 135.119.49.165:57043] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zc-243.php"] [unique_id "afvEFxR5HjZ1PlSAiKt0XgAAAEs"]
[Thu May 07 06:43:36.135999 2026] [:error] [pid 29710:tid 29724] [client 135.119.49.165:57064] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "afvEGP0atTQld9Y2ht_5OAAAAMw"]
[Thu May 07 06:43:36.508853 2026] [:error] [pid 29710:tid 29712] [client 135.119.49.165:57072] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "afvEGP0atTQld9Y2ht_5OQAAAMA"]
[Thu May 07 06:43:36.892066 2026] [:error] [pid 29710:tid 29731] [client 135.119.49.165:57086] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "afvEGP0atTQld9Y2ht_5OwAAANM"]
[Thu May 07 06:43:37.267726 2026] [:error] [pid 29605:tid 29637] [client 135.119.49.165:57025] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bkyac.php"] [unique_id "afvEGYnxrTjETioEY0TwIgAAABc"]
[Thu May 07 06:43:37.644498 2026] [:error] [pid 29607:tid 29676] [client 135.119.49.165:56961] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "afvEGabP7TJOAh7WSUN-VAAAAIg"]
[Thu May 07 06:43:38.030764 2026] [:error] [pid 29607:tid 29685] [client 135.119.49.165:56968] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "afvEGqbP7TJOAh7WSUN-WgAAAJE"]
[Thu May 07 06:43:38.416092 2026] [:error] [pid 29607:tid 29670] [client 135.119.49.165:57042] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "afvEGqbP7TJOAh7WSUN-YAAAAII"]
[Thu May 07 06:43:38.802751 2026] [:error] [pid 29607:tid 29681] [client 135.119.49.165:57024] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wziar1.php"] [unique_id "afvEGqbP7TJOAh7WSUN-ZgAAAI0"]
[Thu May 07 06:43:39.185365 2026] [:error] [pid 29606:tid 29660] [client 135.119.49.165:56970] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvEGxR5HjZ1PlSAiKt0YgAAAFM"]
[Thu May 07 06:43:39.565884 2026] [:error] [pid 29605:tid 29621] [client 135.119.49.165:57039] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvEG4nxrTjETioEY0TwJAAAAAc"]
[Thu May 07 06:43:39.943850 2026] [:error] [pid 29605:tid 29630] [client 135.119.49.165:57085] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvEG4nxrTjETioEY0TwJQAAABA"]
[Thu May 07 06:43:40.328370 2026] [:error] [pid 29605:tid 29618] [client 135.119.49.165:57029] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvEHInxrTjETioEY0TwJwAAAAQ"]
[Thu May 07 06:43:40.710670 2026] [:error] [pid 29606:tid 29657] [client 135.119.49.165:56997] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "afvEHBR5HjZ1PlSAiKt0ZgAAAFA"]
[Thu May 07 06:43:41.085592 2026] [:error] [pid 29606:tid 29648] [client 135.119.49.165:57082] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "afvEHRR5HjZ1PlSAiKt0aAAAAEc"]
[Thu May 07 06:43:41.461890 2026] [:error] [pid 29710:tid 29730] [client 135.119.49.165:56983] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "afvEHf0atTQld9Y2ht_5TAAAANI"]
[Thu May 07 06:43:41.841462 2026] [:error] [pid 29606:tid 29665] [client 135.119.49.165:56973] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7logs.php"] [unique_id "afvEHRR5HjZ1PlSAiKt0awAAAFg"]
[Thu May 07 06:43:42.238322 2026] [:error] [pid 4539:tid 4565] [client 135.119.49.165:57060] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvEHoPEZE1565sDGnxLYgAAARg"]
[Thu May 07 06:43:42.620488 2026] [:error] [pid 4539:tid 4560] [client 135.119.49.165:57062] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvEHoPEZE1565sDGnxLZQAAARM"]
[Thu May 07 06:43:43.003706 2026] [:error] [pid 29605:tid 29623] [client 135.119.49.165:57044] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvEH4nxrTjETioEY0TwLgAAAAk"]
[Thu May 07 06:43:43.447722 2026] [:error] [pid 29607:tid 29690] [client 135.119.49.165:57034] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvEH6bP7TJOAh7WSUN-hwAAAJY"]
[Thu May 07 06:43:43.827173 2026] [:error] [pid 4539:tid 4558] [client 135.119.49.165:56979] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "afvEH4PEZE1565sDGnxLawAAARE"]
[Thu May 07 06:43:44.211031 2026] [:error] [pid 29710:tid 29730] [client 135.119.49.165:57081] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "afvEIP0atTQld9Y2ht_5WgAAANI"]
[Thu May 07 06:43:44.603062 2026] [:error] [pid 4539:tid 4564] [client 135.119.49.165:56978] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "afvEIIPEZE1565sDGnxLcwAAARc"]
[Thu May 07 06:43:44.994087 2026] [:error] [pid 29710:tid 29723] [client 135.119.49.165:56995] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/as.php"] [unique_id "afvEIP0atTQld9Y2ht_5XgAAAMs"]
[Thu May 07 06:43:45.390907 2026] [:error] [pid 29607:tid 29670] [client 135.119.49.165:56965] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ctex1.php"] [unique_id "afvEIabP7TJOAh7WSUN-lAAAAII"]
[Thu May 07 06:43:45.773013 2026] [:error] [pid 29606:tid 29643] [client 135.119.49.165:56901] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ctex1.php"] [unique_id "afvEIRR5HjZ1PlSAiKt0cQAAAEI"]
[Thu May 07 06:43:46.164655 2026] [:error] [pid 29606:tid 29663] [client 135.119.49.165:57036] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ctex1.php"] [unique_id "afvEIhR5HjZ1PlSAiKt0cwAAAFY"]
[Thu May 07 06:43:46.580060 2026] [:error] [pid 29710:tid 29729] [client 135.119.49.165:57070] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ctex1.php"] [unique_id "afvEIv0atTQld9Y2ht_5ZAAAANE"]
[Thu May 07 06:43:46.961855 2026] [:error] [pid 29605:tid 29634] [client 135.119.49.165:57083] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "afvEIonxrTjETioEY0TwMQAAABQ"]
[Thu May 07 06:43:47.342990 2026] [:error] [pid 29607:tid 29687] [client 135.119.49.165:57045] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "afvEI6bP7TJOAh7WSUN-oQAAAJM"]
[Thu May 07 06:43:47.752724 2026] [:error] [pid 29606:tid 29658] [client 135.119.49.165:56902] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "afvEIxR5HjZ1PlSAiKt0eAAAAFE"]
[Thu May 07 06:43:48.128338 2026] [:error] [pid 29605:tid 29631] [client 135.119.49.165:57046] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lb.php"] [unique_id "afvEJInxrTjETioEY0TwNwAAABE"]
[Thu May 07 06:43:48.513103 2026] [:error] [pid 29607:tid 29679] [client 135.119.49.165:56911] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "afvEJKbP7TJOAh7WSUN-qgAAAIs"]
[Thu May 07 06:43:48.903452 2026] [:error] [pid 29607:tid 29671] [client 135.119.49.165:56908] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "afvEJKbP7TJOAh7WSUN-rgAAAIM"]
[Thu May 07 06:43:49.283859 2026] [:error] [pid 29607:tid 29680] [client 135.119.49.165:57051] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "afvEJabP7TJOAh7WSUN-sAAAAIw"]
[Thu May 07 06:43:49.659799 2026] [:error] [pid 29607:tid 29676] [client 135.119.49.165:56991] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "afvEJabP7TJOAh7WSUN-tAAAAIg"]
[Thu May 07 06:43:50.042655 2026] [:error] [pid 29606:tid 29655] [client 135.119.49.165:57066] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mh.php"] [unique_id "afvEJhR5HjZ1PlSAiKt0hgAAAE4"]
[Thu May 07 06:43:50.423299 2026] [:error] [pid 29605:tid 29620] [client 135.119.49.165:56963] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mh.php"] [unique_id "afvEJonxrTjETioEY0TwOQAAAAY"]
[Thu May 07 06:43:50.825994 2026] [:error] [pid 29710:tid 29736] [client 135.119.49.165:57061] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mh.php"] [unique_id "afvEJv0atTQld9Y2ht_5bgAAANg"]
[Thu May 07 06:43:51.199823 2026] [:error] [pid 29606:tid 29658] [client 135.119.49.165:57067] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mh.php"] [unique_id "afvEJxR5HjZ1PlSAiKt0jQAAAFE"]
[Thu May 07 06:43:51.574330 2026] [:error] [pid 29710:tid 29716] [client 135.119.49.165:56993] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "afvEJ_0atTQld9Y2ht_5bwAAAMQ"]
[Thu May 07 06:43:51.959433 2026] [:error] [pid 29607:tid 29681] [client 135.119.49.165:57026] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "afvEJ6bP7TJOAh7WSUN-uwAAAI0"]
[Thu May 07 06:43:52.340955 2026] [:error] [pid 29605:tid 29626] [client 135.119.49.165:57035] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "afvEKInxrTjETioEY0TwQwAAAAw"]
[Thu May 07 06:43:52.713841 2026] [:error] [pid 29605:tid 29624] [client 135.119.49.165:56990] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "afvEKInxrTjETioEY0TwRQAAAAo"]
[Thu May 07 06:43:53.094644 2026] [:error] [pid 29605:tid 29636] [client 135.119.49.165:57050] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/auth.php"] [unique_id "afvEKYnxrTjETioEY0TwRwAAABY"]
[Thu May 07 06:43:53.475889 2026] [:error] [pid 29710:tid 29730] [client 135.119.49.165:57001] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/auth.php"] [unique_id "afvEKf0atTQld9Y2ht_5cAAAANI"]
[Thu May 07 06:43:53.860046 2026] [:error] [pid 4539:tid 4550] [client 135.119.49.165:57065] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/auth.php"] [unique_id "afvEKYPEZE1565sDGnxLgwAAAQk"]
[Thu May 07 06:43:54.233922 2026] [:error] [pid 29607:tid 29679] [client 135.119.49.165:57005] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/auth.php"] [unique_id "afvEKqbP7TJOAh7WSUN-yAAAAIs"]
[Thu May 07 06:43:54.613347 2026] [:error] [pid 29607:tid 29687] [client 135.119.49.165:56987] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvEKqbP7TJOAh7WSUN-ygAAAJM"]
[Thu May 07 06:43:54.985409 2026] [:error] [pid 29605:tid 29630] [client 135.119.49.165:56977] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvEKonxrTjETioEY0TwTwAAABA"]
[Thu May 07 06:43:55.367576 2026] [:error] [pid 29605:tid 29617] [client 135.119.49.165:56976] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvEK4nxrTjETioEY0TwUwAAAAM"]
[Thu May 07 06:43:55.749055 2026] [:error] [pid 29607:tid 29688] [client 135.119.49.165:56974] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "afvEK6bP7TJOAh7WSUN-zgAAAJQ"]
[Thu May 07 06:43:56.121610 2026] [:error] [pid 29606:tid 29664] [client 135.119.49.165:57047] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "afvELBR5HjZ1PlSAiKt0sgAAAFc"]
[Thu May 07 06:43:56.502499 2026] [:error] [pid 29605:tid 29614] [client 135.119.49.165:56969] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "afvELInxrTjETioEY0TwWgAAAAA"]
[Thu May 07 06:43:56.875604 2026] [:error] [pid 29605:tid 29625] [client 135.119.49.165:57074] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "afvELInxrTjETioEY0TwWwAAAAs"]
[Thu May 07 06:43:57.252304 2026] [:error] [pid 29607:tid 29690] [client 135.119.49.165:56925] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "afvELabP7TJOAh7WSUN-0QAAAJY"]
[Thu May 07 06:43:57.626366 2026] [:error] [pid 29710:tid 29729] [client 135.119.49.165:56985] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "afvELf0atTQld9Y2ht_5egAAANE"]
[Thu May 07 06:43:58.001773 2026] [:error] [pid 29607:tid 29686] [client 135.119.49.165:57087] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "afvELqbP7TJOAh7WSUN-0wAAAJI"]
[Thu May 07 06:43:58.383429 2026] [:error] [pid 29607:tid 29680] [client 135.119.49.165:56972] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "afvELqbP7TJOAh7WSUN-1QAAAIw"]
[Thu May 07 06:43:58.761353 2026] [:error] [pid 29710:tid 29725] [client 135.119.49.165:57008] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-png.php"] [unique_id "afvELv0atTQld9Y2ht_5gAAAAM0"]
[Thu May 07 06:43:59.138543 2026] [:error] [pid 29607:tid 29671] [client 135.119.49.165:57011] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "afvEL6bP7TJOAh7WSUN-1wAAAIM"]
[Thu May 07 06:43:59.524556 2026] [:error] [pid 29607:tid 29684] [client 135.119.49.165:57069] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "afvEL6bP7TJOAh7WSUN-2QAAAJA"]
[Thu May 07 06:43:59.909342 2026] [:error] [pid 29607:tid 29678] [client 135.119.49.165:57018] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "afvEL6bP7TJOAh7WSUN-2wAAAIo"]
[Thu May 07 06:44:00.310100 2026] [:error] [pid 29606:tid 29660] [client 135.119.49.165:57002] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "afvEMBR5HjZ1PlSAiKt00QAAAFM"]
[Thu May 07 06:44:00.692016 2026] [:error] [pid 29607:tid 29670] [client 135.119.49.165:57052] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "afvEMKbP7TJOAh7WSUN-3wAAAII"]
[Thu May 07 06:44:01.066460 2026] [:error] [pid 29607:tid 29687] [client 135.119.49.165:56960] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "afvEMabP7TJOAh7WSUN-4gAAAJM"]
[Thu May 07 06:44:01.440015 2026] [:error] [pid 29607:tid 29685] [client 135.119.49.165:57032] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "afvEMabP7TJOAh7WSUN-5AAAAJE"]
[Thu May 07 06:44:01.813702 2026] [:error] [pid 29607:tid 29676] [client 135.119.49.165:57077] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "afvEMabP7TJOAh7WSUN-5QAAAIg"]
[Thu May 07 06:44:02.189280 2026] [:error] [pid 29607:tid 29684] [client 135.119.49.165:56967] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afvEMqbP7TJOAh7WSUN-5gAAAJA"]
[Thu May 07 06:44:02.571748 2026] [:error] [pid 29607:tid 29678] [client 135.119.49.165:56975] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afvEMqbP7TJOAh7WSUN-6AAAAIo"]
[Thu May 07 06:44:02.950836 2026] [:error] [pid 29605:tid 29630] [client 135.119.49.165:56994] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afvEMonxrTjETioEY0TwZgAAABA"]
[Thu May 07 06:44:03.326484 2026] [:error] [pid 29710:tid 29727] [client 135.119.49.165:57084] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afvEM_0atTQld9Y2ht_5igAAAM8"]
[Thu May 07 06:44:03.699575 2026] [:error] [pid 29605:tid 29626] [client 135.119.49.165:57031] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bfil.php"] [unique_id "afvEM4nxrTjETioEY0TwaQAAAAw"]
[Thu May 07 06:44:04.075017 2026] [:error] [pid 29607:tid 29691] [client 135.119.49.165:56929] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bfil.php"] [unique_id "afvENKbP7TJOAh7WSUN-8AAAAJc"]
[Thu May 07 06:44:04.458368 2026] [:error] [pid 29607:tid 29681] [client 135.119.49.165:57020] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bfil.php"] [unique_id "afvENKbP7TJOAh7WSUN-8QAAAI0"]
[Thu May 07 06:44:04.888101 2026] [:error] [pid 29607:tid 29672] [client 135.119.49.165:56992] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bfil.php"] [unique_id "afvENKbP7TJOAh7WSUN-9gAAAIQ"]
[Thu May 07 06:44:05.260491 2026] [:error] [pid 29710:tid 29715] [client 135.119.49.165:56912] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abrand.php"] [unique_id "afvENf0atTQld9Y2ht_5kQAAAMM"]
[Thu May 07 06:44:05.644088 2026] [:error] [pid 29607:tid 29692] [client 135.119.49.165:57028] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abrand.php"] [unique_id "afvENabP7TJOAh7WSUN--wAAAJg"]
[Thu May 07 06:44:06.024564 2026] [:error] [pid 29607:tid 29668] [client 135.119.49.165:57010] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abrand.php"] [unique_id "afvENqbP7TJOAh7WSUN-_wAAAIA"]
[Thu May 07 06:44:06.404592 2026] [:error] [pid 29710:tid 29712] [client 135.119.49.165:57033] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/abrand.php"] [unique_id "afvENv0atTQld9Y2ht_5mQAAAMA"]
[Thu May 07 06:44:06.777760 2026] [:error] [pid 29607:tid 29687] [client 135.119.49.165:56982] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amax.php"] [unique_id "afvENqbP7TJOAh7WSUN_BQAAAJM"]
[Thu May 07 06:44:07.156401 2026] [:error] [pid 29607:tid 29672] [client 135.119.49.165:57075] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amax.php"] [unique_id "afvEN6bP7TJOAh7WSUN_CAAAAIQ"]
[Thu May 07 06:44:07.535281 2026] [:error] [pid 29607:tid 29677] [client 135.119.49.165:57009] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amax.php"] [unique_id "afvEN6bP7TJOAh7WSUN_CwAAAIk"]
[Thu May 07 06:44:07.970160 2026] [:error] [pid 29605:tid 29620] [client 135.119.49.165:56926] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amax.php"] [unique_id "afvEN4nxrTjETioEY0TwdAAAAAY"]
[Thu May 07 06:44:08.355107 2026] [:error] [pid 29710:tid 29734] [client 135.119.49.165:56952] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "afvEOP0atTQld9Y2ht_5nQAAANY"]
[Thu May 07 06:44:08.743466 2026] [:error] [pid 29710:tid 29731] [client 135.119.49.165:57000] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "afvEOP0atTQld9Y2ht_5nwAAANM"]
[Thu May 07 06:44:09.115573 2026] [:error] [pid 29710:tid 29728] [client 135.119.49.165:57078] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "afvEOf0atTQld9Y2ht_5owAAANA"]
[Thu May 07 06:44:09.491095 2026] [:error] [pid 29606:tid 29642] [client 135.119.49.165:56938] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/amwxl.php"] [unique_id "afvEORR5HjZ1PlSAiKt09wAAAEE"]
[Thu May 07 06:44:09.880116 2026] [:error] [pid 29710:tid 29716] [client 135.119.49.165:56980] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "afvEOf0atTQld9Y2ht_5qAAAAMQ"]
[Thu May 07 06:44:10.292313 2026] [:error] [pid 29710:tid 29725] [client 135.119.49.165:56999] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "afvEOv0atTQld9Y2ht_5qwAAAM0"]
[Thu May 07 06:44:10.691113 2026] [:error] [pid 4539:tid 4563] [client 135.119.49.165:57019] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "afvEOoPEZE1565sDGnxLkQAAARY"]
[Thu May 07 06:44:11.094036 2026] [:error] [pid 4539:tid 4560] [client 135.119.49.165:56954] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wmore1.php"] [unique_id "afvEO4PEZE1565sDGnxLlAAAARM"]
[Thu May 07 06:44:11.515607 2026] [:error] [pid 4539:tid 4558] [client 135.119.49.165:56922] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "afvEO4PEZE1565sDGnxLlwAAARE"]
[Thu May 07 06:44:11.944191 2026] [:error] [pid 29710:tid 29718] [client 135.119.49.165:56998] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "afvEO_0atTQld9Y2ht_5rwAAAMY"]
[Thu May 07 06:44:12.349450 2026] [:error] [pid 29605:tid 29617] [client 135.119.49.165:56906] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "afvEPInxrTjETioEY0TweAAAAAM"]
[Thu May 07 06:44:12.733409 2026] [:error] [pid 4539:tid 4555] [client 135.119.49.165:56962] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/userfuns.php"] [unique_id "afvEPIPEZE1565sDGnxLmgAAAQ4"]
[Thu May 07 06:44:13.115560 2026] [:error] [pid 4539:tid 4542] [client 135.119.49.165:57007] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "afvEPYPEZE1565sDGnxLmwAAAQE"]
[Thu May 07 06:44:13.499035 2026] [:error] [pid 4539:tid 4551] [client 135.119.49.165:57006] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "afvEPYPEZE1565sDGnxLnQAAAQo"]
[Thu May 07 06:44:13.900351 2026] [:error] [pid 29710:tid 29736] [client 135.119.49.165:57068] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "afvEPf0atTQld9Y2ht_5tAAAANg"]
[Thu May 07 06:44:14.359385 2026] [:error] [pid 29710:tid 29721] [client 135.119.49.165:57023] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/menu.php"] [unique_id "afvEPv0atTQld9Y2ht_5tgAAAMk"]
[Thu May 07 06:44:14.778384 2026] [:error] [pid 4539:tid 4559] [client 135.119.49.165:57012] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "afvEPoPEZE1565sDGnxLnwAAARI"]
[Thu May 07 06:44:15.217832 2026] [:error] [pid 29605:tid 29616] [client 135.119.49.165:56836] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "afvEP4nxrTjETioEY0TwhgAAAAI"]
[Thu May 07 06:44:15.669570 2026] [:error] [pid 29605:tid 29636] [client 135.119.49.165:56943] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "afvEP4nxrTjETioEY0TwiAAAABY"]
[Thu May 07 06:44:16.101787 2026] [:error] [pid 29605:tid 29638] [client 135.119.49.165:56989] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "afvEQInxrTjETioEY0TwiwAAABg"]
[Thu May 07 06:44:16.526978 2026] [:error] [pid 29605:tid 29625] [client 135.119.49.165:57055] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "afvEQInxrTjETioEY0TwjQAAAAs"]
[Thu May 07 06:44:16.957056 2026] [:error] [pid 29710:tid 29735] [client 135.119.49.165:57073] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "afvEQP0atTQld9Y2ht_5uwAAANc"]
[Thu May 07 06:44:17.355461 2026] [:error] [pid 29710:tid 29728] [client 135.119.49.165:57017] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "afvEQf0atTQld9Y2ht_5vAAAANA"]
[Thu May 07 06:44:17.757761 2026] [:error] [pid 29710:tid 29730] [client 135.119.49.165:57021] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/saorix1.php"] [unique_id "afvEQf0atTQld9Y2ht_5vQAAANI"]
[Thu May 07 06:44:18.140592 2026] [:error] [pid 4539:tid 4542] [client 135.119.49.165:56885] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "afvEQoPEZE1565sDGnxLpwAAAQE"]
[Thu May 07 06:44:18.542890 2026] [:error] [pid 4539:tid 4559] [client 135.119.49.165:56910] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "afvEQoPEZE1565sDGnxLqQAAARI"]
[Thu May 07 06:44:18.943302 2026] [:error] [pid 4539:tid 4547] [client 135.119.49.165:57004] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "afvEQoPEZE1565sDGnxLrAAAAQY"]
[Thu May 07 06:44:19.333572 2026] [:error] [pid 4539:tid 4564] [client 135.119.49.165:56909] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/byypas.php"] [unique_id "afvEQ4PEZE1565sDGnxLrwAAARc"]
[Thu May 07 06:44:19.759598 2026] [:error] [pid 29605:tid 29630] [client 135.119.49.165:56934] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rip.php"] [unique_id "afvEQ4nxrTjETioEY0TwkgAAABA"]
[Thu May 07 06:44:20.162547 2026] [:error] [pid 4539:tid 4556] [client 135.119.49.165:57015] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rip.php"] [unique_id "afvERIPEZE1565sDGnxLtAAAAQ8"]
[Thu May 07 06:44:20.572576 2026] [:error] [pid 29607:tid 29668] [client 135.119.49.165:57053] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rip.php"] [unique_id "afvERKbP7TJOAh7WSUN_FQAAAIA"]
[Thu May 07 06:44:21.008360 2026] [:error] [pid 4539:tid 4558] [client 135.119.49.165:56942] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rip.php"] [unique_id "afvERYPEZE1565sDGnxLtwAAARE"]
[Thu May 07 06:44:21.393932 2026] [:error] [pid 29710:tid 29722] [client 135.119.49.165:56923] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gptsh.php"] [unique_id "afvERf0atTQld9Y2ht_5yAAAAMo"]
[Thu May 07 06:44:21.938925 2026] [:error] [pid 29710:tid 29735] [client 135.119.49.165:57063] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gptsh.php"] [unique_id "afvERf0atTQld9Y2ht_5zQAAANc"]
[Thu May 07 06:44:22.389233 2026] [:error] [pid 29710:tid 29723] [client 135.119.49.165:56928] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gptsh.php"] [unique_id "afvERv0atTQld9Y2ht_50AAAAMs"]
[Thu May 07 06:44:22.780451 2026] [:error] [pid 4539:tid 4559] [client 135.119.49.165:56898] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gptsh.php"] [unique_id "afvERoPEZE1565sDGnxLuwAAARI"]
[Thu May 07 06:44:23.223003 2026] [:error] [pid 29606:tid 29664] [client 135.119.49.165:56918] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "afvERxR5HjZ1PlSAiKt1CgAAAFc"]
[Thu May 07 06:44:23.600600 2026] [:error] [pid 29607:tid 29687] [client 135.119.49.165:56903] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "afvER6bP7TJOAh7WSUN_GAAAAJM"]
[Thu May 07 06:44:24.109577 2026] [:error] [pid 29607:tid 29669] [client 135.119.49.165:57071] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "afvESKbP7TJOAh7WSUN_GgAAAIE"]
[Thu May 07 06:44:24.504654 2026] [:error] [pid 29607:tid 29681] [client 135.119.49.165:56917] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/0x.php"] [unique_id "afvESKbP7TJOAh7WSUN_HgAAAI0"]
[Thu May 07 06:44:24.890353 2026] [:error] [pid 29710:tid 29724] [client 135.119.49.165:57079] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "afvESP0atTQld9Y2ht_51QAAAMw"]
[Thu May 07 06:44:25.278561 2026] [:error] [pid 29607:tid 29678] [client 135.119.49.165:56941] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "afvESabP7TJOAh7WSUN_IgAAAIo"]
[Thu May 07 06:44:25.658830 2026] [:error] [pid 4539:tid 4543] [client 135.119.49.165:56939] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "afvESYPEZE1565sDGnxLwQAAAQI"]
[Thu May 07 06:44:26.108389 2026] [:error] [pid 4539:tid 4546] [client 135.119.49.165:56944] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bgymj.php"] [unique_id "afvESoPEZE1565sDGnxLwwAAAQU"]
[Thu May 07 06:44:26.495002 2026] [:error] [pid 4539:tid 4558] [client 135.119.49.165:56856] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "afvESoPEZE1565sDGnxLxAAAARE"]
[Thu May 07 06:44:26.874453 2026] [:error] [pid 29710:tid 29730] [client 135.119.49.165:57014] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "afvESv0atTQld9Y2ht_53AAAANI"]
[Thu May 07 06:44:27.258444 2026] [:error] [pid 29710:tid 29723] [client 135.119.49.165:56842] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "afvES_0atTQld9Y2ht_53gAAAMs"]
[Thu May 07 06:44:27.650189 2026] [:error] [pid 29607:tid 29685] [client 135.119.49.165:56919] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "afvES6bP7TJOAh7WSUN_JQAAAJE"]
[Thu May 07 06:44:28.056006 2026] [:error] [pid 29605:tid 29626] [client 135.119.49.165:56956] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "afvETInxrTjETioEY0TwmgAAAAw"]
[Thu May 07 06:44:28.453150 2026] [:error] [pid 29710:tid 29727] [client 135.119.49.165:56816] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "afvETP0atTQld9Y2ht_54QAAAM8"]
[Thu May 07 06:44:28.841699 2026] [:error] [pid 29607:tid 29691] [client 135.119.49.165:56984] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "afvETKbP7TJOAh7WSUN_KwAAAJc"]
[Thu May 07 06:44:29.239197 2026] [:error] [pid 29605:tid 29631] [client 135.119.49.165:57040] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "afvETYnxrTjETioEY0TwnAAAABE"]
[Thu May 07 06:44:29.636506 2026] [:error] [pid 29607:tid 29676] [client 135.119.49.165:56852] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/koiy.php"] [unique_id "afvETabP7TJOAh7WSUN_LwAAAIg"]
[Thu May 07 06:44:55.297043 2026] [:error] [pid 29607:tid 29672] [client 135.119.49.165:56953] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "afvEZ6bP7TJOAh7WSUN_ZQAAAIQ"]
[Thu May 07 06:44:55.722686 2026] [:error] [pid 4539:tid 4565] [client 135.119.49.165:56921] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "afvEZ4PEZE1565sDGnxMMAAAARg"]
[Thu May 07 06:44:56.171680 2026] [:error] [pid 29710:tid 29733] [client 135.119.49.165:56873] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "afvEaP0atTQld9Y2ht_5-wAAANU"]
[Thu May 07 06:44:56.593883 2026] [:error] [pid 29605:tid 29638] [client 135.119.49.165:56897] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tfm.php"] [unique_id "afvEaInxrTjETioEY0TwxAAAABg"]
[Thu May 07 06:44:57.053189 2026] [:error] [pid 29607:tid 29676] [client 135.119.49.165:56927] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "afvEaabP7TJOAh7WSUN_aAAAAIg"]
[Thu May 07 06:44:57.463397 2026] [:error] [pid 29606:tid 29646] [client 135.119.49.165:56945] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "afvEaRR5HjZ1PlSAiKt1MAAAAEU"]
[Thu May 07 06:44:57.914628 2026] [:error] [pid 29607:tid 29688] [client 135.119.49.165:57041] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "afvEaabP7TJOAh7WSUN_bgAAAJQ"]
[Thu May 07 06:44:58.342635 2026] [:error] [pid 29607:tid 29685] [client 135.119.49.165:56905] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "afvEaqbP7TJOAh7WSUN_cQAAAJE"]
[Thu May 07 06:44:58.847520 2026] [:error] [pid 29607:tid 29668] [client 135.119.49.165:56924] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "afvEaqbP7TJOAh7WSUN_dQAAAIA"]
[Thu May 07 06:44:59.304306 2026] [:error] [pid 29710:tid 29729] [client 135.119.49.165:56950] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "afvEa_0atTQld9Y2ht_6BgAAANE"]
[Thu May 07 06:44:59.784148 2026] [:error] [pid 4539:tid 4549] [client 135.119.49.165:56988] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "afvEa4PEZE1565sDGnxMQgAAAQg"]
[Thu May 07 06:45:00.224310 2026] [:error] [pid 4539:tid 4563] [client 135.119.49.165:56843] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/t00l.php"] [unique_id "afvEbIPEZE1565sDGnxMRwAAARY"]
[Thu May 07 06:45:00.634821 2026] [:error] [pid 4539:tid 4550] [client 135.119.49.165:56858] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "afvEbIPEZE1565sDGnxMTAAAAQk"]
[Thu May 07 06:45:01.146319 2026] [:error] [pid 29606:tid 29642] [client 135.119.49.165:56896] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "afvEbRR5HjZ1PlSAiKt1OAAAAEE"]
[Thu May 07 06:45:01.552606 2026] [:error] [pid 29710:tid 29721] [client 135.119.49.165:56854] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "afvEbf0atTQld9Y2ht_6DQAAAMk"]
[Thu May 07 06:45:01.971105 2026] [:error] [pid 4539:tid 4552] [client 135.119.49.165:56981] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "afvEbYPEZE1565sDGnxMkwAAAQs"]
[Thu May 07 06:45:02.389679 2026] [:error] [pid 29606:tid 29661] [client 135.119.49.165:56867] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acc.php"] [unique_id "afvEbhR5HjZ1PlSAiKt1PAAAAFQ"]
[Thu May 07 06:45:02.781939 2026] [:error] [pid 29605:tid 29628] [client 135.119.49.165:56959] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acc.php"] [unique_id "afvEbonxrTjETioEY0TwyQAAAA4"]
[Thu May 07 06:45:03.198475 2026] [:error] [pid 29605:tid 29620] [client 135.119.49.165:56936] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acc.php"] [unique_id "afvEb4nxrTjETioEY0TwzQAAAAY"]
[Thu May 07 06:45:03.575682 2026] [:error] [pid 4539:tid 4560] [client 135.119.49.165:56907] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acc.php"] [unique_id "afvEb4PEZE1565sDGnxMwwAAARM"]
[Thu May 07 06:45:03.972370 2026] [:error] [pid 29607:tid 29692] [client 135.119.49.165:57022] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "afvEb6bP7TJOAh7WSUN_mgAAAJg"]
[Thu May 07 06:45:04.354984 2026] [:error] [pid 29710:tid 29715] [client 135.119.49.165:56868] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "afvEcP0atTQld9Y2ht_6EwAAAMM"]
[Thu May 07 06:45:04.740303 2026] [:error] [pid 29606:tid 29660] [client 135.119.49.165:56920] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "afvEcBR5HjZ1PlSAiKt1QAAAAFM"]
[Thu May 07 06:45:05.112423 2026] [:error] [pid 29606:tid 29643] [client 135.119.49.165:56800] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "afvEcRR5HjZ1PlSAiKt1QQAAAEI"]
[Thu May 07 06:45:05.496280 2026] [:error] [pid 29605:tid 29618] [client 135.119.49.165:56946] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "afvEcYnxrTjETioEY0Tw0wAAAAQ"]
[Thu May 07 06:45:05.877250 2026] [:error] [pid 29605:tid 29619] [client 135.119.49.165:56955] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "afvEcYnxrTjETioEY0Tw1AAAAAU"]
[Thu May 07 06:45:06.259042 2026] [:error] [pid 29710:tid 29736] [client 135.119.49.165:56940] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "afvEcv0atTQld9Y2ht_6GgAAANg"]
[Thu May 07 06:45:06.635987 2026] [:error] [pid 29606:tid 29655] [client 135.119.49.165:56855] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "afvEchR5HjZ1PlSAiKt1QgAAAE4"]
[Thu May 07 06:45:07.011920 2026] [:error] [pid 29605:tid 29621] [client 135.119.49.165:56916] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "afvEc4nxrTjETioEY0Tw1wAAAAc"]
[Thu May 07 06:45:07.395732 2026] [:error] [pid 29605:tid 29623] [client 135.119.49.165:56899] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "afvEc4nxrTjETioEY0Tw2gAAAAk"]
[Thu May 07 06:45:07.773849 2026] [:error] [pid 29605:tid 29626] [client 135.119.49.165:56915] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "afvEc4nxrTjETioEY0Tw3AAAAAw"]
[Thu May 07 06:45:08.151191 2026] [:error] [pid 29605:tid 29631] [client 135.119.49.165:56876] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/packsin1.php"] [unique_id "afvEdInxrTjETioEY0Tw3wAAABE"]
[Thu May 07 06:45:08.536035 2026] [:error] [pid 29607:tid 29671] [client 135.119.49.165:57038] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "afvEdKbP7TJOAh7WSUN_pAAAAIM"]
[Thu May 07 06:45:08.921006 2026] [:error] [pid 29605:tid 29638] [client 135.119.49.165:56832] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "afvEdInxrTjETioEY0Tw4wAAABg"]
[Thu May 07 06:45:09.311489 2026] [:error] [pid 4539:tid 4562] [client 135.119.49.165:56986] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "afvEdYPEZE1565sDGnxM5QAAARU"]
[Thu May 07 06:45:09.688588 2026] [:error] [pid 29607:tid 29675] [client 135.119.49.165:57016] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "afvEdabP7TJOAh7WSUN_pQAAAIc"]
[Thu May 07 06:45:10.063358 2026] [:error] [pid 29607:tid 29681] [client 135.119.49.165:57027] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "afvEdqbP7TJOAh7WSUN_pwAAAI0"]
[Thu May 07 06:45:10.458274 2026] [:error] [pid 29606:tid 29641] [client 135.119.49.165:56904] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "afvEdhR5HjZ1PlSAiKt1SQAAAEA"]
[Thu May 07 06:45:10.839830 2026] [:error] [pid 29606:tid 29646] [client 135.119.49.165:56848] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "afvEdhR5HjZ1PlSAiKt1TAAAAEU"]
[Thu May 07 06:45:11.224222 2026] [:error] [pid 4539:tid 4548] [client 135.119.49.165:56958] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws78.php"] [unique_id "afvEd4PEZE1565sDGnxM6QAAAQc"]
[Thu May 07 06:45:11.614132 2026] [:error] [pid 29607:tid 29670] [client 135.119.49.165:56769] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "afvEd6bP7TJOAh7WSUN_qwAAAII"]
[Thu May 07 06:45:12.000580 2026] [:error] [pid 29607:tid 29684] [client 135.119.49.165:56784] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "afvEd6bP7TJOAh7WSUN_rQAAAJA"]
[Thu May 07 06:45:12.387157 2026] [:error] [pid 4539:tid 4541] [client 135.119.49.165:56913] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "afvEeIPEZE1565sDGnxM6gAAAQA"]
[Thu May 07 06:45:12.762646 2026] [:error] [pid 4539:tid 4546] [client 135.119.49.165:57059] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/motu.php"] [unique_id "afvEeIPEZE1565sDGnxM7AAAAQU"]
[Thu May 07 06:45:13.134611 2026] [:error] [pid 4539:tid 4543] [client 135.119.49.165:57003] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "afvEeYPEZE1565sDGnxM7wAAAQI"]
[Thu May 07 06:45:13.534200 2026] [:error] [pid 29710:tid 29723] [client 135.119.49.165:56895] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "afvEef0atTQld9Y2ht_6LQAAAMs"]
[Thu May 07 06:45:13.905993 2026] [:error] [pid 29710:tid 29735] [client 135.119.49.165:56834] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "afvEef0atTQld9Y2ht_6MAAAANc"]
[Thu May 07 06:45:14.292780 2026] [:error] [pid 29710:tid 29733] [client 135.119.49.165:56864] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "afvEev0atTQld9Y2ht_6MgAAANU"]
[Thu May 07 06:45:14.667377 2026] [:error] [pid 29710:tid 29721] [client 135.119.49.165:56919] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "afvEev0atTQld9Y2ht_6MwAAAMk"]
[Thu May 07 06:45:15.098488 2026] [:error] [pid 29605:tid 29628] [client 135.119.49.165:56872] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "afvEe4nxrTjETioEY0Tw7wAAAA4"]
[Thu May 07 06:45:15.479094 2026] [:error] [pid 29605:tid 29616] [client 135.119.49.165:57049] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "afvEe4nxrTjETioEY0Tw8QAAAAI"]
[Thu May 07 06:45:15.874834 2026] [:error] [pid 29710:tid 29725] [client 135.119.49.165:56900] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xa.php"] [unique_id "afvEe_0atTQld9Y2ht_6NwAAAM0"]
[Thu May 07 06:45:16.270776 2026] [:error] [pid 29710:tid 29734] [client 135.119.49.165:56787] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "afvEfP0atTQld9Y2ht_6OwAAANY"]
[Thu May 07 06:45:16.656422 2026] [:error] [pid 29710:tid 29730] [client 135.119.49.165:56833] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "afvEfP0atTQld9Y2ht_6PgAAANI"]
[Thu May 07 06:45:17.048878 2026] [:error] [pid 4539:tid 4541] [client 135.119.49.165:56870] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "afvEfYPEZE1565sDGnxNAAAAAQA"]
[Thu May 07 06:45:17.445928 2026] [:error] [pid 29606:tid 29645] [client 135.119.49.165:56935] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8573.php"] [unique_id "afvEfRR5HjZ1PlSAiKt1UgAAAEQ"]
[Thu May 07 06:45:17.828510 2026] [:error] [pid 4539:tid 4556] [client 135.119.49.165:56782] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "afvEfYPEZE1565sDGnxNBgAAAQ8"]
[Thu May 07 06:45:18.218401 2026] [:error] [pid 4539:tid 4551] [client 135.119.49.165:56877] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "afvEfoPEZE1565sDGnxNCAAAAQo"]
[Thu May 07 06:45:18.623323 2026] [:error] [pid 29607:tid 29674] [client 135.119.49.165:56914] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "afvEfqbP7TJOAh7WSUN_uAAAAIY"]
[Thu May 07 06:45:19.008422 2026] [:error] [pid 4539:tid 4545] [client 135.119.49.165:56835] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sadcut1.php"] [unique_id "afvEf4PEZE1565sDGnxNCgAAAQQ"]
[Thu May 07 06:45:19.383158 2026] [:error] [pid 29710:tid 29716] [client 135.119.49.165:57054] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "afvEf_0atTQld9Y2ht_6RgAAAMQ"]
[Thu May 07 06:45:19.761778 2026] [:error] [pid 4539:tid 4542] [client 135.119.49.165:56775] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "afvEf4PEZE1565sDGnxNEQAAAQE"]
[Thu May 07 06:45:20.178561 2026] [:error] [pid 29710:tid 29725] [client 135.119.49.165:56839] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "afvEgP0atTQld9Y2ht_6SAAAAM0"]
[Thu May 07 06:45:20.570514 2026] [:error] [pid 4539:tid 4552] [client 135.119.49.165:56807] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/666.php"] [unique_id "afvEgIPEZE1565sDGnxNFgAAAQs"]
[Thu May 07 06:45:20.963971 2026] [:error] [pid 4539:tid 4560] [client 135.119.49.165:56865] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "afvEgIPEZE1565sDGnxNGQAAARM"]
[Thu May 07 06:45:21.350457 2026] [:error] [pid 4539:tid 4563] [client 135.119.49.165:56862] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "afvEgYPEZE1565sDGnxNGwAAARY"]
[Thu May 07 06:45:21.734940 2026] [:error] [pid 4539:tid 4542] [client 135.119.49.165:56786] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "afvEgYPEZE1565sDGnxNHAAAAQE"]
[Thu May 07 06:45:22.111687 2026] [:error] [pid 4539:tid 4556] [client 135.119.49.165:57058] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "afvEgoPEZE1565sDGnxNHgAAAQ8"]
[Thu May 07 06:45:22.501706 2026] [:error] [pid 4539:tid 4550] [client 135.119.49.165:56849] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosellers8.php"] [unique_id "afvEgoPEZE1565sDGnxNIgAAAQk"]
[Thu May 07 06:45:22.906250 2026] [:error] [pid 4539:tid 4558] [client 135.119.49.165:56933] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosellers8.php"] [unique_id "afvEgoPEZE1565sDGnxNJgAAARE"]
[Thu May 07 06:45:23.320429 2026] [:error] [pid 29606:tid 29661] [client 135.119.49.165:56837] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosellers8.php"] [unique_id "afvEgxR5HjZ1PlSAiKt1VAAAAFQ"]
[Thu May 07 06:45:23.730689 2026] [:error] [pid 29710:tid 29725] [client 135.119.49.165:56948] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/prosellers8.php"] [unique_id "afvEg_0atTQld9Y2ht_6UwAAAM0"]
[Thu May 07 06:45:24.108731 2026] [:error] [pid 29606:tid 29660] [client 135.119.49.165:56841] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shop.php"] [unique_id "afvEhBR5HjZ1PlSAiKt1VwAAAFM"]
[Thu May 07 06:45:24.495075 2026] [:error] [pid 29606:tid 29651] [client 135.119.49.165:56772] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shop.php"] [unique_id "afvEhBR5HjZ1PlSAiKt1WwAAAEo"]
[Thu May 07 06:45:24.892554 2026] [:error] [pid 4539:tid 4557] [client 135.119.49.165:56814] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shop.php"] [unique_id "afvEhIPEZE1565sDGnxNLAAAARA"]
[Thu May 07 06:45:25.275199 2026] [:error] [pid 4539:tid 4553] [client 135.119.49.165:56804] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shop.php"] [unique_id "afvEhYPEZE1565sDGnxNMQAAAQw"]
[Thu May 07 06:45:25.673292 2026] [:error] [pid 4539:tid 4547] [client 135.119.49.165:56773] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww.php"] [unique_id "afvEhYPEZE1565sDGnxNMwAAAQY"]
[Thu May 07 06:45:26.065577 2026] [:error] [pid 29606:tid 29653] [client 135.119.49.165:56826] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww.php"] [unique_id "afvEhhR5HjZ1PlSAiKt1YQAAAEw"]
[Thu May 07 06:45:26.439588 2026] [:error] [pid 4539:tid 4550] [client 135.119.49.165:56932] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww.php"] [unique_id "afvEhoPEZE1565sDGnxNOQAAAQk"]
[Thu May 07 06:45:26.840462 2026] [:error] [pid 29607:tid 29685] [client 135.119.49.165:56771] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ww.php"] [unique_id "afvEhqbP7TJOAh7WSUN_wAAAAJE"]
[Thu May 07 06:45:27.225699 2026] [:error] [pid 29607:tid 29690] [client 135.119.49.165:56931] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fsjzs.php"] [unique_id "afvEh6bP7TJOAh7WSUN_wgAAAJY"]
[Thu May 07 06:45:27.619747 2026] [:error] [pid 29605:tid 29622] [client 135.119.49.165:56838] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fsjzs.php"] [unique_id "afvEh4nxrTjETioEY0Tw-AAAAAg"]
[Thu May 07 06:45:28.010136 2026] [:error] [pid 29710:tid 29717] [client 135.119.49.165:56947] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fsjzs.php"] [unique_id "afvEiP0atTQld9Y2ht_6XgAAAMU"]
[Thu May 07 06:45:28.409040 2026] [:error] [pid 29710:tid 29722] [client 135.119.49.165:57056] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fsjzs.php"] [unique_id "afvEiP0atTQld9Y2ht_6YAAAAMo"]
[Thu May 07 06:45:28.804653 2026] [:error] [pid 29710:tid 29718] [client 135.119.49.165:56806] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cwclass.php"] [unique_id "afvEiP0atTQld9Y2ht_6ZwAAAMY"]
[Thu May 07 06:45:29.187765 2026] [:error] [pid 29710:tid 29727] [client 135.119.49.165:56717] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cwclass.php"] [unique_id "afvEif0atTQld9Y2ht_6agAAAM8"]
[Thu May 07 06:45:29.579152 2026] [:error] [pid 29710:tid 29733] [client 135.119.49.165:56951] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cwclass.php"] [unique_id "afvEif0atTQld9Y2ht_6bQAAANU"]
[Thu May 07 06:45:29.960135 2026] [:error] [pid 29606:tid 29664] [client 135.119.49.165:56812] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cwclass.php"] [unique_id "afvEiRR5HjZ1PlSAiKt1ZAAAAFc"]
[Thu May 07 06:45:30.364530 2026] [:error] [pid 29606:tid 29647] [client 135.119.49.165:56891] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "afvEihR5HjZ1PlSAiKt1ZQAAAEY"]
[Thu May 07 06:45:30.755718 2026] [:error] [pid 29607:tid 29674] [client 135.119.49.165:56887] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "afvEiqbP7TJOAh7WSUN_xAAAAIY"]
[Thu May 07 06:45:31.150790 2026] [:error] [pid 29606:tid 29662] [client 135.119.49.165:56779] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "afvEixR5HjZ1PlSAiKt1bQAAAFU"]
[Thu May 07 06:45:31.527317 2026] [:error] [pid 4539:tid 4551] [client 135.119.49.165:56863] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit-tags.php"] [unique_id "afvEi4PEZE1565sDGnxNRAAAAQo"]
[Thu May 07 06:45:31.908903 2026] [:error] [pid 29605:tid 29617] [client 135.119.49.165:56794] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "afvEi4nxrTjETioEY0TxBAAAAAM"]
[Thu May 07 06:45:32.301526 2026] [:error] [pid 4539:tid 4563] [client 135.119.49.165:56937] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "afvEjIPEZE1565sDGnxNSQAAARY"]
[Thu May 07 06:45:32.678987 2026] [:error] [pid 29605:tid 29638] [client 135.119.49.165:56879] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "afvEjInxrTjETioEY0TxBgAAABg"]
[Thu May 07 06:45:33.064794 2026] [:error] [pid 29710:tid 29713] [client 135.119.49.165:56878] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "afvEjf0atTQld9Y2ht_6ewAAAME"]
[Thu May 07 06:45:33.459896 2026] [:error] [pid 4539:tid 4557] [client 135.119.49.165:56883] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "afvEjYPEZE1565sDGnxNWAAAARA"]
[Thu May 07 06:45:33.862618 2026] [:error] [pid 29710:tid 29722] [client 135.119.49.165:56881] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "afvEjf0atTQld9Y2ht_6gAAAAMo"]
[Thu May 07 06:45:34.255327 2026] [:error] [pid 29710:tid 29735] [client 135.119.49.165:56840] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "afvEjv0atTQld9Y2ht_6hAAAANc"]
[Thu May 07 06:45:34.651642 2026] [:error] [pid 29710:tid 29714] [client 135.119.49.165:56831] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "afvEjv0atTQld9Y2ht_6hgAAAMI"]
[Thu May 07 06:45:35.026398 2026] [:error] [pid 29606:tid 29650] [client 135.119.49.165:56790] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "afvEjxR5HjZ1PlSAiKt1cgAAAEk"]
[Thu May 07 06:45:35.417468 2026] [:error] [pid 29605:tid 29623] [client 135.119.49.165:56957] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "afvEj4nxrTjETioEY0TxCAAAAAk"]
[Thu May 07 06:45:35.808803 2026] [:error] [pid 29607:tid 29688] [client 135.119.49.165:56819] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "afvEj6bP7TJOAh7WSUN_zAAAAJQ"]
[Thu May 07 06:45:36.210309 2026] [:error] [pid 29606:tid 29660] [client 135.119.49.165:56844] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "afvEkBR5HjZ1PlSAiKt1dQAAAFM"]
[Thu May 07 06:45:36.593358 2026] [:error] [pid 29606:tid 29652] [client 135.119.49.165:56845] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "afvEkBR5HjZ1PlSAiKt1dgAAAEs"]
[Thu May 07 06:45:36.989164 2026] [:error] [pid 29710:tid 29729] [client 135.119.49.165:56778] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "afvEkP0atTQld9Y2ht_6kgAAANE"]
[Thu May 07 06:45:37.370964 2026] [:error] [pid 29710:tid 29728] [client 135.119.49.165:56882] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "afvEkf0atTQld9Y2ht_6lAAAANA"]
[Thu May 07 06:45:37.757466 2026] [:error] [pid 29710:tid 29715] [client 135.119.49.165:56802] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ai.php"] [unique_id "afvEkf0atTQld9Y2ht_6lwAAAMM"]
[Thu May 07 06:45:38.142284 2026] [:error] [pid 29710:tid 29734] [client 135.119.49.165:56930] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jga.php"] [unique_id "afvEkv0atTQld9Y2ht_6mgAAANY"]
[Thu May 07 06:45:38.518875 2026] [:error] [pid 29710:tid 29720] [client 135.119.49.165:56889] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jga.php"] [unique_id "afvEkv0atTQld9Y2ht_6nQAAAMg"]
[Thu May 07 06:45:38.909307 2026] [:error] [pid 29606:tid 29656] [client 135.119.49.165:56776] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jga.php"] [unique_id "afvEkhR5HjZ1PlSAiKt1fwAAAE8"]
[Thu May 07 06:45:39.293607 2026] [:error] [pid 4539:tid 4564] [client 135.119.49.165:56798] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/jga.php"] [unique_id "afvEk4PEZE1565sDGnxNagAAARc"]
[Thu May 07 06:45:39.670646 2026] [:error] [pid 29607:tid 29678] [client 135.119.49.165:56850] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "afvEk6bP7TJOAh7WSUN_0AAAAIo"]
[Thu May 07 06:45:40.057653 2026] [:error] [pid 29710:tid 29715] [client 135.119.49.165:57013] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "afvElP0atTQld9Y2ht_6ogAAAMM"]
[Thu May 07 06:45:40.433897 2026] [:error] [pid 29607:tid 29668] [client 135.119.49.165:56816] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "afvElKbP7TJOAh7WSUN_0wAAAIA"]
[Thu May 07 06:45:40.828550 2026] [:error] [pid 29606:tid 29660] [client 135.119.49.165:56813] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/term.php"] [unique_id "afvElBR5HjZ1PlSAiKt1hgAAAFM"]
[Thu May 07 06:45:41.220318 2026] [:error] [pid 29606:tid 29652] [client 135.119.49.165:56866] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "afvElRR5HjZ1PlSAiKt1hwAAAEs"]
[Thu May 07 06:45:41.606630 2026] [:error] [pid 4539:tid 4563] [client 135.119.49.165:56823] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "afvElYPEZE1565sDGnxNbQAAARY"]
[Thu May 07 06:45:42.005029 2026] [:error] [pid 29710:tid 29720] [client 135.119.49.165:56791] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "afvElv0atTQld9Y2ht_6pQAAAMg"]
[Thu May 07 06:45:42.395831 2026] [:error] [pid 29710:tid 29719] [client 135.119.49.165:56797] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gk.php"] [unique_id "afvElv0atTQld9Y2ht_6pgAAAMc"]
[Thu May 07 06:45:42.776384 2026] [:error] [pid 29605:tid 29616] [client 135.119.49.165:56949] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "afvElonxrTjETioEY0TxEgAAAAI"]
[Thu May 07 06:45:43.157913 2026] [:error] [pid 29606:tid 29645] [client 135.119.49.165:56859] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "afvElxR5HjZ1PlSAiKt1jQAAAEQ"]
[Thu May 07 06:45:43.546946 2026] [:error] [pid 29607:tid 29668] [client 135.119.49.165:56716] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "afvEl6bP7TJOAh7WSUN_3wAAAIA"]
[Thu May 07 06:45:43.941112 2026] [:error] [pid 29605:tid 29637] [client 135.119.49.165:56713] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "afvEl4nxrTjETioEY0TxGgAAABc"]
[Thu May 07 06:45:44.329042 2026] [:error] [pid 4539:tid 4550] [client 135.119.49.165:56727] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sd.php"] [unique_id "afvEmIPEZE1565sDGnxNcAAAAQk"]
[Thu May 07 06:45:44.715527 2026] [:error] [pid 29606:tid 29651] [client 135.119.49.165:56718] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sd.php"] [unique_id "afvEmBR5HjZ1PlSAiKt1kwAAAEo"]
[Thu May 07 06:45:45.098446 2026] [:error] [pid 29606:tid 29644] [client 135.119.49.165:56996] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sd.php"] [unique_id "afvEmRR5HjZ1PlSAiKt1lwAAAEM"]
[Thu May 07 06:45:45.482487 2026] [:error] [pid 29606:tid 29655] [client 135.119.49.165:56874] [client 135.119.49.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sd.php"] [unique_id "afvEmRR5HjZ1PlSAiKt1mQAAAE4"]
[Thu May 07 08:28:35.214578 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:35.214607 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.631855 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.631884 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.662178 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.662207 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.555730 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.555758 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 09:36:10.709486 2026] [:error] [pid 1143:tid 1159] [client 52.138.31.126:27363] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/"] [unique_id "afvsipb7qeI8X5VYRr4oQQAAAQ4"]
[Thu May 07 09:36:11.180818 2026] [:error] [pid 56066:tid 56128] [client 52.138.31.126:27292] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/"] [unique_id "afvsi0YS8DGwDvklLv6K-QAAAMU"]
[Thu May 07 09:36:11.608708 2026] [:error] [pid 56065:tid 56103] [client 52.138.31.126:27349] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/"] [unique_id "afvsi3dV4hYThdnhfxC7_AAAAIc"]
[Thu May 07 09:36:12.032721 2026] [:error] [pid 56064:tid 56078] [client 52.138.31.126:27375] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/js/"] [unique_id "afvsjCsGkZZUEf_7QCMLbQAAAAk"]
[Thu May 07 09:36:12.516433 2026] [:error] [pid 1143:tid 1156] [client 52.138.31.126:27294] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links.php"] [unique_id "afvsjJb7qeI8X5VYRr4oQgAAAQs"]
[Thu May 07 09:36:12.975775 2026] [:error] [pid 1143:tid 1166] [client 52.138.31.126:27370] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links.php"] [unique_id "afvsjJb7qeI8X5VYRr4oRQAAARU"]
[Thu May 07 09:36:13.441295 2026] [:error] [pid 56065:tid 56097] [client 52.138.31.126:27342] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links.php"] [unique_id "afvsjXdV4hYThdnhfxC8BAAAAIE"]
[Thu May 07 09:36:13.878170 2026] [:error] [pid 1143:tid 1154] [client 52.138.31.126:27353] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-links.php"] [unique_id "afvsjZb7qeI8X5VYRr4oSQAAAQk"]
[Thu May 07 09:36:14.314568 2026] [:error] [pid 1143:tid 1165] [client 52.138.31.126:27360] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/upload/wp-info.php"] [unique_id "afvsjpb7qeI8X5VYRr4oSgAAARQ"]
[Thu May 07 09:36:14.750117 2026] [:error] [pid 1143:tid 1161] [client 52.138.31.126:27286] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/upload/wp-info.php"] [unique_id "afvsjpb7qeI8X5VYRr4oTQAAARA"]
[Thu May 07 09:36:15.174839 2026] [:error] [pid 56066:tid 56134] [client 52.138.31.126:27276] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/upload/wp-info.php"] [unique_id "afvsj0YS8DGwDvklLv6K_QAAAMs"]
[Thu May 07 09:36:15.599045 2026] [:error] [pid 1143:tid 1158] [client 52.138.31.126:27278] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/upload/wp-info.php"] [unique_id "afvsj5b7qeI8X5VYRr4oVwAAAQ0"]
[Thu May 07 09:36:16.070045 2026] [:error] [pid 56064:tid 56090] [client 52.138.31.126:27331] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvskCsGkZZUEf_7QCMLcgAAABU"]
[Thu May 07 09:36:16.531563 2026] [:error] [pid 56065:tid 56097] [client 52.138.31.126:27283] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvskHdV4hYThdnhfxC8BwAAAIE"]
[Thu May 07 09:36:16.963938 2026] [:error] [pid 56066:tid 56132] [client 52.138.31.126:27365] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvskEYS8DGwDvklLv6K_gAAAMk"]
[Thu May 07 09:36:17.396584 2026] [:error] [pid 56066:tid 56126] [client 52.138.31.126:27333] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvskUYS8DGwDvklLv6K_wAAAMM"]
[Thu May 07 09:36:17.827164 2026] [:error] [pid 56150:tid 56176] [client 52.138.31.126:27387] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/half.php"] [unique_id "afvskdu4duXJJeTigXQAjgAAAFg"]
[Thu May 07 09:36:18.252782 2026] [:error] [pid 1143:tid 1169] [client 52.138.31.126:27280] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/half.php"] [unique_id "afvskpb7qeI8X5VYRr4oYwAAARg"]
[Thu May 07 09:36:18.678625 2026] [:error] [pid 1143:tid 1145] [client 52.138.31.126:27343] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/half.php"] [unique_id "afvskpb7qeI8X5VYRr4oZQAAAQA"]
[Thu May 07 09:36:19.120354 2026] [:error] [pid 56064:tid 56073] [client 52.138.31.126:27328] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/half.php"] [unique_id "afvskysGkZZUEf_7QCMLdgAAAAQ"]
[Thu May 07 09:36:19.564535 2026] [:error] [pid 1143:tid 1158] [client 52.138.31.126:27285] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2P.php"] [unique_id "afvsk5b7qeI8X5VYRr4oZwAAAQ0"]
[Thu May 07 09:36:20.015067 2026] [:error] [pid 56150:tid 56172] [client 52.138.31.126:27326] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2P.php"] [unique_id "afvslNu4duXJJeTigXQAkQAAAFQ"]
[Thu May 07 09:36:20.477605 2026] [:error] [pid 56064:tid 56078] [client 52.138.31.126:27337] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2P.php"] [unique_id "afvslCsGkZZUEf_7QCMLdwAAAAk"]
[Thu May 07 09:36:20.903178 2026] [:error] [pid 56065:tid 56109] [client 52.138.31.126:27275] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2P.php"] [unique_id "afvslHdV4hYThdnhfxC8CAAAAI0"]
[Thu May 07 09:36:21.346343 2026] [:error] [pid 56064:tid 56079] [client 52.138.31.126:27279] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "afvslSsGkZZUEf_7QCMLeAAAAAo"]
[Thu May 07 09:36:21.778546 2026] [:error] [pid 56150:tid 56174] [client 52.138.31.126:27383] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "afvsldu4duXJJeTigXQAlAAAAFY"]
[Thu May 07 09:36:22.205067 2026] [:error] [pid 56066:tid 56129] [client 52.138.31.126:27358] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "afvslkYS8DGwDvklLv6LBQAAAMY"]
[Thu May 07 09:36:22.639490 2026] [:error] [pid 56065:tid 56102] [client 52.138.31.126:27361] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "afvslndV4hYThdnhfxC8DQAAAIY"]
[Thu May 07 09:36:23.058607 2026] [:error] [pid 56064:tid 56092] [client 52.138.31.126:27273] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "afvslysGkZZUEf_7QCMLewAAABc"]
[Thu May 07 09:36:23.489649 2026] [:error] [pid 56150:tid 56160] [client 52.138.31.126:27277] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "afvsl9u4duXJJeTigXQAmAAAAEg"]
[Thu May 07 09:36:23.915698 2026] [:error] [pid 1143:tid 1167] [client 52.138.31.126:27391] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "afvsl5b7qeI8X5VYRr4oawAAARY"]
[Thu May 07 09:36:24.382159 2026] [:error] [pid 1143:tid 1147] [client 52.138.31.126:27390] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "afvsmJb7qeI8X5VYRr4obAAAAQI"]
[Thu May 07 09:36:24.820781 2026] [:error] [pid 1143:tid 1146] [client 52.138.31.126:27335] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvsmJb7qeI8X5VYRr4obgAAAQE"]
[Thu May 07 09:36:25.255328 2026] [:error] [pid 1143:tid 1158] [client 52.138.31.126:27281] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvsmZb7qeI8X5VYRr4obwAAAQ0"]
[Thu May 07 09:36:25.695743 2026] [:error] [pid 1143:tid 1157] [client 52.138.31.126:9192] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvsmZb7qeI8X5VYRr4ofAAAAQw"]
[Thu May 07 09:36:26.116301 2026] [:error] [pid 56064:tid 56090] [client 52.138.31.126:27376] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvsmisGkZZUEf_7QCMLfAAAABU"]
[Thu May 07 09:36:27.544304 2026] [:error] [pid 56064:tid 56070] [client 52.138.31.126:27274] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "afvsmysGkZZUEf_7QCMLfQAAAAE"]
[Thu May 07 09:36:27.983569 2026] [:error] [pid 56064:tid 56076] [client 52.138.31.126:27357] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "afvsmysGkZZUEf_7QCMLfwAAAAc"]
[Thu May 07 09:36:28.411814 2026] [:error] [pid 56065:tid 56115] [client 52.138.31.126:27316] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "afvsnHdV4hYThdnhfxC8EAAAAJM"]
[Thu May 07 09:36:28.854247 2026] [:error] [pid 56066:tid 56125] [client 52.138.31.126:27355] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-block.php"] [unique_id "afvsnEYS8DGwDvklLv6LFQAAAMI"]
[Thu May 07 09:36:29.280297 2026] [:error] [pid 56066:tid 56135] [client 52.138.31.126:9185] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "afvsnUYS8DGwDvklLv6LFgAAAMw"]
[Thu May 07 09:36:29.733001 2026] [:error] [pid 1143:tid 1148] [client 52.138.31.126:27309] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "afvsnZb7qeI8X5VYRr4oigAAAQM"]
[Thu May 07 09:36:30.163603 2026] [:error] [pid 1143:tid 1152] [client 52.138.31.126:27296] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "afvsnpb7qeI8X5VYRr4ojAAAAQc"]
[Thu May 07 09:36:30.597542 2026] [:error] [pid 1143:tid 1147] [client 52.138.31.126:27377] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "afvsnpb7qeI8X5VYRr4ojwAAAQI"]
[Thu May 07 09:36:31.019378 2026] [:error] [pid 1143:tid 1146] [client 52.138.31.126:27352] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/olik.php"] [unique_id "afvsn5b7qeI8X5VYRr4okQAAAQE"]
[Thu May 07 09:36:31.448996 2026] [:error] [pid 56065:tid 56098] [client 52.138.31.126:9177] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/olik.php"] [unique_id "afvsn3dV4hYThdnhfxC8EwAAAII"]
[Thu May 07 09:36:31.876254 2026] [:error] [pid 1143:tid 1168] [client 52.138.31.126:27272] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/olik.php"] [unique_id "afvsn5b7qeI8X5VYRr4omAAAARc"]
[Thu May 07 09:36:32.304945 2026] [:error] [pid 56150:tid 56165] [client 52.138.31.126:9152] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/olik.php"] [unique_id "afvsoNu4duXJJeTigXQAswAAAE0"]
[Thu May 07 09:36:32.737570 2026] [:error] [pid 1143:tid 1146] [client 52.138.31.126:27303] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h.php"] [unique_id "afvsoJb7qeI8X5VYRr4omgAAAQE"]
[Thu May 07 09:36:33.183989 2026] [:error] [pid 56065:tid 56111] [client 52.138.31.126:27359] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h.php"] [unique_id "afvsoXdV4hYThdnhfxC8FgAAAI8"]
[Thu May 07 09:36:33.612157 2026] [:error] [pid 1143:tid 1168] [client 52.138.31.126:27336] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h.php"] [unique_id "afvsoZb7qeI8X5VYRr4onwAAARc"]
[Thu May 07 09:36:34.041999 2026] [:error] [pid 56065:tid 56119] [client 52.138.31.126:27367] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/h.php"] [unique_id "afvsondV4hYThdnhfxC8GAAAAJc"]
[Thu May 07 09:36:34.470887 2026] [:error] [pid 1143:tid 1148] [client 52.138.31.126:9157] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "afvsopb7qeI8X5VYRr4oowAAAQM"]
[Thu May 07 09:36:34.909895 2026] [:error] [pid 1143:tid 1167] [client 52.138.31.126:27289] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "afvsopb7qeI8X5VYRr4opQAAARY"]
[Thu May 07 09:36:35.338119 2026] [:error] [pid 1143:tid 1150] [client 52.138.31.126:27308] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "afvso5b7qeI8X5VYRr4oqgAAAQU"]
[Thu May 07 09:36:35.766155 2026] [:error] [pid 56066:tid 56144] [client 52.138.31.126:27368] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/kj.php"] [unique_id "afvso0YS8DGwDvklLv6LGwAAANU"]
[Thu May 07 09:36:36.233726 2026] [:error] [pid 56066:tid 56146] [client 52.138.31.126:27385] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/about.php"] [unique_id "afvspEYS8DGwDvklLv6LHQAAANc"]
[Thu May 07 09:36:36.726037 2026] [:error] [pid 56064:tid 56075] [client 52.138.31.126:27268] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/about.php"] [unique_id "afvspCsGkZZUEf_7QCMLhwAAAAY"]
[Thu May 07 09:36:37.184178 2026] [:error] [pid 56064:tid 56083] [client 52.138.31.126:9165] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/about.php"] [unique_id "afvspSsGkZZUEf_7QCMLiQAAAA4"]
[Thu May 07 09:36:37.619176 2026] [:error] [pid 56064:tid 56090] [client 52.138.31.126:9176] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/.well-known/about.php"] [unique_id "afvspSsGkZZUEf_7QCMLiwAAABU"]
[Thu May 07 09:36:38.047483 2026] [:error] [pid 56065:tid 56113] [client 52.138.31.126:27311] [client 52.138.31.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "end2end.hostone.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afvspndV4hYThdnhfxC8GwAAAJE"]
[Thu May 07 09:36:38.506054 2026] [:error] [pid 56150:tid 56173] [client 52.138.31.126:9188] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxl.php"] [unique_id "afvsptu4duXJJeTigXQAuAAAAFU"]
[Thu May 07 09:36:38.984479 2026] [:error] [pid 56065:tid 56109] [client 52.138.31.126:27323] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxl.php"] [unique_id "afvspndV4hYThdnhfxC8HgAAAI0"]
[Thu May 07 09:36:39.416832 2026] [:error] [pid 56064:tid 56074] [client 52.138.31.126:27346] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxl.php"] [unique_id "afvspysGkZZUEf_7QCMLjAAAAAU"]
[Thu May 07 09:36:39.842990 2026] [:error] [pid 1143:tid 1168] [client 52.138.31.126:9169] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "afvsp5b7qeI8X5VYRr4otAAAARc"]
[Thu May 07 09:36:40.281560 2026] [:error] [pid 1143:tid 1167] [client 52.138.31.126:27312] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "afvsqJb7qeI8X5VYRr4otwAAARY"]
[Thu May 07 09:36:40.700760 2026] [:error] [pid 1143:tid 1165] [client 52.138.31.126:27369] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "afvsqJb7qeI8X5VYRr4ouAAAARQ"]
[Thu May 07 09:36:41.147184 2026] [:error] [pid 56064:tid 56069] [client 52.138.31.126:27321] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "afvsqSsGkZZUEf_7QCMLjgAAAAA"]
[Thu May 07 09:36:41.590987 2026] [:error] [pid 56064:tid 56085] [client 52.138.31.126:9154] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bob.php"] [unique_id "afvsqSsGkZZUEf_7QCMLkQAAABA"]
[Thu May 07 09:36:42.027530 2026] [:error] [pid 1143:tid 1160] [client 52.138.31.126:27379] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bob.php"] [unique_id "afvsqpb7qeI8X5VYRr4ovgAAAQ8"]
[Thu May 07 09:36:42.499573 2026] [:error] [pid 56150:tid 56157] [client 52.138.31.126:27334] [client 52.138.31.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bob.php"] [unique_id "afvsqtu4duXJJeTigXQAvAAAAEU"]
[Thu May 07 14:14:11.225675 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:11.225704 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 23:18:06.288870 2026] [:error] [pid 15630:tid 15672] [client 158.173.67.11:30817] [client 158.173.67.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "afytLnTithRAi4821qvUxQAAAIw"]
[Thu May 07 23:18:16.833571 2026] [:error] [pid 15630:tid 15679] [client 158.173.67.241:45605] [client 158.173.67.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "afytOHTithRAi4821qvVOAAAAJM"]
[Fri May 08 03:20:37.920030 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:37.920060 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:39.876332 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:39.876332 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:53.952729 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:53.952768 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.752063 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.752091 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.444269 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.444300 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:12.371171 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:12.371197 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:59.154775 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:59.154801 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:01.045719 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:01.045746 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:58.097538 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:58.097564 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:37:00.413134 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:37:00.413161 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 04:30:36.709653 2026] [:error] [pid 51008:tid 51069] [client 34.97.1.48:36630] [client 34.97.1.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "afz2bHB58C2Y1tgLtuLxYQAAAFQ"]
[Fri May 08 12:58:32.893582 2026] [:error] [pid 61356:tid 61402] [client 34.131.168.196:48214] [client 34.131.168.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "af1teIx3vpB8oWhUq2P7cAAAAc4"]
[Sat May 09 03:13:29.483631 2026] [:error] [pid 51007:tid 51043] [client 34.158.22.47:37434] [client 34.158.22.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "af412VMagSGstWKyzzUvEQAAABU"]
[Sat May 09 03:24:39.987298 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:39.987326 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:42.115901 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:42.115928 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.547838 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.547865 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.777578 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.777607 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.502547 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.502574 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:25.401820 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:25.401848 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.611797 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.611824 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.556190 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.556216 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:48.946756 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:48.946785 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:50.877173 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:50.877200 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.786906 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.786935 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.698848 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.698874 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:43.911624 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:43.911650 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:45.828467 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:45.828492 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:34.952507 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:34.952546 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.766316 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.766342 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:49.308792 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:49.308820 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:51.212509 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:51.212535 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:04.217350 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:04.217376 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:15.101428 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:15.101454 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.588962 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.588989 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.474900 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.474930 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.755947 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.755974 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.694978 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.695006 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:35.272852 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:35.272884 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:37.224233 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:37.224288 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:54.920044 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:54.920082 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:51.010382 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:51.010411 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:01.303315 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:01.303342 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.497154 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.497181 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:20.070856 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:20.070883 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.567820 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.567872 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.615050 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.615087 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.759721 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.759749 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:16:27.563442 2026] [:error] [pid 16037:tid 16045] [client 158.173.67.110:31261] [client 158.173.67.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "agDZi3zjLQfyYTkAdSSxKQAAAAQ"]
[Mon May 11 03:16:28.075801 2026] [:error] [pid 37030:tid 37052] [client 158.173.67.220:25983] [client 158.173.67.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "agDZjJrBzfXWwKkDkdbibQAAANQ"]
[Mon May 11 03:16:28.591179 2026] [:error] [pid 16136:tid 16152] [client 158.173.67.110:36883] [client 158.173.67.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "agDZjEOBGdmCMnPX0McrTgAAAI4"]
[Mon May 11 03:16:29.102275 2026] [:error] [pid 16037:tid 16049] [client 158.173.67.106:44419] [client 158.173.67.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "agDZjXzjLQfyYTkAdSSxTgAAAAg"]
[Mon May 11 03:26:32.326441 2026] [:error] [pid 37030:tid 37047] [client 34.73.138.8:34838] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.dev.local"] [unique_id "agDb6JrBzfXWwKkDkdbjMwAAAM8"]
[Mon May 11 03:26:32.525011 2026] [:error] [pid 37030:tid 37040] [client 34.73.138.8:34844] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.development.local"] [unique_id "agDb6JrBzfXWwKkDkdbjNAAAAMg"]
[Mon May 11 03:26:32.525177 2026] [:error] [pid 37030:tid 37053] [client 34.73.138.8:34858] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.dev"] [unique_id "agDb6JrBzfXWwKkDkdbjNQAAANU"]
[Mon May 11 03:26:32.548305 2026] [:error] [pid 16136:tid 16148] [client 34.73.138.8:34860] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.local"] [unique_id "agDb6EOBGdmCMnPX0MctIgAAAIo"]
[Mon May 11 03:26:32.793791 2026] [:error] [pid 37030:tid 37048] [client 34.73.138.8:34868] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/api/.env"] [unique_id "agDb6JrBzfXWwKkDkdbjNgAAANA"]
[Mon May 11 03:26:32.859790 2026] [:error] [pid 16136:tid 16162] [client 34.73.138.8:34876] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env.local"] [unique_id "agDb6EOBGdmCMnPX0MctIwAAAJg"]
[Mon May 11 03:26:33.040292 2026] [:error] [pid 54857:tid 54883] [client 34.73.138.8:34890] [client 34.73.138.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env"] [unique_id "agDb6cIMxCDAKjKxP7AAngAAAVM"]
[Mon May 11 03:31:50.944093 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:50.944121 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:53.034218 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:53.034278 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.554436 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.554464 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:17.232696 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:17.232722 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:30.995631 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:30.995659 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:32.863179 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:32.863216 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.488557 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.488597 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:07.366442 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:07.366470 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:50.256777 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:50.256806 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:52.170503 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:52.170533 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:54:38.879146 2026] [:error] [pid 65259:tid 65271] [client 34.105.155.76:36934] [client 34.105.155.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "agDifgPsXLnMa32ma5BE4gAAAAM"]
[Mon May 11 04:14:16.944746 2026] [:error] [pid 65259:tid 65286] [client 34.65.185.105:34908] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/admin/.env"] [unique_id "agDnGAPsXLnMa32ma5BGmgAAABI"]
[Mon May 11 04:14:17.241022 2026] [:error] [pid 65366:tid 65389] [client 34.65.185.105:34914] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.dev.local"] [unique_id "agDnGahVGdYzapDtv-HWvgAAANQ"]
[Mon May 11 04:14:17.288351 2026] [:error] [pid 65261:tid 65347] [client 34.65.185.105:34920] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.development.local"] [unique_id "agDnGZu_9uQJeFrcOssk5wAAAJg"]
[Mon May 11 04:14:17.325712 2026] [:error] [pid 65366:tid 65371] [client 34.65.185.105:34922] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/app/.env.local"] [unique_id "agDnGahVGdYzapDtv-HWvwAAAMM"]
[Mon May 11 04:14:17.478006 2026] [:error] [pid 65366:tid 65376] [client 34.65.185.105:34952] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.local"] [unique_id "agDnGahVGdYzapDtv-HWwAAAAMg"]
[Mon May 11 04:14:17.479104 2026] [:error] [pid 65261:tid 65336] [client 34.65.185.105:34938] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.docker"] [unique_id "agDnGZu_9uQJeFrcOssk6AAAAI0"]
[Mon May 11 04:14:17.487496 2026] [:error] [pid 65261:tid 65344] [client 34.65.185.105:34968] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.env.dev"] [unique_id "agDnGZu_9uQJeFrcOssk6QAAAJU"]
[Mon May 11 04:14:17.793578 2026] [:error] [pid 65261:tid 65340] [client 34.65.185.105:34980] [client 34.65.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/api/.env"] [unique_id "agDnGZu_9uQJeFrcOssk6gAAAJE"]
[Mon May 11 14:08:05.649315 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:05.649374 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:36.276093 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:36.276120 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 19:08:48.852624 2026] [:error] [pid 58616:tid 58656] [client 35.228.255.3:50660] [client 35.228.255.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "agG4wNnsbeF5ioCAecjlRAAAAMo"]
[Tue May 12 03:11:42.701927 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:42.701954 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.670948 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.670975 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:59.074742 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:59.074783 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:07.991413 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:07.991449 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.707702 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.707743 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.495937 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.495968 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.743871 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.743899 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.565469 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.565496 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.598913 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.598940 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.443824 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.443864 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 00:54:09.684822 2026] [autoindex:error] [pid 39956:tid 39972] [client 141.98.11.120:64145] AH01276: Cannot serve directory /home/end2endh/public_html/wp-admin/css/: No matching DirectoryIndex (index.html,index.htm,index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 00:54:15.563382 2026] [autoindex:error] [pid 40061:tid 40083] [client 141.98.11.120:51915] AH01276: Cannot serve directory /home/end2endh/public_html/.well-known/: No matching DirectoryIndex (index.html,index.htm,index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed May 13 00:54:39.261582 2026] [:error] [pid 39956:tid 39987] [client 141.98.11.120:64247] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/images/"] [unique_id "agNbT42K3wZDsNji3MweKQAAABY"], referer: binance.com
[Wed May 13 00:54:43.770567 2026] [:error] [pid 40061:tid 40070] [client 141.98.11.120:57004] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/files/"] [unique_id "agNbU7ycIKt8hxHMBYsbAAAAAMc"], referer: binance.com
[Wed May 13 00:54:49.253060 2026] [:error] [pid 21242:tid 21253] [client 141.98.11.120:58835] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.end2end.hostone.com.au"] [uri "/wp-admin/css/"] [unique_id "agNbWczeh8JWZob6PnI7IAAAAYc"], referer: binance.com
[Wed May 13 03:47:42.681040 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:42.681067 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.774689 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.774717 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.805848 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.805879 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:06.029385 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:06.029412 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.758606 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.758633 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.650473 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.650491 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.553449 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.553491 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.435099 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.435126 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:57.165622 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:57.165661 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:59.055282 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:59.055303 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:05.151568 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:05.151625 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:18.220847 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:18.220872 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:37.984714 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:37.984761 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.435678 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.435706 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:50.749156 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:50.749184 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.741340 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.741368 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.734540 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.734540 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:18.248812 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:18.248839 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:32.010020 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:32.010047 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:33.876502 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:33.876529 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:43.336814 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:43.336841 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:45.162076 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:45.162103 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.576853 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.576879 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.409708 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.409736 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:52.104111 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:52.104140 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:54.089759 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:54.089787 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.438933 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.438959 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.482208 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.482261 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:29.251446 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:29.251473 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:31.119793 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:31.119819 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:44.067433 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:44.067461 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:42.372231 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:42.372293 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:44.208510 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:44.208539 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:27.305833 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:27.305869 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:29.152430 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:29.152468 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 07:55:04.715919 2026] [:error] [pid 1190:tid 1253] [client 34.106.11.228:50618] [client 34.106.11.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "agZg2NqiXrD7hne4gFasBwAAAIE"]
[Fri May 15 08:43:38.373199 2026] [:error] [pid 50531:tid 50543] [client 8.230.118.248:42912] [client 8.230.118.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "agZsOh3WbFwE6voqGzrZgQAAAQo"]
[Fri May 15 12:42:01.358211 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:01.358274 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:05.120021 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:05.120048 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 01:59:28.894320 2026] [:error] [pid 59311:tid 59319] [client 158.173.67.139:39069] [client 158.173.67.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.67.139, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "agdfALGBV7OkryAk5AOZGwAAAoQ"]
[Sat May 16 01:59:29.053187 2026] [authz_core:error] [pid 59311:tid 59319] [client 158.173.67.139:39069] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Sat May 16 03:13:46.395384 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:46.395413 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:48.398939 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:48.398968 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:04.218454 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:04.218483 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:12.825094 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:12.825159 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.552569 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.552595 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:20.400358 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:20.400386 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.715191 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.715219 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.548822 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.548848 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.556946 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.556974 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:05.371406 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:05.371432 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:41.656143 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:41.656172 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.643535 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.643561 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:58.239622 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:58.239648 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:09.062960 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:09.062985 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.811859 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.811886 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.608368 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.608399 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:29.038362 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:29.038391 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.789590 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.789616 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.557006 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.557037 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:51.401714 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:51.401739 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:42.787325 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:42.787336 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.733927 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.733955 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.798464 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.798490 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.496226 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.496283 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:14.138817 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:14.138847 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:15.915120 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:15.915147 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:10.413953 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:10.413992 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:12.239182 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:12.239209 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:56.116149 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:56.116176 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:57.906742 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:57.906768 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:39.314596 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:39.314629 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.574882 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.574910 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:27.182546 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:27.182586 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.518580 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.518612 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:32.861232 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:32.861287 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.542708 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.542748 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.568431 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.568459 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.665161 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.665201 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.488039 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.488085 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:19.838472 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:19.838501 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 17:48:47.596531 2026] [:error] [pid 44087:tid 44103] [client 84.233.195.161:55647] [client 84.233.195.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "end2end.hostone.com.au"] [uri "/"] [unique_id "agrgf25HPHbH9GK7l6zqTwAAAc4"]
[Tue May 19 03:48:42.143516 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:42.143543 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:44.092468 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:44.092468 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.716392 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.716421 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:09.953184 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:09.953184 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.723200 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.723227 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.569903 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.569930 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.464929 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.464960 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:30.308182 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:30.308259 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:28.396610 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:28.396647 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:30.186871 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:30.186899 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:56.917729 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:56.917758 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:58.860609 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:58.860637 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:50.219586 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:50.219613 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:04.343148 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:04.343176 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:18.117321 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:18.117349 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:19.944188 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:19.944215 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.780010 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.780037 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.584401 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.584432 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:57.386825 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:57.386852 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:45.036039 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:45.036074 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:46.866308 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:46.866340 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.522209 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.522270 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:08.441155 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:08.441185 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:11.083311 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:11.083338 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.399608 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.399649 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:03.344452 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:03.344478 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:10.104774 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:10.104800 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:11.881698 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:11.881725 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:54.207896 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:54.207924 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:56.292862 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:56.292888 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:29.081918 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:29.081946 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.832621 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.832662 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 08:44:23.014518 2026] [:error] [pid 9189:tid 9230] [client 65.111.0.176:40021] [client 65.111.0.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.end2end.hostone.com.au"] [uri "/.env"] [unique_id "ag5VZ5vTDh1NbYizKVwpiQAAAgs"]
[Thu May 21 23:15:31.838288 2026] [:error] [pid 9189:tid 9233] [client 34.63.49.98:56913] [client 34.63.49.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ag8hk5vTDh1NbYizKVzUSgAAAg4"]
[Thu May 21 23:15:33.514100 2026] [:error] [pid 9189:tid 9239] [client 34.63.49.98:56913] [client 34.63.49.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.49.98, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "ag8hlZvTDh1NbYizKVzUTAAAAhQ"]
[Thu May 21 23:15:33.514518 2026] [authz_core:error] [pid 9189:tid 9239] [client 34.63.49.98:56913] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Thu May 21 23:15:35.769046 2026] [:error] [pid 9189:tid 9237] [client 34.63.49.98:56913] [client 34.63.49.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.49.98, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "ag8hl5vTDh1NbYizKVzUVgAAAhI"]
[Thu May 21 23:15:35.769493 2026] [authz_core:error] [pid 9189:tid 9237] [client 34.63.49.98:56913] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Fri May 22 03:45:53.991057 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:53.991086 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.489769 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.489794 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:12.896932 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:12.896961 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:26.291596 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:26.291621 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:32.233059 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:32.233099 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:34.012787 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:34.012814 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.430469 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.430497 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.630074 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.630104 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.407717 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.407746 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.635784 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.635814 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.395636 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.395664 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 06:06:35.811498 2026] [:error] [pid 15585:tid 15662] [client 20.195.182.185:1985] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ag-B6yKb-vB41AF-LC0_TwAAAI8"]
[Fri May 22 06:06:37.147882 2026] [:error] [pid 15584:tid 15638] [client 20.195.182.185:1799] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ag-B7d9Z_TVLbNEx52h4MAAAAFI"]
[Fri May 22 06:06:37.821140 2026] [:error] [pid 58782:tid 58808] [client 20.195.182.185:2001] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ag-B7YxsdTFafgO8vhSrdAAAARg"]
[Fri May 22 06:06:38.466946 2026] [:error] [pid 15585:tid 15647] [client 20.195.182.185:1823] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/about.php"] [unique_id "ag-B7iKb-vB41AF-LC0_WAAAAIA"]
[Fri May 22 06:06:39.118522 2026] [:error] [pid 15679:tid 15700] [client 20.195.182.185:1827] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ag-B7yh8tgGc38WJ-GxpPAAAANM"]
[Fri May 22 06:06:39.766727 2026] [:error] [pid 58782:tid 58788] [client 20.195.182.185:1794] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ag-B74xsdTFafgO8vhSrdgAAAQQ"]
[Fri May 22 06:06:40.437169 2026] [:error] [pid 15585:tid 15659] [client 20.195.182.185:1846] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ag-B8CKb-vB41AF-LC0_WgAAAIw"]
[Fri May 22 06:06:41.088990 2026] [:error] [pid 15584:tid 15622] [client 20.195.182.185:1851] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/222.php"] [unique_id "ag-B8d9Z_TVLbNEx52h4NwAAAEI"]
[Fri May 22 06:06:41.732005 2026] [:error] [pid 15584:tid 15639] [client 20.195.182.185:1991] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ag-B8d9Z_TVLbNEx52h4OAAAAFM"]
[Fri May 22 06:06:42.385584 2026] [:error] [pid 15584:tid 15631] [client 20.195.182.185:1989] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ag-B8t9Z_TVLbNEx52h4PAAAAEs"]
[Fri May 22 06:06:43.031176 2026] [:error] [pid 15583:tid 15591] [client 20.195.182.185:1819] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ag-B83naOncRcIm17YV2vQAAAAM"]
[Fri May 22 06:06:43.673458 2026] [:error] [pid 15679:tid 15698] [client 20.195.182.185:2002] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ag-B8yh8tgGc38WJ-GxpPQAAANE"]
[Fri May 22 06:06:44.347976 2026] [:error] [pid 15679:tid 15682] [client 20.195.182.185:2040] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-mail.php"] [unique_id "ag-B9Ch8tgGc38WJ-GxpPwAAAME"]
[Fri May 22 06:06:45.032799 2026] [:error] [pid 15584:tid 15629] [client 20.195.182.185:2041] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-mail.php"] [unique_id "ag-B9d9Z_TVLbNEx52h4PwAAAEk"]
[Fri May 22 06:06:45.737523 2026] [:error] [pid 15585:tid 15662] [client 20.195.182.185:1848] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-mail.php"] [unique_id "ag-B9SKb-vB41AF-LC0_XAAAAI8"]
[Fri May 22 06:06:46.477810 2026] [:error] [pid 15583:tid 15599] [client 20.195.182.185:2012] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-mail.php"] [unique_id "ag-B9nnaOncRcIm17YV2vwAAAAs"]
[Fri May 22 06:06:47.166631 2026] [:error] [pid 15585:tid 15669] [client 20.195.182.185:1997] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ag-B9yKb-vB41AF-LC0_YAAAAJY"]
[Fri May 22 06:06:47.876916 2026] [:error] [pid 58782:tid 58801] [client 20.195.182.185:1998] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ag-B94xsdTFafgO8vhSreAAAARE"]
[Fri May 22 06:06:48.537977 2026] [:error] [pid 15679:tid 15683] [client 20.195.182.185:1804] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ag-B-Ch8tgGc38WJ-GxpRgAAAMI"]
[Fri May 22 06:06:49.191749 2026] [:error] [pid 15583:tid 15608] [client 20.195.182.185:1995] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ag-B-XnaOncRcIm17YV2wAAAABQ"]
[Fri May 22 06:06:49.868554 2026] [:error] [pid 15583:tid 15602] [client 20.195.182.185:2003] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ag-B-XnaOncRcIm17YV2wwAAAA4"]
[Fri May 22 06:06:50.521984 2026] [:error] [pid 15585:tid 15647] [client 20.195.182.185:2007] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ag-B-iKb-vB41AF-LC0_ZQAAAIA"]
[Fri May 22 06:06:51.182904 2026] [:error] [pid 58813:tid 58835] [client 20.195.182.185:2032] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ag-B-56yyKWDKULhxJ36QQAAAVM"]
[Fri May 22 06:06:51.845596 2026] [:error] [pid 15585:tid 15655] [client 20.195.182.185:1849] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/adminfuns.php"] [unique_id "ag-B-yKb-vB41AF-LC0_aAAAAIg"]
[Fri May 22 06:06:52.499193 2026] [:error] [pid 15584:tid 15621] [client 20.195.182.185:1809] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/php8.php"] [unique_id "ag-B_N9Z_TVLbNEx52h4RgAAAEE"]
[Fri May 22 06:06:53.229545 2026] [:error] [pid 15584:tid 15624] [client 20.195.182.185:1990] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/php8.php"] [unique_id "ag-B_d9Z_TVLbNEx52h4SQAAAEQ"]
[Fri May 22 06:06:53.913365 2026] [:error] [pid 15583:tid 15596] [client 20.195.182.185:2015] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/php8.php"] [unique_id "ag-B_XnaOncRcIm17YV2xwAAAAg"]
[Fri May 22 06:06:54.570662 2026] [:error] [pid 58813:tid 58832] [client 20.195.182.185:1862] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/php8.php"] [unique_id "ag-B_p6yyKWDKULhxJ36QwAAAVA"]
[Fri May 22 06:06:55.215211 2026] [:error] [pid 58813:tid 58825] [client 20.195.182.185:1815] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ag-B_56yyKWDKULhxJ36RgAAAUk"]
[Fri May 22 06:06:55.862924 2026] [:error] [pid 15583:tid 15601] [client 20.195.182.185:1955] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ag-B_3naOncRcIm17YV2yQAAAA0"]
[Fri May 22 06:06:56.535867 2026] [:error] [pid 15584:tid 15640] [client 20.195.182.185:1792] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ag-CAN9Z_TVLbNEx52h4TwAAAFQ"]
[Fri May 22 06:06:57.206027 2026] [:error] [pid 15585:tid 15649] [client 20.195.182.185:1986] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ioxi-o.php"] [unique_id "ag-CASKb-vB41AF-LC0_agAAAII"]
[Fri May 22 06:06:57.866585 2026] [:error] [pid 15584:tid 15635] [client 20.195.182.185:1992] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ag-CAd9Z_TVLbNEx52h4UQAAAE8"]
[Fri May 22 06:06:58.519358 2026] [:error] [pid 15583:tid 15588] [client 20.195.182.185:1853] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ag-CAnnaOncRcIm17YV2zQAAAAA"]
[Fri May 22 06:06:59.170444 2026] [:error] [pid 58813:tid 58833] [client 20.195.182.185:1993] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ag-CA56yyKWDKULhxJ36SwAAAVE"]
[Fri May 22 06:06:59.821656 2026] [:error] [pid 15585:tid 15670] [client 20.195.182.185:1813] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ag-CAyKb-vB41AF-LC0_cAAAAJc"]
[Fri May 22 06:07:00.478119 2026] [:error] [pid 15585:tid 15671] [client 20.195.182.185:1852] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ag-CBCKb-vB41AF-LC0_cgAAAJg"]
[Fri May 22 06:07:01.144643 2026] [:error] [pid 15585:tid 15652] [client 20.195.182.185:1839] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ag-CBSKb-vB41AF-LC0_cwAAAIU"]
[Fri May 22 06:07:01.792834 2026] [:error] [pid 15585:tid 15664] [client 20.195.182.185:2031] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ag-CBSKb-vB41AF-LC0_dgAAAJE"]
[Fri May 22 06:07:02.446750 2026] [:error] [pid 15583:tid 15600] [client 20.195.182.185:1956] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sid3.php"] [unique_id "ag-CBnnaOncRcIm17YV2zgAAAAw"]
[Fri May 22 06:07:03.110309 2026] [:error] [pid 15585:tid 15655] [client 20.195.182.185:1996] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ag-CByKb-vB41AF-LC0_ewAAAIg"]
[Fri May 22 06:07:03.761496 2026] [:error] [pid 58813:tid 58837] [client 20.195.182.185:1958] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ag-CB56yyKWDKULhxJ36TwAAAVU"]
[Fri May 22 06:07:04.417756 2026] [:error] [pid 15583:tid 15594] [client 20.195.182.185:1818] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ag-CCHnaOncRcIm17YV2zwAAAAY"]
[Fri May 22 06:07:05.090781 2026] [:error] [pid 58782:tid 58796] [client 20.195.182.185:1817] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/166.php"] [unique_id "ag-CCYxsdTFafgO8vhSrfQAAAQw"]
[Fri May 22 06:07:05.742396 2026] [:error] [pid 15583:tid 15608] [client 20.195.182.185:1833] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ag-CCXnaOncRcIm17YV20QAAABQ"]
[Fri May 22 06:07:06.394765 2026] [:error] [pid 15679:tid 15687] [client 20.195.182.185:1822] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ag-CCih8tgGc38WJ-GxpUAAAAMY"]
[Fri May 22 06:07:07.088123 2026] [:error] [pid 15583:tid 15611] [client 20.195.182.185:1925] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ag-CC3naOncRcIm17YV20wAAABc"]
[Fri May 22 06:07:07.792905 2026] [:error] [pid 15583:tid 15592] [client 20.195.182.185:1994] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ag-CC3naOncRcIm17YV21gAAAAQ"]
[Fri May 22 06:07:08.437652 2026] [:error] [pid 58782:tid 58786] [client 20.195.182.185:1845] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag-CDIxsdTFafgO8vhSrfgAAAQI"]
[Fri May 22 06:07:09.129075 2026] [:error] [pid 15679:tid 15701] [client 20.195.182.185:2038] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag-CDSh8tgGc38WJ-GxpVAAAANQ"]
[Fri May 22 06:07:09.774993 2026] [:error] [pid 15585:tid 15671] [client 20.195.182.185:2021] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag-CDSKb-vB41AF-LC0_gAAAAJg"]
[Fri May 22 06:07:10.453932 2026] [:error] [pid 15583:tid 15601] [client 20.195.182.185:2004] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/phpinfo/info.php"] [unique_id "ag-CDnnaOncRcIm17YV22gAAAA0"]
[Fri May 22 06:07:11.116020 2026] [:error] [pid 58813:tid 58832] [client 20.195.182.185:1933] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ag-CD56yyKWDKULhxJ36VgAAAVA"]
[Fri May 22 06:07:11.763616 2026] [:error] [pid 15585:tid 15657] [client 20.195.182.185:1843] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ag-CDyKb-vB41AF-LC0_hAAAAIo"]
[Fri May 22 06:07:12.407737 2026] [:error] [pid 58782:tid 58787] [client 20.195.182.185:1793] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ag-CEIxsdTFafgO8vhSrggAAAQM"]
[Fri May 22 06:07:13.053337 2026] [:error] [pid 58813:tid 58839] [client 20.195.182.185:1838] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ag-CEZ6yyKWDKULhxJ36WgAAAVc"]
[Fri May 22 06:07:13.701408 2026] [:error] [pid 15679:tid 15700] [client 20.195.182.185:2006] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/CDX2.php"] [unique_id "ag-CESh8tgGc38WJ-GxpWQAAANM"]
[Fri May 22 06:07:14.366576 2026] [:error] [pid 15679:tid 15698] [client 20.195.182.185:1806] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/CDX2.php"] [unique_id "ag-CEih8tgGc38WJ-GxpWgAAANE"]
[Fri May 22 06:07:15.030442 2026] [:error] [pid 58813:tid 58833] [client 20.195.182.185:1855] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/CDX2.php"] [unique_id "ag-CE56yyKWDKULhxJ36WwAAAVE"]
[Fri May 22 06:07:15.699741 2026] [:error] [pid 15585:tid 15666] [client 20.195.182.185:2034] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/CDX2.php"] [unique_id "ag-CEyKb-vB41AF-LC0_lwAAAJM"]
[Fri May 22 06:07:16.352090 2026] [:error] [pid 15585:tid 15649] [client 20.195.182.185:1820] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/profile.php"] [unique_id "ag-CFCKb-vB41AF-LC0_mwAAAII"]
[Fri May 22 06:07:17.007527 2026] [:error] [pid 15584:tid 15630] [client 20.195.182.185:2029] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/profile.php"] [unique_id "ag-CFd9Z_TVLbNEx52h4YwAAAEo"]
[Fri May 22 06:07:17.672354 2026] [:error] [pid 15679:tid 15701] [client 20.195.182.185:1951] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/profile.php"] [unique_id "ag-CFSh8tgGc38WJ-GxpXgAAANQ"]
[Fri May 22 06:07:18.340390 2026] [:error] [pid 58782:tid 58799] [client 20.195.182.185:1832] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/profile.php"] [unique_id "ag-CFoxsdTFafgO8vhSriAAAAQ8"]
[Fri May 22 06:07:18.989862 2026] [:error] [pid 58813:tid 58821] [client 20.195.182.185:2010] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "ag-CFp6yyKWDKULhxJ36YgAAAUU"]
[Fri May 22 06:07:19.638739 2026] [:error] [pid 58813:tid 58829] [client 20.195.182.185:2045] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "ag-CF56yyKWDKULhxJ36ZAAAAU0"]
[Fri May 22 06:07:20.285741 2026] [:error] [pid 58813:tid 58830] [client 20.195.182.185:1837] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "ag-CGJ6yyKWDKULhxJ36ZgAAAU4"]
[Fri May 22 06:07:20.932265 2026] [:error] [pid 15584:tid 15637] [client 20.195.182.185:1803] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ws80.php"] [unique_id "ag-CGN9Z_TVLbNEx52h4ZgAAAFE"]
[Fri May 22 06:07:21.578372 2026] [:error] [pid 15583:tid 15588] [client 20.195.182.185:2009] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "ag-CGXnaOncRcIm17YV26AAAAAA"]
[Fri May 22 06:07:22.224369 2026] [:error] [pid 15583:tid 15608] [client 20.195.182.185:1828] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "ag-CGnnaOncRcIm17YV26QAAABQ"]
[Fri May 22 06:07:22.881889 2026] [:error] [pid 15583:tid 15594] [client 20.195.182.185:1826] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "ag-CGnnaOncRcIm17YV27AAAAAY"]
[Fri May 22 06:07:23.523925 2026] [:error] [pid 15679:tid 15682] [client 20.195.182.185:2000] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a4.php"] [unique_id "ag-CGyh8tgGc38WJ-GxpZAAAAME"]
[Fri May 22 06:07:24.177465 2026] [:error] [pid 58813:tid 58827] [client 20.195.182.185:2014] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/buy.php"] [unique_id "ag-CHJ6yyKWDKULhxJ36awAAAUs"]
[Fri May 22 06:07:24.827921 2026] [:error] [pid 15584:tid 15634] [client 20.195.182.185:1835] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/buy.php"] [unique_id "ag-CHN9Z_TVLbNEx52h4bAAAAE4"]
[Fri May 22 06:07:25.472020 2026] [:error] [pid 15584:tid 15632] [client 20.195.182.185:1797] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/buy.php"] [unique_id "ag-CHd9Z_TVLbNEx52h4bQAAAEw"]
[Fri May 22 06:07:26.130571 2026] [:error] [pid 58782:tid 58784] [client 20.195.182.185:2013] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/buy.php"] [unique_id "ag-CHoxsdTFafgO8vhSrmAAAAQA"]
[Fri May 22 06:07:26.780968 2026] [:error] [pid 15679:tid 15694] [client 20.195.182.185:1816] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "ag-CHih8tgGc38WJ-GxpbgAAAM0"]
[Fri May 22 06:07:27.443016 2026] [:error] [pid 15679:tid 15689] [client 20.195.182.185:2011] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "ag-CHyh8tgGc38WJ-GxpcgAAAMg"]
[Fri May 22 06:07:28.086888 2026] [:error] [pid 15679:tid 15704] [client 20.195.182.185:1936] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "ag-CICh8tgGc38WJ-GxpdAAAANc"]
[Fri May 22 06:07:28.734843 2026] [:error] [pid 15583:tid 15612] [client 20.195.182.185:2020] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/core.php"] [unique_id "ag-CIHnaOncRcIm17YV29AAAABg"]
[Fri May 22 06:07:29.381352 2026] [:error] [pid 58813:tid 58830] [client 20.195.182.185:2023] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lock360.php"] [unique_id "ag-CIZ6yyKWDKULhxJ36bwAAAU4"]
[Fri May 22 06:07:30.022765 2026] [:error] [pid 58813:tid 58825] [client 20.195.182.185:1987] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lock360.php"] [unique_id "ag-CIp6yyKWDKULhxJ36dAAAAUk"]
[Fri May 22 06:07:30.665489 2026] [:error] [pid 58782:tid 58788] [client 20.195.182.185:1988] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lock360.php"] [unique_id "ag-CIoxsdTFafgO8vhSrmwAAAQQ"]
[Fri May 22 06:07:31.311155 2026] [:error] [pid 15584:tid 15622] [client 20.195.182.185:2044] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lock360.php"] [unique_id "ag-CI99Z_TVLbNEx52h4cAAAAEI"]
[Fri May 22 06:07:31.969070 2026] [:error] [pid 15584:tid 15638] [client 20.195.182.185:2026] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bc.php"] [unique_id "ag-CI99Z_TVLbNEx52h4cQAAAFI"]
[Fri May 22 06:07:32.613360 2026] [:error] [pid 58813:tid 58840] [client 20.195.182.185:1847] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bc.php"] [unique_id "ag-CJJ6yyKWDKULhxJ36dwAAAVg"]
[Fri May 22 06:08:00.603053 2026] [:error] [pid 15585:tid 15651] [client 20.195.182.185:1974] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "ag-CQCKb-vB41AF-LC0_3QAAAIQ"]
[Fri May 22 06:08:01.245814 2026] [:error] [pid 15679:tid 15693] [client 20.195.182.185:1830] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "ag-CQSh8tgGc38WJ-GxpnAAAAMw"]
[Fri May 22 06:08:01.901670 2026] [:error] [pid 15584:tid 15640] [client 20.195.182.185:1808] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "ag-CQd9Z_TVLbNEx52h4gAAAAFQ"]
[Fri May 22 06:08:02.550172 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:2027] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a7.php"] [unique_id "ag-CQiKb-vB41AF-LC0_4AAAAI4"]
[Fri May 22 06:08:03.194542 2026] [:error] [pid 15585:tid 15658] [client 20.195.182.185:1850] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag-CQyKb-vB41AF-LC0_4QAAAIs"]
[Fri May 22 06:08:03.850142 2026] [:error] [pid 58782:tid 58790] [client 20.195.182.185:1836] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag-CQ4xsdTFafgO8vhSrogAAAQY"]
[Fri May 22 06:08:04.500191 2026] [:error] [pid 15585:tid 15668] [client 20.195.182.185:1984] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag-CRCKb-vB41AF-LC0_4gAAAJU"]
[Fri May 22 06:08:05.146702 2026] [:error] [pid 15583:tid 15609] [client 20.195.182.185:1942] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/BDKR28WP.php"] [unique_id "ag-CRXnaOncRcIm17YV3GAAAABU"]
[Fri May 22 06:08:05.791334 2026] [:error] [pid 15585:tid 15659] [client 20.195.182.185:1970] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ag-CRSKb-vB41AF-LC0_5gAAAIw"]
[Fri May 22 06:08:06.459675 2026] [:error] [pid 58782:tid 58792] [client 20.195.182.185:1844] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ag-CRoxsdTFafgO8vhSrpAAAAQg"]
[Fri May 22 06:08:07.105568 2026] [:error] [pid 58782:tid 58806] [client 20.195.182.185:2028] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ag-CR4xsdTFafgO8vhSrpgAAARY"]
[Fri May 22 06:08:07.771315 2026] [:error] [pid 15583:tid 15611] [client 20.195.182.185:1927] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ag-CR3naOncRcIm17YV3HwAAABc"]
[Fri May 22 06:08:08.413521 2026] [:error] [pid 15679:tid 15695] [client 20.195.182.185:2039] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ag-CSCh8tgGc38WJ-GxpnQAAAM4"]
[Fri May 22 06:08:09.057366 2026] [:error] [pid 15679:tid 15688] [client 20.195.182.185:2035] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ag-CSSh8tgGc38WJ-GxpoAAAAMc"]
[Fri May 22 06:08:09.700988 2026] [:error] [pid 58813:tid 58818] [client 20.195.182.185:1953] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ag-CSZ6yyKWDKULhxJ36iwAAAUI"]
[Fri May 22 06:08:10.362820 2026] [:error] [pid 15585:tid 15649] [client 20.195.182.185:1867] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ag-CSiKb-vB41AF-LC0_6gAAAII"]
[Fri May 22 06:08:11.007056 2026] [:error] [pid 15679:tid 15700] [client 20.195.182.185:2017] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ag-CSyh8tgGc38WJ-GxppgAAANM"]
[Fri May 22 06:08:11.654409 2026] [:error] [pid 15583:tid 15602] [client 20.195.182.185:1829] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ag-CS3naOncRcIm17YV3JgAAAA4"]
[Fri May 22 06:08:12.294955 2026] [:error] [pid 15584:tid 15623] [client 20.195.182.185:1841] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ag-CTN9Z_TVLbNEx52h4hQAAAEM"]
[Fri May 22 06:08:12.946898 2026] [:error] [pid 58782:tid 58805] [client 20.195.182.185:1824] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xff.php"] [unique_id "ag-CTIxsdTFafgO8vhSrqQAAARU"]
[Fri May 22 06:08:13.596186 2026] [:error] [pid 15585:tid 15659] [client 20.195.182.185:2030] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ag-CTSKb-vB41AF-LC0_7gAAAIw"]
[Fri May 22 06:08:14.237570 2026] [:error] [pid 15585:tid 15657] [client 20.195.182.185:2005] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ag-CTiKb-vB41AF-LC0_7wAAAIo"]
[Fri May 22 06:08:14.885737 2026] [:error] [pid 15584:tid 15627] [client 20.195.182.185:1795] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ag-CTt9Z_TVLbNEx52h4igAAAEc"]
[Fri May 22 06:08:15.536437 2026] [:error] [pid 58782:tid 58801] [client 20.195.182.185:1920] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ag-CT4xsdTFafgO8vhSrqgAAARE"]
[Fri May 22 06:08:16.185340 2026] [:error] [pid 15679:tid 15682] [client 20.195.182.185:1831] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son.php"] [unique_id "ag-CUCh8tgGc38WJ-GxprwAAAME"]
[Fri May 22 06:08:16.832830 2026] [:error] [pid 15584:tid 15630] [client 20.195.182.185:1812] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son.php"] [unique_id "ag-CUN9Z_TVLbNEx52h4lQAAAEo"]
[Fri May 22 06:08:17.500160 2026] [:error] [pid 58782:tid 58808] [client 20.195.182.185:1940] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son.php"] [unique_id "ag-CUYxsdTFafgO8vhSrrQAAARg"]
[Fri May 22 06:08:18.142548 2026] [:error] [pid 15583:tid 15609] [client 20.195.182.185:1941] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son.php"] [unique_id "ag-CUnnaOncRcIm17YV3MwAAABU"]
[Fri May 22 06:08:18.791519 2026] [:error] [pid 15583:tid 15589] [client 20.195.182.185:1854] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ag-CUnnaOncRcIm17YV3NQAAAAE"]
[Fri May 22 06:08:19.436873 2026] [:error] [pid 15679:tid 15703] [client 20.195.182.185:1807] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ag-CUyh8tgGc38WJ-GxpugAAANY"]
[Fri May 22 06:08:20.086934 2026] [:error] [pid 15679:tid 15681] [client 20.195.182.185:1945] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ag-CVCh8tgGc38WJ-GxpvAAAAMA"]
[Fri May 22 06:08:20.739203 2026] [:error] [pid 15679:tid 15700] [client 20.195.182.185:1798] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ag-CVCh8tgGc38WJ-GxpvwAAANM"]
[Fri May 22 06:08:21.387314 2026] [:error] [pid 15583:tid 15599] [client 20.195.182.185:1982] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ag-CVXnaOncRcIm17YV3OgAAAAs"]
[Fri May 22 06:08:22.066295 2026] [:error] [pid 15583:tid 15603] [client 20.195.182.185:1802] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ag-CVnnaOncRcIm17YV3PAAAAA8"]
[Fri May 22 06:08:22.715561 2026] [:error] [pid 15585:tid 15663] [client 20.195.182.185:2046] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ag-CViKb-vB41AF-LC0_9AAAAJA"]
[Fri May 22 06:08:23.360639 2026] [:error] [pid 15583:tid 15607] [client 20.195.182.185:1959] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ag-CV3naOncRcIm17YV3QAAAABM"]
[Fri May 22 06:08:24.007583 2026] [:error] [pid 58813:tid 58817] [client 20.195.182.185:1842] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "ag-CWJ6yyKWDKULhxJ36ngAAAUE"]
[Fri May 22 06:08:24.652430 2026] [:error] [pid 15679:tid 15695] [client 20.195.182.185:1960] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "ag-CWCh8tgGc38WJ-GxpxAAAAM4"]
[Fri May 22 06:08:25.293727 2026] [:error] [pid 15679:tid 15691] [client 20.195.182.185:1890] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "ag-CWSh8tgGc38WJ-GxpxQAAAMo"]
[Fri May 22 06:08:25.947940 2026] [:error] [pid 15583:tid 15591] [client 20.195.182.185:1961] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xper1.php"] [unique_id "ag-CWXnaOncRcIm17YV3QwAAAAM"]
[Fri May 22 06:08:26.607462 2026] [:error] [pid 15583:tid 15604] [client 20.195.182.185:1871] [client 20.195.182.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "end2end.hostone.com.au"] [uri "/tiny.php"] [unique_id "ag-CWnnaOncRcIm17YV3RgAAABA"]
[Fri May 22 06:08:27.262828 2026] [:error] [pid 15585:tid 15650] [client 20.195.182.185:2008] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "ag-CWyKb-vB41AF-LC0_-QAAAIM"]
[Fri May 22 06:08:27.910134 2026] [:error] [pid 15585:tid 15656] [client 20.195.182.185:1857] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "ag-CWyKb-vB41AF-LC0_-gAAAIk"]
[Fri May 22 06:08:28.571650 2026] [:error] [pid 15585:tid 15657] [client 20.195.182.185:1983] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "ag-CXCKb-vB41AF-LC0_-wAAAIo"]
[Fri May 22 06:08:29.220073 2026] [:error] [pid 58782:tid 58791] [client 20.195.182.185:1952] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/s1.php"] [unique_id "ag-CXYxsdTFafgO8vhSrsQAAAQc"]
[Fri May 22 06:08:29.874629 2026] [:error] [pid 58813:tid 58833] [client 20.195.182.185:1825] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/de.php"] [unique_id "ag-CXZ6yyKWDKULhxJ36ogAAAVE"]
[Fri May 22 06:08:30.534127 2026] [:error] [pid 15585:tid 15652] [client 20.195.182.185:2024] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/de.php"] [unique_id "ag-CXiKb-vB41AF-LC0__gAAAIU"]
[Fri May 22 06:08:31.189202 2026] [:error] [pid 15585:tid 15671] [client 20.195.182.185:1345] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/de.php"] [unique_id "ag-CXyKb-vB41AF-LC1AAgAAAJg"]
[Fri May 22 06:08:31.853164 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:2019] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/de.php"] [unique_id "ag-CXyKb-vB41AF-LC1AAwAAAI4"]
[Fri May 22 06:08:32.495521 2026] [:error] [pid 15585:tid 15647] [client 20.195.182.185:1923] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1a.php"] [unique_id "ag-CYCKb-vB41AF-LC1ABgAAAIA"]
[Fri May 22 06:08:33.143683 2026] [:error] [pid 15583:tid 15612] [client 20.195.182.185:2022] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1a.php"] [unique_id "ag-CYXnaOncRcIm17YV3TQAAABg"]
[Fri May 22 06:08:33.788925 2026] [:error] [pid 15585:tid 15657] [client 20.195.182.185:1863] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1a.php"] [unique_id "ag-CYSKb-vB41AF-LC1ACQAAAIo"]
[Fri May 22 06:08:34.436026 2026] [:error] [pid 15585:tid 15653] [client 20.195.182.185:1963] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1a.php"] [unique_id "ag-CYiKb-vB41AF-LC1ADgAAAIY"]
[Fri May 22 06:08:35.081921 2026] [:error] [pid 15585:tid 15647] [client 20.195.182.185:1934] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ag-CYyKb-vB41AF-LC1AEgAAAIA"]
[Fri May 22 06:08:35.728225 2026] [:error] [pid 15679:tid 15694] [client 20.195.182.185:1967] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ag-CYyh8tgGc38WJ-GxpygAAAM0"]
[Fri May 22 06:08:36.376012 2026] [:error] [pid 15584:tid 15634] [client 20.195.182.185:1935] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ag-CZN9Z_TVLbNEx52h4nAAAAE4"]
[Fri May 22 06:08:37.029822 2026] [:error] [pid 58813:tid 58819] [client 20.195.182.185:1950] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ag-CZZ6yyKWDKULhxJ36pQAAAUM"]
[Fri May 22 06:08:37.704147 2026] [:error] [pid 15584:tid 15620] [client 20.195.182.185:1965] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ag-CZd9Z_TVLbNEx52h4ngAAAEA"]
[Fri May 22 06:08:38.354593 2026] [:error] [pid 58813:tid 58832] [client 20.195.182.185:1939] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ag-CZp6yyKWDKULhxJ36pwAAAVA"]
[Fri May 22 06:08:39.011120 2026] [:error] [pid 15584:tid 15636] [client 20.195.182.185:2018] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ag-CZ99Z_TVLbNEx52h4nwAAAFA"]
[Fri May 22 06:08:39.662123 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:1931] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ag-CZyKb-vB41AF-LC1AFgAAAI4"]
[Fri May 22 06:08:40.303207 2026] [:error] [pid 15584:tid 15622] [client 20.195.182.185:1930] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/man.php"] [unique_id "ag-CaN9Z_TVLbNEx52h4oQAAAEI"]
[Fri May 22 06:08:40.966514 2026] [:error] [pid 15585:tid 15670] [client 20.195.182.185:1886] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/man.php"] [unique_id "ag-CaCKb-vB41AF-LC1AGAAAAJc"]
[Fri May 22 06:08:41.626714 2026] [:error] [pid 15585:tid 15669] [client 20.195.182.185:1999] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/man.php"] [unique_id "ag-CaSKb-vB41AF-LC1AGQAAAJY"]
[Fri May 22 06:08:42.270061 2026] [:error] [pid 15583:tid 15607] [client 20.195.182.185:1977] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/man.php"] [unique_id "ag-CannaOncRcIm17YV3WQAAABM"]
[Fri May 22 06:08:42.912311 2026] [:error] [pid 58813:tid 58839] [client 20.195.182.185:1971] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ag-Cap6yyKWDKULhxJ36qAAAAVc"]
[Fri May 22 06:08:43.554787 2026] [:error] [pid 15679:tid 15696] [client 20.195.182.185:1814] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ag-Cayh8tgGc38WJ-GxpzwAAAM8"]
[Fri May 22 06:08:44.229138 2026] [:error] [pid 15585:tid 15659] [client 20.195.182.185:1873] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ag-CbCKb-vB41AF-LC1AHgAAAIw"]
[Fri May 22 06:08:44.875079 2026] [:error] [pid 15583:tid 15605] [client 20.195.182.185:1954] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ag-CbHnaOncRcIm17YV3XAAAABE"]
[Fri May 22 06:08:45.524919 2026] [:error] [pid 15583:tid 15609] [client 20.195.182.185:1922] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ag-CbXnaOncRcIm17YV3XQAAABU"]
[Fri May 22 06:08:46.168070 2026] [:error] [pid 58813:tid 58836] [client 20.195.182.185:1928] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ag-Cbp6yyKWDKULhxJ36qgAAAVQ"]
[Fri May 22 06:08:46.811764 2026] [:error] [pid 15583:tid 15601] [client 20.195.182.185:1938] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ag-CbnnaOncRcIm17YV3XwAAAA0"]
[Fri May 22 06:08:47.456012 2026] [:error] [pid 15585:tid 15649] [client 20.195.182.185:1858] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ag-CbyKb-vB41AF-LC1AIgAAAII"]
[Fri May 22 06:08:48.101554 2026] [:error] [pid 15583:tid 15598] [client 20.195.182.185:1976] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "ag-CcHnaOncRcIm17YV3YgAAAAo"]
[Fri May 22 06:08:48.744997 2026] [:error] [pid 15583:tid 15600] [client 20.195.182.185:1874] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "ag-CcHnaOncRcIm17YV3ZAAAAAw"]
[Fri May 22 06:08:49.399701 2026] [:error] [pid 15679:tid 15685] [client 20.195.182.185:1973] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "ag-CcSh8tgGc38WJ-Gxp0gAAAMQ"]
[Fri May 22 06:08:50.051121 2026] [:error] [pid 58813:tid 58824] [client 20.195.182.185:1932] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pp.php"] [unique_id "ag-Ccp6yyKWDKULhxJ36qwAAAUg"]
[Fri May 22 06:08:50.705141 2026] [:error] [pid 15584:tid 15642] [client 20.195.182.185:1917] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ag-Cct9Z_TVLbNEx52h4ogAAAFY"]
[Fri May 22 06:08:51.345906 2026] [:error] [pid 15584:tid 15627] [client 20.195.182.185:1929] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ag-Cc99Z_TVLbNEx52h4owAAAEc"]
[Fri May 22 06:08:51.996043 2026] [:error] [pid 15585:tid 15652] [client 20.195.182.185:1957] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ag-CcyKb-vB41AF-LC1AJgAAAIU"]
[Fri May 22 06:08:52.649848 2026] [:error] [pid 15583:tid 15588] [client 20.195.182.185:2036] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ag-CdHnaOncRcIm17YV3aQAAAAA"]
[Fri May 22 06:08:53.293189 2026] [:error] [pid 15585:tid 15650] [client 20.195.182.185:2047] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ag-CdSKb-vB41AF-LC1AKwAAAIM"]
[Fri May 22 06:08:53.954015 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:1860] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ag-CdSKb-vB41AF-LC1ALAAAAI4"]
[Fri May 22 06:08:54.634797 2026] [:error] [pid 15585:tid 15664] [client 20.195.182.185:1946] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ag-CdiKb-vB41AF-LC1ALQAAAJE"]
[Fri May 22 06:08:55.275881 2026] [:error] [pid 15585:tid 15649] [client 20.195.182.185:1811] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ag-CdyKb-vB41AF-LC1ALwAAAII"]
[Fri May 22 06:08:55.915641 2026] [:error] [pid 15679:tid 15699] [client 20.195.182.185:1962] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ag-Cdyh8tgGc38WJ-Gxp0wAAANI"]
[Fri May 22 06:08:56.572789 2026] [:error] [pid 15679:tid 15684] [client 20.195.182.185:1834] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ag-CeCh8tgGc38WJ-Gxp1QAAAMM"]
[Fri May 22 06:08:57.228161 2026] [:error] [pid 15585:tid 15654] [client 20.195.182.185:2044] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ag-CeSKb-vB41AF-LC1AMwAAAIc"]
[Fri May 22 06:08:57.885871 2026] [:error] [pid 15585:tid 15665] [client 20.195.182.185:1898] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/acp.php"] [unique_id "ag-CeSKb-vB41AF-LC1ANQAAAJI"]
[Fri May 22 06:09:25.618926 2026] [:error] [pid 15679:tid 15698] [client 20.195.182.185:1894] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "ag-ClSh8tgGc38WJ-GxqGQAAANE"]
[Fri May 22 06:09:26.268105 2026] [:error] [pid 58813:tid 58824] [client 20.195.182.185:1879] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "ag-Clp6yyKWDKULhxJ36wAAAAUg"]
[Fri May 22 06:09:26.916314 2026] [:error] [pid 15679:tid 15687] [client 20.195.182.185:1882] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "ag-Clih8tgGc38WJ-GxqHQAAAMY"]
[Fri May 22 06:09:27.563267 2026] [:error] [pid 15583:tid 15593] [client 20.195.182.185:1981] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/son1.php"] [unique_id "ag-Cl3naOncRcIm17YV3nAAAAAU"]
[Fri May 22 06:09:28.228684 2026] [:error] [pid 58782:tid 58789] [client 20.195.182.185:2033] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ag-CmIxsdTFafgO8vhSrwQAAAQU"]
[Fri May 22 06:09:28.877195 2026] [:error] [pid 58813:tid 58833] [client 20.195.182.185:1801] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ag-CmJ6yyKWDKULhxJ36wwAAAVE"]
[Fri May 22 06:09:29.525752 2026] [:error] [pid 15585:tid 15667] [client 20.195.182.185:1903] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ag-CmSKb-vB41AF-LC1AagAAAJQ"]
[Fri May 22 06:09:30.166981 2026] [:error] [pid 15679:tid 15692] [client 20.195.182.185:2037] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ag-Cmih8tgGc38WJ-GxqIAAAAMs"]
[Fri May 22 06:09:30.819589 2026] [:error] [pid 15679:tid 15705] [client 20.195.182.185:1949] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ag-Cmih8tgGc38WJ-GxqIgAAANg"]
[Fri May 22 06:09:31.484034 2026] [:error] [pid 15679:tid 15694] [client 20.195.182.185:1986] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ag-Cmyh8tgGc38WJ-GxqJQAAAM0"]
[Fri May 22 06:09:32.128588 2026] [:error] [pid 15679:tid 15686] [client 20.195.182.185:1353] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ag-CnCh8tgGc38WJ-GxqKQAAAMU"]
[Fri May 22 06:09:32.786710 2026] [:error] [pid 15583:tid 15610] [client 20.195.182.185:1969] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ag-CnHnaOncRcIm17YV3pAAAABY"]
[Fri May 22 06:09:33.461075 2026] [:error] [pid 58813:tid 58830] [client 20.195.182.185:1892] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ag-CnZ6yyKWDKULhxJ36xQAAAU4"]
[Fri May 22 06:09:34.108183 2026] [:error] [pid 15584:tid 15631] [client 20.195.182.185:1888] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ag-Cnt9Z_TVLbNEx52h4ywAAAEs"]
[Fri May 22 06:09:34.759521 2026] [:error] [pid 15584:tid 15637] [client 20.195.182.185:1893] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ag-Cnt9Z_TVLbNEx52h4zgAAAFE"]
[Fri May 22 06:09:35.399641 2026] [:error] [pid 15584:tid 15635] [client 20.195.182.185:1861] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ag-Cn99Z_TVLbNEx52h40AAAAE8"]
[Fri May 22 06:09:36.046175 2026] [:error] [pid 15584:tid 15627] [client 20.195.182.185:1926] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/99.php"] [unique_id "ag-CoN9Z_TVLbNEx52h41AAAAEc"]
[Fri May 22 06:09:36.690307 2026] [:error] [pid 58782:tid 58808] [client 20.195.182.185:1357] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/99.php"] [unique_id "ag-CoIxsdTFafgO8vhSryAAAARg"]
[Fri May 22 06:09:37.338336 2026] [:error] [pid 15585:tid 15651] [client 20.195.182.185:1937] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/99.php"] [unique_id "ag-CoSKb-vB41AF-LC1AbAAAAIQ"]
[Fri May 22 06:09:37.993974 2026] [:error] [pid 58782:tid 58790] [client 20.195.182.185:1943] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/99.php"] [unique_id "ag-CoYxsdTFafgO8vhSryQAAAQY"]
[Fri May 22 06:09:38.649070 2026] [:error] [pid 58782:tid 58788] [client 20.195.182.185:2016] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "ag-CooxsdTFafgO8vhSrywAAAQQ"]
[Fri May 22 06:09:39.289963 2026] [:error] [pid 58782:tid 58798] [client 20.195.182.185:1840] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "ag-Co4xsdTFafgO8vhSrzAAAAQ4"]
[Fri May 22 06:09:39.943114 2026] [:error] [pid 58782:tid 58803] [client 20.195.182.185:1944] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "ag-Co4xsdTFafgO8vhSrzQAAARM"]
[Fri May 22 06:09:40.592620 2026] [:error] [pid 15583:tid 15608] [client 20.195.182.185:1810] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/layout.php"] [unique_id "ag-CpHnaOncRcIm17YV3qAAAABQ"]
[Fri May 22 06:09:41.249733 2026] [:error] [pid 15584:tid 15632] [client 20.195.182.185:1877] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "ag-Cpd9Z_TVLbNEx52h43AAAAEw"]
[Fri May 22 06:09:41.894888 2026] [:error] [pid 15583:tid 15594] [client 20.195.182.185:1405] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "ag-CpXnaOncRcIm17YV3qgAAAAY"]
[Fri May 22 06:09:42.540447 2026] [:error] [pid 58813:tid 58818] [client 20.195.182.185:1979] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "ag-Cpp6yyKWDKULhxJ36zAAAAUI"]
[Fri May 22 06:09:43.185598 2026] [:error] [pid 15585:tid 15666] [client 20.195.182.185:1376] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/12.php"] [unique_id "ag-CpyKb-vB41AF-LC1AdgAAAJM"]
[Fri May 22 06:09:43.832895 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:1352] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ag-CpyKb-vB41AF-LC1AeAAAAI4"]
[Fri May 22 06:09:44.477081 2026] [:error] [pid 15585:tid 15662] [client 20.195.182.185:1347] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ag-CqCKb-vB41AF-LC1AegAAAI8"]
[Fri May 22 06:09:45.130510 2026] [:error] [pid 15679:tid 15693] [client 20.195.182.185:1972] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ag-CqSh8tgGc38WJ-GxqLwAAAMw"]
[Fri May 22 06:09:45.783754 2026] [:error] [pid 15584:tid 15638] [client 20.195.182.185:1372] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ag-Cqd9Z_TVLbNEx52h45AAAAFI"]
[Fri May 22 06:09:46.431143 2026] [:error] [pid 15584:tid 15625] [client 20.195.182.185:1924] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ag-Cqt9Z_TVLbNEx52h45wAAAEU"]
[Fri May 22 06:09:47.079057 2026] [:error] [pid 15584:tid 15631] [client 20.195.182.185:1805] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ag-Cq99Z_TVLbNEx52h46QAAAEs"]
[Fri May 22 06:09:47.722769 2026] [:error] [pid 58782:tid 58797] [client 20.195.182.185:1882] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ag-Cq4xsdTFafgO8vhSr0QAAAQ0"]
[Fri May 22 06:09:48.364605 2026] [:error] [pid 15584:tid 15630] [client 20.195.182.185:1906] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ag-CrN9Z_TVLbNEx52h46wAAAEo"]
[Fri May 22 06:09:49.007607 2026] [:error] [pid 58782:tid 58800] [client 20.195.182.185:1900] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag-CrYxsdTFafgO8vhSr1AAAARA"]
[Fri May 22 06:09:49.656051 2026] [:error] [pid 15679:tid 15685] [client 20.195.182.185:1887] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag-CrSh8tgGc38WJ-GxqMgAAAMQ"]
[Fri May 22 06:09:50.300061 2026] [:error] [pid 15679:tid 15684] [client 20.195.182.185:1902] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag-Crih8tgGc38WJ-GxqNQAAAMM"]
[Fri May 22 06:09:50.943081 2026] [:error] [pid 15679:tid 15681] [client 20.195.182.185:2025] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag-Crih8tgGc38WJ-GxqNgAAAMA"]
[Fri May 22 06:09:51.584376 2026] [:error] [pid 15583:tid 15602] [client 20.195.182.185:1845] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ag-Cr3naOncRcIm17YV3rwAAAA4"]
[Fri May 22 06:09:52.228611 2026] [:error] [pid 15585:tid 15648] [client 20.195.182.185:1880] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ag-CsCKb-vB41AF-LC1AfAAAAIE"]
[Fri May 22 06:09:52.875898 2026] [:error] [pid 58782:tid 58795] [client 20.195.182.185:1386] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ag-CsIxsdTFafgO8vhSr1gAAAQs"]
[Fri May 22 06:09:53.522435 2026] [:error] [pid 58782:tid 58808] [client 20.195.182.185:1676] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a5.php"] [unique_id "ag-CsYxsdTFafgO8vhSr1wAAARg"]
[Fri May 22 06:09:54.164485 2026] [:error] [pid 15583:tid 15610] [client 20.195.182.185:2042] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ag-CsnnaOncRcIm17YV3sQAAABY"]
[Fri May 22 06:09:54.809822 2026] [:error] [pid 15584:tid 15629] [client 20.195.182.185:1374] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ag-Cst9Z_TVLbNEx52h49AAAAEk"]
[Fri May 22 06:09:55.453398 2026] [:error] [pid 15583:tid 15601] [client 20.195.182.185:1869] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ag-Cs3naOncRcIm17YV3sgAAAA0"]
[Fri May 22 06:09:56.105182 2026] [:error] [pid 15584:tid 15624] [client 20.195.182.185:1915] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/hplfuns.php"] [unique_id "ag-CtN9Z_TVLbNEx52h49wAAAEQ"]
[Fri May 22 06:09:56.754599 2026] [:error] [pid 15583:tid 15598] [client 20.195.182.185:1947] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ag-CtHnaOncRcIm17YV3tgAAAAo"]
[Fri May 22 06:09:57.402275 2026] [:error] [pid 15679:tid 15686] [client 20.195.182.185:1868] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ag-CtSh8tgGc38WJ-GxqOQAAAMU"]
[Fri May 22 06:09:58.055029 2026] [:error] [pid 15585:tid 15654] [client 20.195.182.185:1747] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ag-CtiKb-vB41AF-LC1AgAAAAIc"]
[Fri May 22 06:09:58.704425 2026] [:error] [pid 15585:tid 15666] [client 20.195.182.185:1980] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bolt.php"] [unique_id "ag-CtiKb-vB41AF-LC1AgQAAAJM"]
[Fri May 22 06:09:59.355339 2026] [:error] [pid 15585:tid 15667] [client 20.195.182.185:1896] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "ag-CtyKb-vB41AF-LC1AgwAAAJQ"]
[Fri May 22 06:09:59.999916 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:1901] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "ag-CtyKb-vB41AF-LC1AhQAAAI4"]
[Fri May 22 06:10:00.649637 2026] [:error] [pid 15584:tid 15628] [client 20.195.182.185:1755] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "ag-CuN9Z_TVLbNEx52h4_AAAAEg"]
[Fri May 22 06:10:01.303363 2026] [:error] [pid 15584:tid 15635] [client 20.195.182.185:1872] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/inputs.php"] [unique_id "ag-Cud9Z_TVLbNEx52h4_gAAAE8"]
[Fri May 22 06:10:01.944721 2026] [:error] [pid 15584:tid 15627] [client 20.195.182.185:1344] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file2.php"] [unique_id "ag-Cud9Z_TVLbNEx52h5AAAAAEc"]
[Fri May 22 06:10:02.589798 2026] [:error] [pid 15584:tid 15629] [client 20.195.182.185:1856] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file2.php"] [unique_id "ag-Cut9Z_TVLbNEx52h5AQAAAEk"]
[Fri May 22 06:10:03.238014 2026] [:error] [pid 58813:tid 58835] [client 20.195.182.185:1898] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file2.php"] [unique_id "ag-Cu56yyKWDKULhxJ36zQAAAVM"]
[Fri May 22 06:10:03.881136 2026] [:error] [pid 15583:tid 15593] [client 20.195.182.185:1876] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file2.php"] [unique_id "ag-Cu3naOncRcIm17YV3uQAAAAU"]
[Fri May 22 06:10:04.532965 2026] [:error] [pid 58813:tid 58831] [client 20.195.182.185:1889] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index/function.php"] [unique_id "ag-CvJ6yyKWDKULhxJ36zgAAAU8"]
[Fri May 22 06:10:05.179546 2026] [:error] [pid 15585:tid 15652] [client 20.195.182.185:1351] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index/function.php"] [unique_id "ag-CvSKb-vB41AF-LC1AigAAAIU"]
[Fri May 22 06:10:05.828557 2026] [:error] [pid 58813:tid 58822] [client 20.195.182.185:1904] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index/function.php"] [unique_id "ag-CvZ6yyKWDKULhxJ360QAAAUY"]
[Fri May 22 06:10:06.474909 2026] [:error] [pid 15583:tid 15595] [client 20.195.182.185:1401] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/index/function.php"] [unique_id "ag-CvnnaOncRcIm17YV3vAAAAAc"]
[Fri May 22 06:10:07.120002 2026] [:error] [pid 15583:tid 15592] [client 20.195.182.185:1913] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wk/index.php"] [unique_id "ag-Cv3naOncRcIm17YV3vgAAAAQ"]
[Fri May 22 06:10:07.776337 2026] [:error] [pid 15585:tid 15654] [client 20.195.182.185:1349] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wk/index.php"] [unique_id "ag-CvyKb-vB41AF-LC1AjwAAAIc"]
[Fri May 22 06:10:08.433849 2026] [:error] [pid 15585:tid 15666] [client 20.195.182.185:1363] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wk/index.php"] [unique_id "ag-CwCKb-vB41AF-LC1AkQAAAJM"]
[Fri May 22 06:10:09.079626 2026] [:error] [pid 15585:tid 15650] [client 20.195.182.185:1350] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wk/index.php"] [unique_id "ag-CwSKb-vB41AF-LC1AlAAAAIM"]
[Fri May 22 06:10:09.721471 2026] [:error] [pid 15679:tid 15701] [client 20.195.182.185:1897] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "ag-CwSh8tgGc38WJ-GxqPgAAANQ"]
[Fri May 22 06:10:10.361924 2026] [:error] [pid 15583:tid 15605] [client 20.195.182.185:1866] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "ag-CwnnaOncRcIm17YV3vwAAABE"]
[Fri May 22 06:10:11.026648 2026] [:error] [pid 58782:tid 58797] [client 20.195.182.185:1373] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "ag-Cw4xsdTFafgO8vhSr2wAAAQ0"]
[Fri May 22 06:10:11.679709 2026] [:error] [pid 15584:tid 15634] [client 20.195.182.185:1388] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/alfa.php"] [unique_id "ag-Cw99Z_TVLbNEx52h5AwAAAE4"]
[Fri May 22 06:10:12.320989 2026] [:error] [pid 58782:tid 58796] [client 20.195.182.185:1359] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-theme.php"] [unique_id "ag-CxIxsdTFafgO8vhSr3AAAAQw"]
[Fri May 22 06:10:12.962584 2026] [:error] [pid 15585:tid 15661] [client 20.195.182.185:1885] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-theme.php"] [unique_id "ag-CxCKb-vB41AF-LC1AmAAAAI4"]
[Fri May 22 06:10:13.605632 2026] [:error] [pid 15679:tid 15681] [client 20.195.182.185:1865] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-theme.php"] [unique_id "ag-CxSh8tgGc38WJ-GxqQQAAAMA"]
[Fri May 22 06:10:14.249274 2026] [:error] [pid 15585:tid 15660] [client 20.195.182.185:1878] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-theme.php"] [unique_id "ag-CxiKb-vB41AF-LC1AmgAAAI0"]
[Fri May 22 06:10:14.895778 2026] [:error] [pid 15585:tid 15668] [client 20.195.182.185:1393] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-file.php"] [unique_id "ag-CxiKb-vB41AF-LC1AmwAAAJU"]
[Fri May 22 06:10:15.543780 2026] [:error] [pid 15584:tid 15630] [client 20.195.182.185:1348] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-file.php"] [unique_id "ag-Cx99Z_TVLbNEx52h5BQAAAEo"]
[Fri May 22 06:10:16.187076 2026] [:error] [pid 58813:tid 58823] [client 20.195.182.185:1356] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-file.php"] [unique_id "ag-CyJ6yyKWDKULhxJ361QAAAUc"]
[Fri May 22 06:10:16.836178 2026] [:error] [pid 15585:tid 15670] [client 20.195.182.185:1346] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-file.php"] [unique_id "ag-CyCKb-vB41AF-LC1AnwAAAJc"]
[Fri May 22 06:10:17.478071 2026] [:error] [pid 15679:tid 15704] [client 20.195.182.185:1675] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/default.php"] [unique_id "ag-CySh8tgGc38WJ-GxqRgAAANc"]
[Fri May 22 06:10:18.131627 2026] [:error] [pid 15585:tid 15647] [client 20.195.182.185:1756] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/default.php"] [unique_id "ag-CyiKb-vB41AF-LC1AoAAAAIA"]
[Fri May 22 06:10:18.780601 2026] [:error] [pid 15585:tid 15654] [client 20.195.182.185:1761] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/default.php"] [unique_id "ag-CyiKb-vB41AF-LC1AogAAAIc"]
[Fri May 22 06:10:19.432953 2026] [:error] [pid 15585:tid 15656] [client 20.195.182.185:1354] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/default.php"] [unique_id "ag-CyyKb-vB41AF-LC1ApgAAAIk"]
[Fri May 22 06:10:20.090759 2026] [:error] [pid 15679:tid 15690] [client 20.195.182.185:1355] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mah.php"] [unique_id "ag-CzCh8tgGc38WJ-GxqUQAAAMk"]
[Fri May 22 06:10:20.756524 2026] [:error] [pid 15583:tid 15600] [client 20.195.182.185:1741] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mah.php"] [unique_id "ag-CzHnaOncRcIm17YV3xQAAAAw"]
[Fri May 22 06:10:21.404549 2026] [:error] [pid 15584:tid 15637] [client 20.195.182.185:1404] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mah.php"] [unique_id "ag-Czd9Z_TVLbNEx52h5BwAAAFE"]
[Fri May 22 06:10:22.047704 2026] [:error] [pid 15583:tid 15608] [client 20.195.182.185:1751] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mah.php"] [unique_id "ag-CznnaOncRcIm17YV3xwAAABQ"]
[Fri May 22 06:10:22.691424 2026] [:error] [pid 15679:tid 15688] [client 20.195.182.185:1778] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/plugins.php"] [unique_id "ag-Czih8tgGc38WJ-GxqVgAAAMc"]
[Fri May 22 06:10:49.216941 2026] [:error] [pid 15585:tid 15659] [client 20.195.182.185:1942] [client 20.195.182.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "end2end.hostone.com.au"] [uri "/fm.php"] [unique_id "ag-C6SKb-vB41AF-LC1AzwAAAIw"]
[Fri May 22 06:10:52.991160 2026] [:error] [pid 15679:tid 15685] [client 20.195.182.185:1770] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xroot7.php"] [unique_id "ag-C7Ch8tgGc38WJ-GxqbgAAAMQ"]
[Fri May 22 06:10:53.636747 2026] [:error] [pid 15679:tid 15699] [client 20.195.182.185:2002] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xroot7.php"] [unique_id "ag-C7Sh8tgGc38WJ-GxqbwAAANI"]
[Fri May 22 06:10:54.283283 2026] [:error] [pid 58813:tid 58819] [client 20.195.182.185:1851] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xroot7.php"] [unique_id "ag-C7p6yyKWDKULhxJ37OgAAAUM"]
[Fri May 22 06:10:54.931599 2026] [:error] [pid 15584:tid 15638] [client 20.195.182.185:1362] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xroot7.php"] [unique_id "ag-C7t9Z_TVLbNEx52h5HAAAAFI"]
[Fri May 22 06:10:55.575377 2026] [:error] [pid 15584:tid 15640] [client 20.195.182.185:1365] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "ag-C799Z_TVLbNEx52h5HQAAAFQ"]
[Fri May 22 06:10:56.227543 2026] [:error] [pid 58782:tid 58787] [client 20.195.182.185:1912] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "ag-C8IxsdTFafgO8vhSr8gAAAQM"]
[Fri May 22 06:10:56.877478 2026] [:error] [pid 15583:tid 15598] [client 20.195.182.185:1760] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "ag-C8HnaOncRcIm17YV31wAAAAo"]
[Fri May 22 06:10:57.525214 2026] [:error] [pid 15583:tid 15589] [client 20.195.182.185:1911] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mini.php"] [unique_id "ag-C8XnaOncRcIm17YV32QAAAAE"]
[Fri May 22 21:42:40.745090 2026] [:error] [pid 58782:tid 58790] [client 170.64.238.42:36132] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "ahBdUIxsdTFafgO8vhQwUQAAAQY"]
[Fri May 22 21:42:40.868832 2026] [:error] [pid 15584:tid 15626] [client 170.64.238.42:57566] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "end2end.hostone.com.au"] [uri "/.git/config"] [unique_id "ahBdUN9Z_TVLbNEx52g_oAAAAEY"]
[Sat May 23 03:33:52.183497 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:52.183527 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.463982 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.464001 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.509660 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.509689 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:15.021165 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:15.021192 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.388288 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.388314 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:23.136467 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:23.136512 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:43.135695 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:43.135732 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:38.942140 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:38.942167 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:32.241041 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:32.241068 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:33.955783 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:33.955810 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:49.983783 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:49.983810 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.736044 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.736073 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:56.227490 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:56.227530 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.663332 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.663360 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:16.341000 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:16.341027 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.793496 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.793522 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.619088 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.619117 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:54.350438 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:54.350465 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:08.279745 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:08.279774 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:29.880507 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:29.880535 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.619725 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.619752 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:14.368799 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:14.368825 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:28.865081 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:28.865123 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.635958 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.635998 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 07:41:10.727029 2026] [:error] [pid 50873:tid 50962] [client 20.9.70.139:13447] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ahI7FulYxsqwDcWZbhLX3AAAAJY"]
[Sun May 24 07:41:11.120109 2026] [:error] [pid 58797:tid 58820] [client 20.9.70.139:16725] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ahI7F_zoIKLVypLB5Ng5bwAAAVQ"]
[Sun May 24 07:41:11.498055 2026] [:error] [pid 58521:tid 58528] [client 20.9.70.139:16782] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ahI7F2u03QVCX-cF2G_kQgAAAQU"]
[Sun May 24 07:41:11.872574 2026] [:error] [pid 50978:tid 50987] [client 20.9.70.139:16760] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/edit.php"] [unique_id "ahI7Fyu0qFnUKJJuyO6PLQAAAMI"]
[Sun May 24 07:41:12.252216 2026] [:error] [pid 50872:tid 50915] [client 20.9.70.139:16738] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "ahI7GEbX_GQ5p_34ISZiJAAAAEI"]
[Sun May 24 07:41:12.630480 2026] [:error] [pid 50978:tid 50986] [client 20.9.70.139:4168] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "ahI7GCu0qFnUKJJuyO6PMQAAAME"]
[Sun May 24 07:41:13.005953 2026] [:error] [pid 50872:tid 50925] [client 20.9.70.139:4211] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "ahI7GUbX_GQ5p_34ISZiJgAAAEw"]
[Sun May 24 07:41:13.380647 2026] [:error] [pid 58797:tid 58821] [client 20.9.70.139:16811] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-load.php"] [unique_id "ahI7GfzoIKLVypLB5Ng5cwAAAVU"]
[Sun May 24 07:41:13.757250 2026] [:error] [pid 58918:tid 58936] [client 20.9.70.139:6661] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ahI7GaT5tvv40jh4HYYo9QAAAZA"]
[Sun May 24 07:41:14.135059 2026] [:error] [pid 58918:tid 58922] [client 20.9.70.139:16735] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ahI7GqT5tvv40jh4HYYo9wAAAYI"]
[Sun May 24 07:41:14.523914 2026] [:error] [pid 58918:tid 58938] [client 20.9.70.139:4183] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ahI7GqT5tvv40jh4HYYo-gAAAZI"]
[Sun May 24 07:41:14.897192 2026] [:error] [pid 58797:tid 58817] [client 20.9.70.139:12922] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/atomlib.php"] [unique_id "ahI7GvzoIKLVypLB5Ng5dwAAAVE"]
[Sun May 24 07:41:15.278157 2026] [:error] [pid 58521:tid 58547] [client 20.9.70.139:16752] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-der.php"] [unique_id "ahI7G2u03QVCX-cF2G_kRQAAARg"]
[Sun May 24 07:41:15.654250 2026] [:error] [pid 58797:tid 58823] [client 20.9.70.139:12926] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-der.php"] [unique_id "ahI7G_zoIKLVypLB5Ng5eQAAAVc"]
[Sun May 24 07:41:16.038361 2026] [:error] [pid 50872:tid 50928] [client 20.9.70.139:16795] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-der.php"] [unique_id "ahI7HEbX_GQ5p_34ISZiKgAAAE8"]
[Sun May 24 07:41:16.412209 2026] [:error] [pid 50873:tid 50951] [client 20.9.70.139:4179] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-der.php"] [unique_id "ahI7HOlYxsqwDcWZbhLX3gAAAIs"]
[Sun May 24 07:41:16.785592 2026] [:error] [pid 58918:tid 58937] [client 20.9.70.139:4211] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ftde.php"] [unique_id "ahI7HKT5tvv40jh4HYYpAgAAAZE"]
[Sun May 24 07:41:17.163480 2026] [:error] [pid 58797:tid 58801] [client 20.9.70.139:16774] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ftde.php"] [unique_id "ahI7HfzoIKLVypLB5Ng5gQAAAUE"]
[Sun May 24 07:41:17.536476 2026] [:error] [pid 58918:tid 58925] [client 20.9.70.139:16729] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ftde.php"] [unique_id "ahI7HaT5tvv40jh4HYYpAwAAAYU"]
[Sun May 24 07:41:17.920510 2026] [:error] [pid 58797:tid 58806] [client 20.9.70.139:16002] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ftde.php"] [unique_id "ahI7HfzoIKLVypLB5Ng5hQAAAUY"]
[Sun May 24 07:41:18.292948 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:13442] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "ahI7HqT5tvv40jh4HYYpBQAAAYg"]
[Sun May 24 07:41:18.666482 2026] [:error] [pid 58918:tid 58941] [client 20.9.70.139:16715] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "ahI7HqT5tvv40jh4HYYpCAAAAZU"]
[Sun May 24 07:41:19.050665 2026] [:error] [pid 50873:tid 50944] [client 20.9.70.139:10432] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "ahI7H-lYxsqwDcWZbhLX4wAAAIQ"]
[Sun May 24 07:41:19.424729 2026] [:error] [pid 50873:tid 50940] [client 20.9.70.139:13466] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/asasx.php"] [unique_id "ahI7H-lYxsqwDcWZbhLX5QAAAIA"]
[Sun May 24 07:41:19.801889 2026] [:error] [pid 58521:tid 58531] [client 20.9.70.139:4193] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ahI7H2u03QVCX-cF2G_kSAAAAQg"]
[Sun May 24 07:41:20.173090 2026] [:error] [pid 58521:tid 58532] [client 20.9.70.139:12899] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ahI7IGu03QVCX-cF2G_kSQAAAQk"]
[Sun May 24 07:41:20.549741 2026] [:error] [pid 58521:tid 58533] [client 20.9.70.139:6716] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ahI7IGu03QVCX-cF2G_kSgAAAQo"]
[Sun May 24 07:41:20.923969 2026] [:error] [pid 58918:tid 58932] [client 20.9.70.139:13493] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-good.php"] [unique_id "ahI7IKT5tvv40jh4HYYpEAAAAYw"]
[Sun May 24 07:41:21.298654 2026] [:error] [pid 58918:tid 58934] [client 20.9.70.139:16798] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/app.php"] [unique_id "ahI7IaT5tvv40jh4HYYpEgAAAY4"]
[Sun May 24 07:41:21.681398 2026] [:error] [pid 58918:tid 58931] [client 20.9.70.139:16801] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/app.php"] [unique_id "ahI7IaT5tvv40jh4HYYpFQAAAYs"]
[Sun May 24 07:41:22.057603 2026] [:error] [pid 58918:tid 58938] [client 20.9.70.139:16580] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/app.php"] [unique_id "ahI7IqT5tvv40jh4HYYpGAAAAZI"]
[Sun May 24 07:41:22.432741 2026] [:error] [pid 58918:tid 58943] [client 20.9.70.139:6701] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/app.php"] [unique_id "ahI7IqT5tvv40jh4HYYpGgAAAZc"]
[Sun May 24 07:41:22.809723 2026] [:error] [pid 58797:tid 58813] [client 20.9.70.139:16802] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahI7IvzoIKLVypLB5Ng5kAAAAU0"]
[Sun May 24 07:41:23.185076 2026] [:error] [pid 50873:tid 50941] [client 20.9.70.139:4169] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahI7I-lYxsqwDcWZbhLX6wAAAIE"]
[Sun May 24 07:41:23.557628 2026] [:error] [pid 58918:tid 58933] [client 20.9.70.139:16827] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahI7I6T5tvv40jh4HYYpIAAAAY0"]
[Sun May 24 07:41:23.938296 2026] [:error] [pid 50872:tid 50923] [client 20.9.70.139:16728] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahI7I0bX_GQ5p_34ISZiLwAAAEo"]
[Sun May 24 07:41:24.313671 2026] [:error] [pid 50872:tid 50913] [client 20.9.70.139:16821] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ahI7JEbX_GQ5p_34ISZiMQAAAEA"]
[Sun May 24 07:41:24.691376 2026] [:error] [pid 50873:tid 50959] [client 20.9.70.139:16637] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ahI7JOlYxsqwDcWZbhLX7AAAAJM"]
[Sun May 24 07:41:25.074703 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:13486] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ahI7JaT5tvv40jh4HYYpJgAAAYg"]
[Sun May 24 07:41:25.449789 2026] [:error] [pid 58918:tid 58942] [client 20.9.70.139:16765] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wuasr.php"] [unique_id "ahI7JaT5tvv40jh4HYYpJwAAAZY"]
[Sun May 24 07:41:25.825994 2026] [:error] [pid 50871:tid 50895] [client 20.9.70.139:12866] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahI7JecdOvA3ACH24lelwQAAAA4"]
[Sun May 24 07:41:26.203752 2026] [:error] [pid 58797:tid 58815] [client 20.9.70.139:13456] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahI7JvzoIKLVypLB5Ng5nQAAAU8"]
[Sun May 24 07:41:26.582341 2026] [:error] [pid 58521:tid 58544] [client 20.9.70.139:13457] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahI7Jmu03QVCX-cF2G_kTgAAARU"]
[Sun May 24 07:41:26.966296 2026] [:error] [pid 58521:tid 58529] [client 20.9.70.139:16591] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahI7Jmu03QVCX-cF2G_kUAAAAQY"]
[Sun May 24 07:41:27.340471 2026] [:error] [pid 58918:tid 58934] [client 20.9.70.139:6691] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "ahI7J6T5tvv40jh4HYYpKwAAAY4"]
[Sun May 24 07:41:27.719562 2026] [:error] [pid 58918:tid 58925] [client 20.9.70.139:16742] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "ahI7J6T5tvv40jh4HYYpLQAAAYU"]
[Sun May 24 07:41:28.116670 2026] [:error] [pid 50872:tid 50936] [client 20.9.70.139:16379] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "ahI7KEbX_GQ5p_34ISZiNwAAAFc"]
[Sun May 24 07:41:28.491525 2026] [:error] [pid 58797:tid 58817] [client 20.9.70.139:16639] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/albin.php"] [unique_id "ahI7KPzoIKLVypLB5Ng5qgAAAVE"]
[Sun May 24 07:41:28.874181 2026] [:error] [pid 50873:tid 50953] [client 20.9.70.139:16612] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wefile.php"] [unique_id "ahI7KOlYxsqwDcWZbhLX8wAAAI0"]
[Sun May 24 07:41:29.247279 2026] [:error] [pid 58797:tid 58810] [client 20.9.70.139:12873] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wefile.php"] [unique_id "ahI7KfzoIKLVypLB5Ng5rwAAAUo"]
[Sun May 24 07:41:29.625187 2026] [:error] [pid 50872:tid 50922] [client 20.9.70.139:16615] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wefile.php"] [unique_id "ahI7KUbX_GQ5p_34ISZiOgAAAEk"]
[Sun May 24 07:41:30.003369 2026] [:error] [pid 50873:tid 50941] [client 20.9.70.139:16006] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wefile.php"] [unique_id "ahI7KulYxsqwDcWZbhLX9gAAAIE"]
[Sun May 24 07:41:30.392305 2026] [:error] [pid 50978:tid 50991] [client 20.9.70.139:16062] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ahI7Kiu0qFnUKJJuyO6POgAAAMY"]
[Sun May 24 07:41:30.779165 2026] [:error] [pid 58797:tid 58817] [client 20.9.70.139:15329] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ahI7KvzoIKLVypLB5Ng5uQAAAVE"]
[Sun May 24 07:41:31.171224 2026] [:error] [pid 50873:tid 50959] [client 20.9.70.139:4196] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ahI7K-lYxsqwDcWZbhLX-AAAAJM"]
[Sun May 24 07:41:31.555996 2026] [:error] [pid 58797:tid 58803] [client 20.9.70.139:16766] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file30.php"] [unique_id "ahI7K_zoIKLVypLB5Ng5vAAAAUM"]
[Sun May 24 07:41:31.943672 2026] [:error] [pid 50873:tid 50942] [client 20.9.70.139:6714] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file4.php"] [unique_id "ahI7K-lYxsqwDcWZbhLX-QAAAII"]
[Sun May 24 07:41:32.329821 2026] [:error] [pid 50978:tid 50998] [client 20.9.70.139:10441] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file4.php"] [unique_id "ahI7LCu0qFnUKJJuyO6PPQAAAMs"]
[Sun May 24 07:41:32.750029 2026] [:error] [pid 50978:tid 51000] [client 20.9.70.139:4216] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file4.php"] [unique_id "ahI7LCu0qFnUKJJuyO6PPgAAAM0"]
[Sun May 24 07:41:33.128809 2026] [:error] [pid 50871:tid 50891] [client 20.9.70.139:16815] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file4.php"] [unique_id "ahI7LecdOvA3ACH24lel0QAAAAo"]
[Sun May 24 07:41:33.546252 2026] [:error] [pid 58918:tid 58938] [client 20.9.70.139:16824] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ahI7LaT5tvv40jh4HYYpPgAAAZI"]
[Sun May 24 07:41:33.969005 2026] [:error] [pid 50978:tid 51005] [client 20.9.70.139:12871] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ahI7LSu0qFnUKJJuyO6PQgAAANI"]
[Sun May 24 07:41:34.391569 2026] [:error] [pid 58918:tid 58926] [client 20.9.70.139:6692] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ahI7LqT5tvv40jh4HYYpRAAAAYY"]
[Sun May 24 07:41:34.768743 2026] [:error] [pid 58797:tid 58821] [client 20.9.70.139:12890] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dropdown.php"] [unique_id "ahI7LvzoIKLVypLB5Ng5xAAAAVU"]
[Sun May 24 07:41:35.150759 2026] [:error] [pid 58797:tid 58816] [client 20.9.70.139:4219] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/txets.php"] [unique_id "ahI7L_zoIKLVypLB5Ng5xgAAAVA"]
[Sun May 24 07:41:35.526031 2026] [:error] [pid 58918:tid 58935] [client 20.9.70.139:12907] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/txets.php"] [unique_id "ahI7L6T5tvv40jh4HYYpSgAAAY8"]
[Sun May 24 07:41:35.900081 2026] [:error] [pid 58521:tid 58539] [client 20.9.70.139:6705] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/txets.php"] [unique_id "ahI7L2u03QVCX-cF2G_kVgAAARA"]
[Sun May 24 07:41:36.272315 2026] [:error] [pid 50873:tid 50941] [client 20.9.70.139:4189] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/txets.php"] [unique_id "ahI7MOlYxsqwDcWZbhLX_QAAAIE"]
[Sun May 24 07:41:36.648716 2026] [:error] [pid 50873:tid 50955] [client 20.9.70.139:16792] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ahI7MOlYxsqwDcWZbhLX_wAAAI8"]
[Sun May 24 07:41:37.026933 2026] [:error] [pid 50872:tid 50936] [client 20.9.70.139:16602] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ahI7MUbX_GQ5p_34ISZiQAAAAFc"]
[Sun May 24 07:41:37.403963 2026] [:error] [pid 58918:tid 58939] [client 20.9.70.139:6666] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ahI7MaT5tvv40jh4HYYpTgAAAZM"]
[Sun May 24 07:41:37.780955 2026] [:error] [pid 58918:tid 58942] [client 20.9.70.139:6667] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-access.php"] [unique_id "ahI7MaT5tvv40jh4HYYpUQAAAZY"]
[Sun May 24 07:41:38.160715 2026] [:error] [pid 50871:tid 50889] [client 20.9.70.139:6713] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "ahI7MucdOvA3ACH24lel1QAAAAg"]
[Sun May 24 07:41:38.533312 2026] [:error] [pid 50978:tid 50999] [client 20.9.70.139:13500] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "ahI7Miu0qFnUKJJuyO6PTQAAAMw"]
[Sun May 24 07:41:38.908454 2026] [:error] [pid 58521:tid 58525] [client 20.9.70.139:4212] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "ahI7Mmu03QVCX-cF2G_kWAAAAQI"]
[Sun May 24 07:41:39.285446 2026] [:error] [pid 58521:tid 58537] [client 20.9.70.139:16595] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aevly.php"] [unique_id "ahI7M2u03QVCX-cF2G_kWgAAAQ4"]
[Sun May 24 07:41:39.665386 2026] [:error] [pid 50872:tid 50929] [client 20.9.70.139:13498] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vx.php"] [unique_id "ahI7M0bX_GQ5p_34ISZiQQAAAFA"]
[Sun May 24 07:41:40.039794 2026] [:error] [pid 58521:tid 58534] [client 20.9.70.139:16031] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vx.php"] [unique_id "ahI7NGu03QVCX-cF2G_kYAAAAQs"]
[Sun May 24 07:41:40.413823 2026] [:error] [pid 50978:tid 50993] [client 20.9.70.139:16777] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vx.php"] [unique_id "ahI7NCu0qFnUKJJuyO6PTwAAAMg"]
[Sun May 24 07:41:40.791958 2026] [:error] [pid 50978:tid 50987] [client 20.9.70.139:16626] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/vx.php"] [unique_id "ahI7NCu0qFnUKJJuyO6PUQAAAMI"]
[Sun May 24 07:41:41.168106 2026] [:error] [pid 50978:tid 51011] [client 20.9.70.139:16614] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-wz.php"] [unique_id "ahI7NSu0qFnUKJJuyO6PVAAAANg"]
[Sun May 24 07:41:41.540958 2026] [:error] [pid 50978:tid 50992] [client 20.9.70.139:16740] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-wz.php"] [unique_id "ahI7NSu0qFnUKJJuyO6PWgAAAMc"]
[Sun May 24 07:41:41.927502 2026] [:error] [pid 50873:tid 50951] [client 20.9.70.139:4550] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-wz.php"] [unique_id "ahI7NelYxsqwDcWZbhLYBgAAAIs"]
[Sun May 24 07:41:42.310251 2026] [:error] [pid 50978:tid 51006] [client 20.9.70.139:6702] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-wz.php"] [unique_id "ahI7Niu0qFnUKJJuyO6PYgAAANM"]
[Sun May 24 07:41:42.687422 2026] [:error] [pid 50873:tid 50944] [client 20.9.70.139:16739] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/crgio.php"] [unique_id "ahI7NulYxsqwDcWZbhLYCAAAAIQ"]
[Sun May 24 07:41:43.060658 2026] [:error] [pid 50872:tid 50925] [client 20.9.70.139:13472] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/crgio.php"] [unique_id "ahI7N0bX_GQ5p_34ISZiRQAAAEw"]
[Sun May 24 07:41:43.442591 2026] [:error] [pid 50873:tid 50941] [client 20.9.70.139:16627] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/crgio.php"] [unique_id "ahI7N-lYxsqwDcWZbhLYCQAAAIE"]
[Sun May 24 07:41:43.817198 2026] [:error] [pid 58521:tid 58546] [client 20.9.70.139:12893] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/crgio.php"] [unique_id "ahI7N2u03QVCX-cF2G_kZAAAARc"]
[Sun May 24 07:41:44.197468 2026] [:error] [pid 50872:tid 50917] [client 20.9.70.139:4210] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ahI7OEbX_GQ5p_34ISZiSgAAAEQ"]
[Sun May 24 07:41:44.590220 2026] [:error] [pid 50871:tid 50899] [client 20.9.70.139:10449] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ahI7OOcdOvA3ACH24lel2AAAABI"]
[Sun May 24 07:41:44.966548 2026] [:error] [pid 50978:tid 50999] [client 20.9.70.139:12927] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ahI7OCu0qFnUKJJuyO6PZwAAAMw"]
[Sun May 24 07:41:45.343485 2026] [:error] [pid 50873:tid 50962] [client 20.9.70.139:16576] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/new.php"] [unique_id "ahI7OelYxsqwDcWZbhLYDgAAAJY"]
[Sun May 24 07:41:45.715941 2026] [:error] [pid 50872:tid 50929] [client 20.9.70.139:10463] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ahI7OUbX_GQ5p_34ISZiUgAAAFA"]
[Sun May 24 07:41:46.095743 2026] [:error] [pid 58918:tid 58929] [client 20.9.70.139:13495] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ahI7OqT5tvv40jh4HYYpXAAAAYk"]
[Sun May 24 07:41:46.471862 2026] [:error] [pid 50978:tid 51011] [client 20.9.70.139:13490] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ahI7Oiu0qFnUKJJuyO6PbAAAANg"]
[Sun May 24 07:41:46.850072 2026] [:error] [pid 58521:tid 58542] [client 20.9.70.139:16808] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp.php"] [unique_id "ahI7Omu03QVCX-cF2G_kbAAAARM"]
[Sun May 24 07:41:47.229636 2026] [:error] [pid 50871:tid 50892] [client 20.9.70.139:10490] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ahI7O-cdOvA3ACH24lel2QAAAAs"]
[Sun May 24 07:41:47.606344 2026] [:error] [pid 50872:tid 50925] [client 20.9.70.139:15296] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ahI7O0bX_GQ5p_34ISZiVwAAAEw"]
[Sun May 24 07:41:47.979873 2026] [:error] [pid 58918:tid 58943] [client 20.9.70.139:6704] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ahI7O6T5tvv40jh4HYYpXgAAAZc"]
[Sun May 24 07:41:48.353205 2026] [:error] [pid 50871:tid 50883] [client 20.9.70.139:12912] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ccou.php"] [unique_id "ahI7POcdOvA3ACH24lel2wAAAAM"]
[Sun May 24 07:41:48.731497 2026] [:error] [pid 50872:tid 50934] [client 20.9.70.139:16778] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ahI7PEbX_GQ5p_34ISZiWgAAAFU"]
[Sun May 24 07:41:49.116369 2026] [:error] [pid 58918:tid 58940] [client 20.9.70.139:16015] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ahI7PaT5tvv40jh4HYYpYAAAAZQ"]
[Sun May 24 07:41:49.518861 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:16828] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ahI7PaT5tvv40jh4HYYpYwAAAYg"]
[Sun May 24 07:41:49.908147 2026] [:error] [pid 58521:tid 58533] [client 20.9.70.139:16592] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/db.php"] [unique_id "ahI7PWu03QVCX-cF2G_kdAAAAQo"]
[Sun May 24 07:41:50.299745 2026] [:error] [pid 50872:tid 50920] [client 20.9.70.139:16019] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahI7PkbX_GQ5p_34ISZiXQAAAEc"]
[Sun May 24 07:41:50.680444 2026] [:error] [pid 58521:tid 58527] [client 20.9.70.139:16732] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahI7Pmu03QVCX-cF2G_kdQAAAQQ"]
[Sun May 24 07:41:51.063040 2026] [:error] [pid 58918:tid 58936] [client 20.9.70.139:4188] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahI7P6T5tvv40jh4HYYpaAAAAZA"]
[Sun May 24 07:41:51.455500 2026] [:error] [pid 58918:tid 58938] [client 20.9.70.139:13480] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahI7P6T5tvv40jh4HYYpagAAAZI"]
[Sun May 24 07:41:51.828039 2026] [:error] [pid 58918:tid 58939] [client 20.9.70.139:10463] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ahI7P6T5tvv40jh4HYYpbAAAAZM"]
[Sun May 24 07:41:52.232983 2026] [:error] [pid 58918:tid 58942] [client 20.9.70.139:16638] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ahI7QKT5tvv40jh4HYYpcAAAAZY"]
[Sun May 24 07:41:52.606028 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:16810] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ahI7QKT5tvv40jh4HYYpdAAAAYg"]
[Sun May 24 07:41:52.983583 2026] [:error] [pid 50873:tid 50953] [client 20.9.70.139:16635] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/yellow.php"] [unique_id "ahI7QOlYxsqwDcWZbhLYGgAAAI0"]
[Sun May 24 07:41:53.363907 2026] [:error] [pid 58918:tid 58944] [client 20.9.70.139:12924] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mifta.php"] [unique_id "ahI7QaT5tvv40jh4HYYpeAAAAZg"]
[Sun May 24 07:41:53.748777 2026] [:error] [pid 58918:tid 58937] [client 20.9.70.139:13950] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mifta.php"] [unique_id "ahI7QaT5tvv40jh4HYYpegAAAZE"]
[Sun May 24 07:41:54.139009 2026] [:error] [pid 58918:tid 58927] [client 20.9.70.139:15348] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mifta.php"] [unique_id "ahI7QqT5tvv40jh4HYYpfQAAAYc"]
[Sun May 24 07:41:54.532379 2026] [:error] [pid 58918:tid 58943] [client 20.9.70.139:16803] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mifta.php"] [unique_id "ahI7QqT5tvv40jh4HYYpggAAAZc"]
[Sun May 24 07:41:54.906799 2026] [:error] [pid 50872:tid 50914] [client 20.9.70.139:4166] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-firewall.php"] [unique_id "ahI7QkbX_GQ5p_34ISZiYQAAAEE"]
[Sun May 24 07:41:55.292929 2026] [:error] [pid 50872:tid 50930] [client 20.9.70.139:12896] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-firewall.php"] [unique_id "ahI7Q0bX_GQ5p_34ISZiYgAAAFE"]
[Sun May 24 07:41:55.680460 2026] [:error] [pid 58918:tid 58934] [client 20.9.70.139:16022] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-firewall.php"] [unique_id "ahI7Q6T5tvv40jh4HYYpiAAAAY4"]
[Sun May 24 07:41:56.061964 2026] [:error] [pid 50873:tid 50955] [client 20.9.70.139:16738] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-firewall.php"] [unique_id "ahI7ROlYxsqwDcWZbhLYIAAAAI8"]
[Sun May 24 07:41:56.442373 2026] [:error] [pid 50872:tid 50932] [client 20.9.70.139:5027] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ahI7REbX_GQ5p_34ISZiaAAAAFM"]
[Sun May 24 07:41:56.815865 2026] [:error] [pid 50872:tid 50919] [client 20.9.70.139:6693] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ahI7REbX_GQ5p_34ISZiaQAAAEY"]
[Sun May 24 07:41:57.188842 2026] [:error] [pid 58918:tid 58927] [client 20.9.70.139:16737] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ahI7RaT5tvv40jh4HYYpjAAAAYc"]
[Sun May 24 07:41:57.565743 2026] [:error] [pid 50872:tid 50915] [client 20.9.70.139:13440] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fun.php"] [unique_id "ahI7RUbX_GQ5p_34ISZiawAAAEI"]
[Sun May 24 07:41:57.942539 2026] [:error] [pid 50872:tid 50934] [client 20.9.70.139:16045] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahI7RUbX_GQ5p_34ISZibgAAAFU"]
[Sun May 24 07:41:58.318036 2026] [:error] [pid 50872:tid 50917] [client 20.9.70.139:13945] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahI7RkbX_GQ5p_34ISZibwAAAEQ"]
[Sun May 24 07:41:58.693682 2026] [:error] [pid 50873:tid 50949] [client 20.9.70.139:15304] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahI7RulYxsqwDcWZbhLYKAAAAIk"]
[Sun May 24 07:41:59.068282 2026] [:error] [pid 58797:tid 58801] [client 20.9.70.139:16704] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahI7R_zoIKLVypLB5Ng5zwAAAUE"]
[Sun May 24 07:41:59.443351 2026] [:error] [pid 50873:tid 50948] [client 20.9.70.139:16579] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sys.php"] [unique_id "ahI7R-lYxsqwDcWZbhLYKQAAAIg"]
[Sun May 24 07:41:59.817195 2026] [:error] [pid 50872:tid 50918] [client 20.9.70.139:13483] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sys.php"] [unique_id "ahI7R0bX_GQ5p_34ISZidwAAAEU"]
[Sun May 24 07:42:00.200468 2026] [:error] [pid 50873:tid 50962] [client 20.9.70.139:16723] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sys.php"] [unique_id "ahI7SOlYxsqwDcWZbhLYLAAAAJY"]
[Sun May 24 07:42:00.576791 2026] [:error] [pid 50873:tid 50954] [client 20.9.70.139:16603] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sys.php"] [unique_id "ahI7SOlYxsqwDcWZbhLYLgAAAI4"]
[Sun May 24 07:42:00.950930 2026] [:error] [pid 50871:tid 50899] [client 20.9.70.139:6690] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1index.php"] [unique_id "ahI7SOcdOvA3ACH24lel5AAAABI"]
[Sun May 24 07:42:01.327277 2026] [:error] [pid 58918:tid 58930] [client 20.9.70.139:10445] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1index.php"] [unique_id "ahI7SaT5tvv40jh4HYYpkAAAAYo"]
[Sun May 24 07:42:01.702677 2026] [:error] [pid 58918:tid 58941] [client 20.9.70.139:6680] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1index.php"] [unique_id "ahI7SaT5tvv40jh4HYYpkgAAAZU"]
[Sun May 24 07:42:02.079566 2026] [:error] [pid 50873:tid 50961] [client 20.9.70.139:10437] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1index.php"] [unique_id "ahI7SulYxsqwDcWZbhLYNAAAAJU"]
[Sun May 24 07:42:02.452340 2026] [:error] [pid 50873:tid 50943] [client 20.9.70.139:16744] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ahI7SulYxsqwDcWZbhLYNgAAAIM"]
[Sun May 24 07:42:02.830438 2026] [:error] [pid 58797:tid 58807] [client 20.9.70.139:4167] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ahI7SvzoIKLVypLB5Ng52AAAAUc"]
[Sun May 24 07:42:03.206764 2026] [:error] [pid 50872:tid 50930] [client 20.9.70.139:13895] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ahI7S0bX_GQ5p_34ISZiewAAAFE"]
[Sun May 24 07:42:03.583778 2026] [:error] [pid 50978:tid 50990] [client 20.9.70.139:16724] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/shell20211028.php"] [unique_id "ahI7Syu0qFnUKJJuyO6PcwAAAMU"]
[Sun May 24 07:42:03.960164 2026] [:error] [pid 58918:tid 58924] [client 20.9.70.139:13464] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "ahI7S6T5tvv40jh4HYYpmQAAAYQ"]
[Sun May 24 07:42:04.338659 2026] [:error] [pid 58918:tid 58930] [client 20.9.70.139:13467] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "ahI7TKT5tvv40jh4HYYpmgAAAYo"]
[Sun May 24 07:42:04.713985 2026] [:error] [pid 50978:tid 51008] [client 20.9.70.139:10488] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "ahI7TCu0qFnUKJJuyO6PdwAAANU"]
[Sun May 24 07:42:05.086824 2026] [:error] [pid 50873:tid 50954] [client 20.9.70.139:16012] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-ver.php"] [unique_id "ahI7TelYxsqwDcWZbhLYPAAAAI4"]
[Sun May 24 07:42:05.464901 2026] [:error] [pid 50871:tid 50893] [client 20.9.70.139:12869] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "ahI7TecdOvA3ACH24lel6QAAAAw"]
[Sun May 24 07:42:05.843867 2026] [:error] [pid 58918:tid 58940] [client 20.9.70.139:16581] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "ahI7TaT5tvv40jh4HYYpnQAAAZQ"]
[Sun May 24 07:42:06.218738 2026] [:error] [pid 50978:tid 51001] [client 20.9.70.139:13485] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "ahI7Tiu0qFnUKJJuyO6PewAAAM4"]
[Sun May 24 07:42:06.596076 2026] [:error] [pid 50871:tid 50882] [client 20.9.70.139:4202] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lala.php"] [unique_id "ahI7TucdOvA3ACH24lel6gAAAAI"]
[Sun May 24 07:42:06.971132 2026] [:error] [pid 50978:tid 51009] [client 20.9.70.139:10452] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ahI7Tiu0qFnUKJJuyO6PfwAAANY"]
[Sun May 24 07:42:07.349359 2026] [:error] [pid 58797:tid 58824] [client 20.9.70.139:6676] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ahI7T_zoIKLVypLB5Ng54gAAAVg"]
[Sun May 24 07:42:07.723540 2026] [:error] [pid 58918:tid 58925] [client 20.9.70.139:12874] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sbhu.php"] [unique_id "ahI7T6T5tvv40jh4HYYppAAAAYU"]
[Sun May 24 07:42:31.054526 2026] [:error] [pid 58918:tid 58926] [client 20.9.70.139:16058] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ahI7Z6T5tvv40jh4HYYp7AAAAYY"]
[Sun May 24 07:42:31.429407 2026] [:error] [pid 50873:tid 50956] [client 20.9.70.139:13471] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ahI7Z-lYxsqwDcWZbhLYUQAAAJA"]
[Sun May 24 07:42:31.805690 2026] [:error] [pid 58918:tid 58942] [client 20.9.70.139:6663] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ahI7Z6T5tvv40jh4HYYp8QAAAZY"]
[Sun May 24 07:42:32.180675 2026] [:error] [pid 50873:tid 50952] [client 20.9.70.139:6670] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/forbidals.php"] [unique_id "ahI7aOlYxsqwDcWZbhLYUwAAAIw"]
[Sun May 24 07:42:32.559192 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:12923] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lv.php"] [unique_id "ahI7aKT5tvv40jh4HYYp9gAAAYg"]
[Sun May 24 07:42:32.948063 2026] [:error] [pid 50871:tid 50887] [client 20.9.70.139:12880] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lv.php"] [unique_id "ahI7aOcdOvA3ACH24lel9AAAAAc"]
[Sun May 24 07:42:33.324755 2026] [:error] [pid 50871:tid 50905] [client 20.9.70.139:14373] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lv.php"] [unique_id "ahI7aecdOvA3ACH24lel9QAAABg"]
[Sun May 24 07:42:33.704836 2026] [:error] [pid 50872:tid 50931] [client 20.9.70.139:16598] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lv.php"] [unique_id "ahI7aUbX_GQ5p_34ISZiigAAAFI"]
[Sun May 24 07:42:34.087598 2026] [:error] [pid 50872:tid 50915] [client 20.9.70.139:14374] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/explorer/index_.php"] [unique_id "ahI7akbX_GQ5p_34ISZijQAAAEI"]
[Sun May 24 07:42:34.460739 2026] [:error] [pid 58918:tid 58923] [client 20.9.70.139:4201] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/explorer/index_.php"] [unique_id "ahI7aqT5tvv40jh4HYYp-wAAAYM"]
[Sun May 24 07:42:34.834343 2026] [:error] [pid 50872:tid 50935] [client 20.9.70.139:13491] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/explorer/index_.php"] [unique_id "ahI7akbX_GQ5p_34ISZikAAAAFY"]
[Sun May 24 07:42:35.212891 2026] [:error] [pid 58918:tid 58924] [client 20.9.70.139:16605] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/explorer/index_.php"] [unique_id "ahI7a6T5tvv40jh4HYYp_gAAAYQ"]
[Sun May 24 07:42:35.584791 2026] [:error] [pid 58521:tid 58538] [client 20.9.70.139:4551] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xda.php"] [unique_id "ahI7a2u03QVCX-cF2G_knAAAAQ8"]
[Sun May 24 07:42:35.986008 2026] [:error] [pid 50871:tid 50882] [client 20.9.70.139:13460] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xda.php"] [unique_id "ahI7a-cdOvA3ACH24lel9wAAAAI"]
[Sun May 24 07:42:36.369453 2026] [:error] [pid 50871:tid 50885] [client 20.9.70.139:4176] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xda.php"] [unique_id "ahI7bOcdOvA3ACH24lel-AAAAAU"]
[Sun May 24 07:42:36.747031 2026] [:error] [pid 50872:tid 50937] [client 20.9.70.139:16323] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xda.php"] [unique_id "ahI7bEbX_GQ5p_34ISZimAAAAFg"]
[Sun May 24 07:42:37.118401 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:14399] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "ahI7baT5tvv40jh4HYYqBAAAAYg"]
[Sun May 24 07:42:37.497516 2026] [:error] [pid 50978:tid 50986] [client 20.9.70.139:16000] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "ahI7bSu0qFnUKJJuyO6PrwAAAME"]
[Sun May 24 07:42:37.873605 2026] [:error] [pid 58797:tid 58811] [client 20.9.70.139:14375] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "ahI7bfzoIKLVypLB5Ng6EQAAAUs"]
[Sun May 24 07:42:38.250467 2026] [:error] [pid 58918:tid 58921] [client 20.9.70.139:14362] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/samll.php"] [unique_id "ahI7bqT5tvv40jh4HYYqCQAAAYE"]
[Sun May 24 07:42:38.630390 2026] [:error] [pid 58918:tid 58935] [client 20.9.70.139:6711] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ahI7bqT5tvv40jh4HYYqDAAAAY8"]
[Sun May 24 07:42:39.006660 2026] [:error] [pid 50978:tid 51007] [client 20.9.70.139:14388] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ahI7byu0qFnUKJJuyO6PsAAAANQ"]
[Sun May 24 07:42:39.384800 2026] [:error] [pid 50871:tid 50894] [client 20.9.70.139:16001] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ahI7b-cdOvA3ACH24lel-QAAAA0"]
[Sun May 24 07:42:39.767812 2026] [:error] [pid 50978:tid 51005] [client 20.9.70.139:13465] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-at.php"] [unique_id "ahI7byu0qFnUKJJuyO6PsQAAANI"]
[Sun May 24 07:42:40.145694 2026] [:error] [pid 58797:tid 58817] [client 20.9.70.139:16589] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahI7cPzoIKLVypLB5Ng6FwAAAVE"]
[Sun May 24 07:42:40.524379 2026] [:error] [pid 50871:tid 50891] [client 20.9.70.139:6675] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahI7cOcdOvA3ACH24lel_AAAAAo"]
[Sun May 24 07:42:40.896728 2026] [:error] [pid 58918:tid 58929] [client 20.9.70.139:13488] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahI7cKT5tvv40jh4HYYqDwAAAYk"]
[Sun May 24 07:42:41.270012 2026] [:error] [pid 50872:tid 50917] [client 20.9.70.139:16005] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahI7cUbX_GQ5p_34ISZingAAAEQ"]
[Sun May 24 07:42:41.650120 2026] [:error] [pid 50872:tid 50922] [client 20.9.70.139:12888] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ahI7cUbX_GQ5p_34ISZinwAAAEk"]
[Sun May 24 07:42:42.023994 2026] [:error] [pid 58918:tid 58938] [client 20.9.70.139:16708] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ahI7cqT5tvv40jh4HYYqEwAAAZI"]
[Sun May 24 07:42:42.400693 2026] [:error] [pid 50872:tid 50916] [client 20.9.70.139:4601] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ahI7ckbX_GQ5p_34ISZioQAAAEM"]
[Sun May 24 07:42:42.782617 2026] [:error] [pid 58918:tid 58934] [client 20.9.70.139:6706] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-the.php"] [unique_id "ahI7cqT5tvv40jh4HYYqFgAAAY4"]
[Sun May 24 07:42:43.157221 2026] [:error] [pid 58918:tid 58939] [client 20.9.70.139:16741] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ahI7c6T5tvv40jh4HYYqGAAAAZM"]
[Sun May 24 07:42:43.538577 2026] [:error] [pid 58918:tid 58929] [client 20.9.70.139:14379] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ahI7c6T5tvv40jh4HYYqGgAAAYk"]
[Sun May 24 07:42:43.915907 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:16799] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ahI7c6T5tvv40jh4HYYqHQAAAYg"]
[Sun May 24 07:42:44.292368 2026] [:error] [pid 58918:tid 58936] [client 20.9.70.139:13473] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ff1.php"] [unique_id "ahI7dKT5tvv40jh4HYYqIAAAAZA"]
[Sun May 24 07:42:44.671194 2026] [:error] [pid 58918:tid 58944] [client 20.9.70.139:12900] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahI7dKT5tvv40jh4HYYqIwAAAZg"]
[Sun May 24 07:42:45.055306 2026] [:error] [pid 58918:tid 58926] [client 20.9.70.139:10469] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahI7daT5tvv40jh4HYYqJwAAAYY"]
[Sun May 24 07:42:45.433565 2026] [:error] [pid 50871:tid 50880] [client 20.9.70.139:10460] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahI7decdOvA3ACH24lemAAAAAAA"]
[Sun May 24 07:42:45.811209 2026] [:error] [pid 58918:tid 58920] [client 20.9.70.139:14358] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahI7daT5tvv40jh4HYYqKwAAAYA"]
[Sun May 24 07:42:46.187827 2026] [:error] [pid 58918:tid 58928] [client 20.9.70.139:16032] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Okxob.php"] [unique_id "ahI7dqT5tvv40jh4HYYqLgAAAYg"]
[Sun May 24 07:42:46.565793 2026] [:error] [pid 58797:tid 58804] [client 20.9.70.139:14351] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Okxob.php"] [unique_id "ahI7dvzoIKLVypLB5Ng6HAAAAUQ"]
[Sun May 24 07:42:46.941468 2026] [:error] [pid 50871:tid 50897] [client 20.9.70.139:15321] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Okxob.php"] [unique_id "ahI7ducdOvA3ACH24lemAgAAABA"]
[Sun May 24 07:42:47.320478 2026] [:error] [pid 58797:tid 58811] [client 20.9.70.139:4171] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/Okxob.php"] [unique_id "ahI7d_zoIKLVypLB5Ng6HQAAAUs"]
[Sun May 24 07:42:47.693706 2026] [:error] [pid 58918:tid 58927] [client 20.9.70.139:6710] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "ahI7d6T5tvv40jh4HYYqNQAAAYc"]
[Sun May 24 07:42:48.071891 2026] [:error] [pid 58797:tid 58803] [client 20.9.70.139:4215] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "ahI7ePzoIKLVypLB5Ng6HwAAAUM"]
[Sun May 24 07:42:48.459658 2026] [:error] [pid 58797:tid 58807] [client 20.9.70.139:6656] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "ahI7ePzoIKLVypLB5Ng6IAAAAUc"]
[Sun May 24 07:42:48.835670 2026] [:error] [pid 50978:tid 50999] [client 20.9.70.139:5041] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/pass4.php"] [unique_id "ahI7eCu0qFnUKJJuyO6PtgAAAMw"]
[Sun May 24 07:42:49.222872 2026] [:error] [pid 50978:tid 51010] [client 20.9.70.139:13475] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-su.php"] [unique_id "ahI7eSu0qFnUKJJuyO6PtwAAANc"]
[Sun May 24 07:42:49.599847 2026] [:error] [pid 58797:tid 58818] [client 20.9.70.139:16017] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-su.php"] [unique_id "ahI7efzoIKLVypLB5Ng6JAAAAVI"]
[Sun May 24 07:42:49.979553 2026] [:error] [pid 58918:tid 58936] [client 20.9.70.139:16779] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-su.php"] [unique_id "ahI7eaT5tvv40jh4HYYqPAAAAZA"]
[Sun May 24 07:42:50.396174 2026] [:error] [pid 58797:tid 58802] [client 20.9.70.139:15301] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-su.php"] [unique_id "ahI7evzoIKLVypLB5Ng6JgAAAUI"]
[Sun May 24 07:42:50.782071 2026] [:error] [pid 58918:tid 58925] [client 20.9.70.139:16023] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "ahI7eqT5tvv40jh4HYYqPgAAAYU"]
[Sun May 24 07:42:51.173511 2026] [:error] [pid 58797:tid 58806] [client 20.9.70.139:12882] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "ahI7e_zoIKLVypLB5Ng6LQAAAUY"]
[Sun May 24 07:42:51.547459 2026] [:error] [pid 50978:tid 51008] [client 20.9.70.139:10473] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "ahI7eyu0qFnUKJJuyO6PugAAANU"]
[Sun May 24 07:42:51.935254 2026] [:error] [pid 58797:tid 58811] [client 20.9.70.139:4190] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/like.php"] [unique_id "ahI7e_zoIKLVypLB5Ng6LwAAAUs"]
[Sun May 24 07:42:52.330029 2026] [:error] [pid 58797:tid 58823] [client 20.9.70.139:13940] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mass.php"] [unique_id "ahI7fPzoIKLVypLB5Ng6MgAAAVc"]
[Sun May 24 07:42:52.725512 2026] [:error] [pid 58797:tid 58817] [client 20.9.70.139:12868] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mass.php"] [unique_id "ahI7fPzoIKLVypLB5Ng6NQAAAVE"]
[Sun May 24 07:42:53.125707 2026] [:error] [pid 58918:tid 58940] [client 20.9.70.139:16754] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mass.php"] [unique_id "ahI7faT5tvv40jh4HYYqRwAAAZQ"]
[Sun May 24 07:42:53.532949 2026] [:error] [pid 50871:tid 50900] [client 20.9.70.139:16021] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mass.php"] [unique_id "ahI7fecdOvA3ACH24lemCwAAABM"]
[Sun May 24 07:42:53.909163 2026] [:error] [pid 50873:tid 50948] [client 20.9.70.139:14353] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/i.php"] [unique_id "ahI7felYxsqwDcWZbhLYVwAAAIg"]
[Sun May 24 07:42:54.296147 2026] [:error] [pid 50873:tid 50940] [client 20.9.70.139:16630] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/i.php"] [unique_id "ahI7fulYxsqwDcWZbhLYWQAAAIA"]
[Sun May 24 07:42:54.678480 2026] [:error] [pid 50872:tid 50934] [client 20.9.70.139:13453] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/i.php"] [unique_id "ahI7fkbX_GQ5p_34ISZiqgAAAFU"]
[Sun May 24 07:42:55.078026 2026] [:error] [pid 50872:tid 50924] [client 20.9.70.139:13501] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/i.php"] [unique_id "ahI7f0bX_GQ5p_34ISZirAAAAEs"]
[Sun May 24 07:42:55.454298 2026] [:error] [pid 50978:tid 50989] [client 20.9.70.139:16756] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ahI7fyu0qFnUKJJuyO6PvAAAAMQ"]
[Sun May 24 07:42:55.844693 2026] [:error] [pid 50871:tid 50880] [client 20.9.70.139:16791] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ahI7f-cdOvA3ACH24lemDwAAAAA"]
[Sun May 24 07:42:56.259509 2026] [:error] [pid 50871:tid 50886] [client 20.9.70.139:14348] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ahI7gOcdOvA3ACH24lemEQAAAAY"]
[Sun May 24 07:42:56.633802 2026] [:error] [pid 58797:tid 58808] [client 20.9.70.139:4894] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test.php"] [unique_id "ahI7gPzoIKLVypLB5Ng6PQAAAUg"]
[Sun May 24 07:42:57.030691 2026] [:error] [pid 58918:tid 58924] [client 20.9.70.139:6708] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/la.php"] [unique_id "ahI7gaT5tvv40jh4HYYqUwAAAYQ"]
[Sun May 24 07:42:57.428326 2026] [:error] [pid 50978:tid 50990] [client 20.9.70.139:14342] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/la.php"] [unique_id "ahI7gSu0qFnUKJJuyO6PvwAAAMU"]
[Sun May 24 07:42:57.808634 2026] [:error] [pid 50873:tid 50956] [client 20.9.70.139:14369] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/la.php"] [unique_id "ahI7gelYxsqwDcWZbhLYXgAAAJA"]
[Sun May 24 07:42:58.290422 2026] [:error] [pid 50978:tid 50997] [client 20.9.70.139:16713] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/la.php"] [unique_id "ahI7giu0qFnUKJJuyO6PwQAAAMo"]
[Sun May 24 07:42:58.670314 2026] [:error] [pid 58521:tid 58543] [client 20.9.70.139:6709] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/reze.php"] [unique_id "ahI7gmu03QVCX-cF2G_kpQAAARQ"]
[Sun May 24 07:42:59.048489 2026] [:error] [pid 50871:tid 50889] [client 20.9.70.139:4875] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/reze.php"] [unique_id "ahI7g-cdOvA3ACH24lemFQAAAAg"]
[Sun May 24 07:42:59.441827 2026] [:error] [pid 58521:tid 58541] [client 20.9.70.139:12875] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/reze.php"] [unique_id "ahI7g2u03QVCX-cF2G_kqAAAARI"]
[Sun May 24 07:42:59.840932 2026] [:error] [pid 50872:tid 50914] [client 20.9.70.139:14393] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/reze.php"] [unique_id "ahI7g0bX_GQ5p_34ISZitAAAAEE"]
[Sun May 24 07:43:00.233857 2026] [:error] [pid 50978:tid 51004] [client 20.9.70.139:13938] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "ahI7hCu0qFnUKJJuyO6PxQAAANE"]
[Sun May 24 07:43:00.623733 2026] [:error] [pid 58521:tid 58526] [client 20.9.70.139:4217] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "ahI7hGu03QVCX-cF2G_kqgAAAQM"]
[Sun May 24 07:43:01.013954 2026] [:error] [pid 58521:tid 58524] [client 20.9.70.139:13930] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "ahI7hWu03QVCX-cF2G_krAAAAQE"]
[Sun May 24 07:43:01.566196 2026] [:error] [pid 50978:tid 50992] [client 20.9.70.139:4572] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/database.php"] [unique_id "ahI7hSu0qFnUKJJuyO6PyAAAAMc"]
[Sun May 24 07:43:01.943753 2026] [:error] [pid 58918:tid 58943] [client 20.9.70.139:17888] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/favicon.php"] [unique_id "ahI7haT5tvv40jh4HYYqWAAAAZc"]
[Sun May 24 07:43:02.317833 2026] [:error] [pid 58918:tid 58920] [client 20.9.70.139:16026] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/favicon.php"] [unique_id "ahI7hqT5tvv40jh4HYYqWwAAAYA"]
[Sun May 24 07:43:02.730532 2026] [:error] [pid 58918:tid 58939] [client 20.9.70.139:12916] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/favicon.php"] [unique_id "ahI7hqT5tvv40jh4HYYqXAAAAZM"]
[Sun May 24 07:43:03.131583 2026] [:error] [pid 58797:tid 58816] [client 20.9.70.139:14359] [client 20.9.70.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/favicon.php"] [unique_id "ahI7h_zoIKLVypLB5Ng6RQAAAVA"]
[Sun May 24 09:08:42.985042 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:42.985069 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.800923 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.800950 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.516614 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.516640 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:51.067950 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:51.067977 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.505731 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.505756 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:41.284867 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:41.284894 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:43.127993 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:43.128019 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.413286 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.413312 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.825908 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.825935 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 02:59:29.380158 2026] [:error] [pid 11282:tid 11341] [client 52.242.222.214:31862] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahNKke0bPyN3C7HZ1R_w_wAAAME"]
[Mon May 25 02:59:30.162770 2026] [:error] [pid 15835:tid 15839] [client 52.242.222.214:31811] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahNKkmWbknYlUM9P0qNjzQAAAAI"]
[Mon May 25 02:59:31.148059 2026] [:error] [pid 11281:tid 11336] [client 52.242.222.214:31825] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahNKk5KmC9taWvA91j7FdwAAAJc"]
[Mon May 25 02:59:31.628354 2026] [:error] [pid 15835:tid 15855] [client 52.242.222.214:31836] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahNKk2WbknYlUM9P0qNj0AAAABI"]
[Mon May 25 02:59:32.310035 2026] [:error] [pid 15835:tid 15850] [client 52.242.222.214:31774] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xminie.php"] [unique_id "ahNKlGWbknYlUM9P0qNj0wAAAA0"]
[Mon May 25 02:59:33.460362 2026] [:error] [pid 11280:tid 11285] [client 52.242.222.214:31848] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xminie.php"] [unique_id "ahNKlYRn5s7laoSxy1RR9AAAAEA"]
[Mon May 25 02:59:34.079969 2026] [:error] [pid 15835:tid 15854] [client 52.242.222.214:31749] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xminie.php"] [unique_id "ahNKlmWbknYlUM9P0qNj3gAAABE"]
[Mon May 25 02:59:34.499788 2026] [:error] [pid 15835:tid 15846] [client 52.242.222.214:31857] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xminie.php"] [unique_id "ahNKlmWbknYlUM9P0qNj4AAAAAk"]
[Mon May 25 02:59:34.892080 2026] [:error] [pid 11282:tid 11351] [client 52.242.222.214:31812] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ahNKlu0bPyN3C7HZ1R_xAQAAAMs"]
[Mon May 25 02:59:35.616829 2026] [:error] [pid 11280:tid 11306] [client 52.242.222.214:31832] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ahNKl4Rn5s7laoSxy1RR9QAAAFU"]
[Mon May 25 02:59:36.215878 2026] [:error] [pid 11368:tid 11372] [client 52.242.222.214:31815] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ahNKmIfq_sTmmtTKm1WTYQAAAQI"]
[Mon May 25 02:59:36.882779 2026] [:error] [pid 11368:tid 11392] [client 52.242.222.214:31773] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aaa.php"] [unique_id "ahNKmIfq_sTmmtTKm1WTYwAAARY"]
[Mon May 25 02:59:37.403864 2026] [:error] [pid 11280:tid 11292] [client 52.242.222.214:31769] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ahNKmYRn5s7laoSxy1RR9wAAAEc"]
[Mon May 25 02:59:38.221575 2026] [:error] [pid 11281:tid 11332] [client 52.242.222.214:31794] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ahNKmpKmC9taWvA91j7FlgAAAJM"]
[Mon May 25 02:59:38.843781 2026] [:error] [pid 15835:tid 15857] [client 52.242.222.214:31755] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ahNKmmWbknYlUM9P0qNj6QAAABQ"]
[Mon May 25 02:59:39.455633 2026] [:error] [pid 11281:tid 11318] [client 52.242.222.214:31845] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bal.php"] [unique_id "ahNKm5KmC9taWvA91j7FnQAAAIU"]
[Mon May 25 02:59:40.000671 2026] [:error] [pid 11282:tid 11354] [client 52.242.222.214:31829] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahNKm-0bPyN3C7HZ1R_xAwAAAM4"]
[Mon May 25 02:59:40.554417 2026] [:error] [pid 15835:tid 15860] [client 52.242.222.214:31805] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahNKnGWbknYlUM9P0qNj8AAAABc"]
[Mon May 25 02:59:41.069100 2026] [:error] [pid 11368:tid 11383] [client 52.242.222.214:31860] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahNKnYfq_sTmmtTKm1WTawAAAQ0"]
[Mon May 25 02:59:41.612059 2026] [:error] [pid 11281:tid 11332] [client 52.242.222.214:31759] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/drykl.php"] [unique_id "ahNKnZKmC9taWvA91j7FqQAAAJM"]
[Mon May 25 02:59:42.139362 2026] [:error] [pid 11281:tid 11326] [client 52.242.222.214:31818] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "ahNKnpKmC9taWvA91j7FrQAAAI0"]
[Mon May 25 02:59:42.984290 2026] [:error] [pid 11282:tid 11348] [client 52.242.222.214:31869] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "ahNKnu0bPyN3C7HZ1R_xBAAAAMg"]
[Mon May 25 02:59:43.828172 2026] [:error] [pid 15835:tid 15847] [client 52.242.222.214:31864] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "ahNKn2WbknYlUM9P0qNj9QAAAAo"]
[Mon May 25 02:59:44.334004 2026] [:error] [pid 15835:tid 15860] [client 52.242.222.214:31855] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/av.php"] [unique_id "ahNKoGWbknYlUM9P0qNj9wAAABc"]
[Mon May 25 02:59:45.011229 2026] [:error] [pid 11280:tid 11289] [client 52.242.222.214:31819] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ahNKoYRn5s7laoSxy1RR-gAAAEQ"]
[Mon May 25 02:59:45.550151 2026] [:error] [pid 11368:tid 11394] [client 52.242.222.214:31868] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ahNKoYfq_sTmmtTKm1WTdAAAARg"]
[Mon May 25 02:59:46.992477 2026] [:error] [pid 11368:tid 11371] [client 52.242.222.214:31761] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ahNKoofq_sTmmtTKm1WTdQAAAQE"]
[Mon May 25 02:59:48.120822 2026] [:error] [pid 11368:tid 11372] [client 52.242.222.214:6102] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/11.php"] [unique_id "ahNKpIfq_sTmmtTKm1WTdwAAAQI"]
[Mon May 25 02:59:48.621991 2026] [:error] [pid 11368:tid 11392] [client 52.242.222.214:31827] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "ahNKpIfq_sTmmtTKm1WTeQAAARY"]
[Mon May 25 02:59:49.326519 2026] [:error] [pid 11280:tid 11290] [client 52.242.222.214:31814] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "ahNKpYRn5s7laoSxy1RSAAAAAEU"]
[Mon May 25 02:59:49.717723 2026] [:error] [pid 11282:tid 11347] [client 52.242.222.214:31853] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "ahNKpe0bPyN3C7HZ1R_xCQAAAMc"]
[Mon May 25 02:59:50.173524 2026] [:error] [pid 11282:tid 11353] [client 52.242.222.214:31747] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/77.php"] [unique_id "ahNKpu0bPyN3C7HZ1R_xCgAAAM0"]
[Mon May 25 02:59:50.802441 2026] [:error] [pid 11281:tid 11329] [client 52.242.222.214:31842] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x402.php"] [unique_id "ahNKppKmC9taWvA91j7F2AAAAJA"]
[Mon May 25 02:59:51.656570 2026] [:error] [pid 11281:tid 11326] [client 52.242.222.214:31847] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x402.php"] [unique_id "ahNKp5KmC9taWvA91j7F3AAAAI0"]
[Mon May 25 02:59:52.116181 2026] [:error] [pid 11368:tid 11389] [client 52.242.222.214:31753] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x402.php"] [unique_id "ahNKqIfq_sTmmtTKm1WTfQAAARM"]
[Mon May 25 02:59:52.708465 2026] [:error] [pid 11368:tid 11385] [client 52.242.222.214:31764] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/x402.php"] [unique_id "ahNKqIfq_sTmmtTKm1WTfwAAAQ8"]
[Mon May 25 02:59:53.184688 2026] [:error] [pid 15835:tid 15851] [client 52.242.222.214:31834] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ahNKqWWbknYlUM9P0qNj-gAAAA4"]
[Mon May 25 02:59:53.782656 2026] [:error] [pid 11281:tid 11335] [client 52.242.222.214:31802] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ahNKqZKmC9taWvA91j7F3gAAAJY"]
[Mon May 25 02:59:55.286210 2026] [:error] [pid 15835:tid 15857] [client 52.242.222.214:31752] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ahNKq2WbknYlUM9P0qNj_wAAABQ"]
[Mon May 25 02:59:55.832102 2026] [:error] [pid 11282:tid 11357] [client 52.242.222.214:6130] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/themes.php"] [unique_id "ahNKq-0bPyN3C7HZ1R_xDwAAANE"]
[Mon May 25 02:59:56.343114 2026] [:error] [pid 11368:tid 11377] [client 52.242.222.214:31763] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ahNKrIfq_sTmmtTKm1WTggAAAQc"]
[Mon May 25 02:59:56.791093 2026] [:error] [pid 11281:tid 11328] [client 52.242.222.214:31792] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ahNKrJKmC9taWvA91j7F4QAAAI8"]
[Mon May 25 02:59:57.193618 2026] [:error] [pid 11282:tid 11363] [client 52.242.222.214:31851] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ahNKre0bPyN3C7HZ1R_xEQAAANc"]
[Mon May 25 02:59:57.700367 2026] [:error] [pid 15835:tid 15861] [client 52.242.222.214:31751] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/1.php"] [unique_id "ahNKrWWbknYlUM9P0qNkBAAAABg"]
[Mon May 25 02:59:58.245590 2026] [:error] [pid 11282:tid 11347] [client 52.242.222.214:31870] [client 52.242.222.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "end2end.hostone.com.au"] [uri "/tiny.php"] [unique_id "ahNKru0bPyN3C7HZ1R_xEwAAAMc"]
[Mon May 25 02:59:58.794989 2026] [:error] [pid 11282:tid 11353] [client 52.242.222.214:31780] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "ahNKru0bPyN3C7HZ1R_xFAAAAM0"]
[Mon May 25 02:59:59.327536 2026] [:error] [pid 11282:tid 11349] [client 52.242.222.214:31828] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "ahNKr-0bPyN3C7HZ1R_xFQAAAMk"]
[Mon May 25 03:00:00.437629 2026] [:error] [pid 11282:tid 11352] [client 52.242.222.214:31750] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "ahNKsO0bPyN3C7HZ1R_xGQAAAMw"]
[Mon May 25 03:00:01.486181 2026] [:error] [pid 15835:tid 15856] [client 52.242.222.214:31765] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/w.php"] [unique_id "ahNKsWWbknYlUM9P0qNkCAAAABM"]
[Mon May 25 03:00:02.132310 2026] [:error] [pid 11368:tid 11385] [client 52.242.222.214:31809] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ahNKsofq_sTmmtTKm1WThgAAAQ8"]
[Mon May 25 03:00:02.587445 2026] [:error] [pid 11368:tid 11379] [client 52.242.222.214:31767] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ahNKsofq_sTmmtTKm1WTiAAAAQk"]
[Mon May 25 03:00:03.531029 2026] [:error] [pid 15835:tid 15842] [client 52.242.222.214:6086] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ahNKs2WbknYlUM9P0qNkDAAAAAU"]
[Mon May 25 03:00:04.356540 2026] [:error] [pid 11281:tid 11327] [client 52.242.222.214:31813] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/test1.php"] [unique_id "ahNKtJKmC9taWvA91j7F5wAAAI4"]
[Mon May 25 03:00:05.064177 2026] [:error] [pid 15835:tid 15849] [client 52.242.222.214:31745] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ahNKtWWbknYlUM9P0qNkEQAAAAw"]
[Mon May 25 03:00:06.654196 2026] [:error] [pid 11280:tid 11300] [client 52.242.222.214:31772] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ahNKtoRn5s7laoSxy1RSUQAAAE8"]
[Mon May 25 03:00:07.322227 2026] [:error] [pid 15835:tid 15856] [client 52.242.222.214:31754] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ahNKt2WbknYlUM9P0qNkFAAAABM"]
[Mon May 25 03:00:08.326274 2026] [:error] [pid 15835:tid 15847] [client 52.242.222.214:31838] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tires.php"] [unique_id "ahNKuGWbknYlUM9P0qNkFgAAAAo"]
[Mon May 25 03:00:09.443911 2026] [:error] [pid 11368:tid 11370] [client 52.242.222.214:31833] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahNKuYfq_sTmmtTKm1WTjgAAAQA"]
[Mon May 25 03:00:10.116874 2026] [:error] [pid 11368:tid 11374] [client 52.242.222.214:6135] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahNKuofq_sTmmtTKm1WTjwAAAQQ"]
[Mon May 25 03:00:10.633715 2026] [:error] [pid 11280:tid 11302] [client 52.242.222.214:31748] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahNKuoRn5s7laoSxy1RSYwAAAFE"]
[Mon May 25 03:00:11.374647 2026] [:error] [pid 15835:tid 15840] [client 52.242.222.214:6080] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bthil.php"] [unique_id "ahNKu2WbknYlUM9P0qNkFwAAAAM"]
[Mon May 25 03:00:11.942657 2026] [:error] [pid 11368:tid 11389] [client 52.242.222.214:31821] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ahNKu4fq_sTmmtTKm1WTkgAAARM"]
[Mon May 25 03:00:12.816117 2026] [:error] [pid 11368:tid 11386] [client 52.242.222.214:31770] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ahNKvIfq_sTmmtTKm1WTlAAAARA"]
[Mon May 25 03:00:13.352721 2026] [:error] [pid 11281:tid 11320] [client 52.242.222.214:31863] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ahNKvZKmC9taWvA91j7F8QAAAIc"]
[Mon May 25 03:00:14.063805 2026] [:error] [pid 15835:tid 15839] [client 52.242.222.214:6083] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/d.php"] [unique_id "ahNKvmWbknYlUM9P0qNkGQAAAAI"]
[Mon May 25 03:00:14.466009 2026] [:error] [pid 11368:tid 11380] [client 52.242.222.214:6126] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cu.php"] [unique_id "ahNKvofq_sTmmtTKm1WTlwAAAQo"]
[Mon May 25 03:00:14.992751 2026] [:error] [pid 11281:tid 11333] [client 52.242.222.214:31799] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cu.php"] [unique_id "ahNKvpKmC9taWvA91j7F_AAAAJQ"]
[Mon May 25 03:00:15.613822 2026] [:error] [pid 11281:tid 11335] [client 52.242.222.214:31858] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cu.php"] [unique_id "ahNKv5KmC9taWvA91j7GBAAAAJY"]
[Mon May 25 03:00:16.297430 2026] [:error] [pid 11280:tid 11295] [client 52.242.222.214:31786] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cu.php"] [unique_id "ahNKwIRn5s7laoSxy1RSdQAAAEo"]
[Mon May 25 03:00:17.192768 2026] [:error] [pid 11368:tid 11376] [client 52.242.222.214:6124] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "ahNKwYfq_sTmmtTKm1WTmgAAAQY"]
[Mon May 25 03:00:18.476361 2026] [:error] [pid 15835:tid 15858] [client 52.242.222.214:6096] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "ahNKwmWbknYlUM9P0qNkGgAAABU"]
[Mon May 25 03:00:19.241450 2026] [:error] [pid 11368:tid 11385] [client 52.242.222.214:31840] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "ahNKw4fq_sTmmtTKm1WTnwAAAQ8"]
[Mon May 25 03:00:19.853856 2026] [:error] [pid 11281:tid 11328] [client 52.242.222.214:31816] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fone1.php"] [unique_id "ahNKw5KmC9taWvA91j7GGQAAAI8"]
[Mon May 25 03:00:20.357014 2026] [:error] [pid 11368:tid 11377] [client 52.242.222.214:6094] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "ahNKxIfq_sTmmtTKm1WTogAAAQc"]
[Mon May 25 03:00:20.968164 2026] [:error] [pid 15835:tid 15855] [client 52.242.222.214:31820] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "ahNKxGWbknYlUM9P0qNkIAAAABI"]
[Mon May 25 03:00:21.448501 2026] [:error] [pid 11280:tid 11306] [client 52.242.222.214:31830] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "ahNKxYRn5s7laoSxy1RSeQAAAFU"]
[Mon May 25 03:00:21.867374 2026] [:error] [pid 11280:tid 11305] [client 52.242.222.214:6108] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sallu.php"] [unique_id "ahNKxYRn5s7laoSxy1RSegAAAFQ"]
[Mon May 25 03:00:22.501138 2026] [:error] [pid 11282:tid 11342] [client 52.242.222.214:31810] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "ahNKxu0bPyN3C7HZ1R_xKgAAAMI"]
[Mon May 25 03:00:23.083797 2026] [:error] [pid 11368:tid 11387] [client 52.242.222.214:31777] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "ahNKx4fq_sTmmtTKm1WTpwAAARE"]
[Mon May 25 03:00:23.611654 2026] [:error] [pid 11282:tid 11347] [client 52.242.222.214:31762] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "ahNKx-0bPyN3C7HZ1R_xLQAAAMc"]
[Mon May 25 03:00:24.236775 2026] [:error] [pid 11282:tid 11358] [client 52.242.222.214:31866] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ng.php"] [unique_id "ahNKyO0bPyN3C7HZ1R_xLgAAANI"]
[Mon May 25 03:00:24.813918 2026] [:error] [pid 11280:tid 11302] [client 52.242.222.214:31788] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/link.php"] [unique_id "ahNKyIRn5s7laoSxy1RSfAAAAFE"]
[Mon May 25 03:00:25.388770 2026] [:error] [pid 11368:tid 11372] [client 52.242.222.214:31800] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/link.php"] [unique_id "ahNKyYfq_sTmmtTKm1WTrAAAAQI"]
[Mon May 25 03:00:25.934200 2026] [:error] [pid 11368:tid 11380] [client 52.242.222.214:6125] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/link.php"] [unique_id "ahNKyYfq_sTmmtTKm1WTrQAAAQo"]
[Mon May 25 03:00:26.361408 2026] [:error] [pid 11368:tid 11388] [client 52.242.222.214:31756] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/link.php"] [unique_id "ahNKyofq_sTmmtTKm1WTrgAAARI"]
[Mon May 25 03:00:49.621669 2026] [:error] [pid 15835:tid 15840] [client 52.242.222.214:6084] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "ahNK4WWbknYlUM9P0qNkRgAAAAM"]
[Mon May 25 03:00:50.081774 2026] [:error] [pid 11282:tid 11362] [client 52.242.222.214:31824] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "ahNK4u0bPyN3C7HZ1R_xRwAAANY"]
[Mon May 25 03:00:50.514601 2026] [:error] [pid 11282:tid 11342] [client 52.242.222.214:31744] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "ahNK4u0bPyN3C7HZ1R_xSAAAAMI"]
[Mon May 25 03:00:50.976187 2026] [:error] [pid 11280:tid 11298] [client 52.242.222.214:6090] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/100.php"] [unique_id "ahNK4oRn5s7laoSxy1RSkwAAAE0"]
[Mon May 25 03:00:51.468071 2026] [:error] [pid 11281:tid 11324] [client 52.242.222.214:31768] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f5.php"] [unique_id "ahNK45KmC9taWvA91j7GOwAAAIs"]
[Mon May 25 03:00:51.897952 2026] [:error] [pid 15835:tid 15860] [client 52.242.222.214:31803] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f5.php"] [unique_id "ahNK42WbknYlUM9P0qNkSgAAABc"]
[Mon May 25 03:00:52.344787 2026] [:error] [pid 11282:tid 11340] [client 52.242.222.214:31789] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f5.php"] [unique_id "ahNK5O0bPyN3C7HZ1R_xSgAAAMA"]
[Mon May 25 03:00:52.727822 2026] [:error] [pid 11282:tid 11355] [client 52.242.222.214:6017] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f5.php"] [unique_id "ahNK5O0bPyN3C7HZ1R_xTAAAAM8"]
[Mon May 25 03:00:53.114226 2026] [:error] [pid 15835:tid 15861] [client 52.242.222.214:31782] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/view.php"] [unique_id "ahNK5WWbknYlUM9P0qNkSwAAABg"]
[Mon May 25 03:00:53.537398 2026] [:error] [pid 11282:tid 11350] [client 52.242.222.214:6099] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/view.php"] [unique_id "ahNK5e0bPyN3C7HZ1R_xTwAAAMo"]
[Mon May 25 03:00:54.174460 2026] [:error] [pid 11368:tid 11384] [client 52.242.222.214:31846] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/view.php"] [unique_id "ahNK5ofq_sTmmtTKm1WTzwAAAQ4"]
[Mon May 25 03:00:54.707169 2026] [:error] [pid 15835:tid 15855] [client 52.242.222.214:31779] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/view.php"] [unique_id "ahNK5mWbknYlUM9P0qNkTgAAABI"]
[Mon May 25 03:00:55.264144 2026] [:error] [pid 15835:tid 15844] [client 52.242.222.214:31766] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bc.php"] [unique_id "ahNK52WbknYlUM9P0qNkTwAAAAc"]
[Mon May 25 03:00:55.717899 2026] [:error] [pid 11368:tid 11372] [client 52.242.222.214:31775] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bc.php"] [unique_id "ahNK54fq_sTmmtTKm1WT0AAAAQI"]
[Mon May 25 03:00:56.204269 2026] [:error] [pid 11282:tid 11357] [client 52.242.222.214:31822] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bc.php"] [unique_id "ahNK6O0bPyN3C7HZ1R_xUQAAANE"]
[Mon May 25 03:00:56.882794 2026] [:error] [pid 15835:tid 15841] [client 52.242.222.214:6091] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/bc.php"] [unique_id "ahNK6GWbknYlUM9P0qNkUgAAAAQ"]
[Mon May 25 03:00:57.583114 2026] [:error] [pid 11368:tid 11390] [client 52.242.222.214:31798] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "ahNK6Yfq_sTmmtTKm1WT0QAAARQ"]
[Mon May 25 03:00:58.150306 2026] [:error] [pid 11282:tid 11346] [client 52.242.222.214:6132] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "ahNK6u0bPyN3C7HZ1R_xVAAAAMY"]
[Mon May 25 03:00:58.772679 2026] [:error] [pid 11280:tid 11299] [client 52.242.222.214:6118] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "ahNK6oRn5s7laoSxy1RSnAAAAE4"]
[Mon May 25 03:00:59.511552 2026] [:error] [pid 15835:tid 15853] [client 52.242.222.214:6021] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/tx79.php"] [unique_id "ahNK62WbknYlUM9P0qNkVgAAABA"]
[Mon May 25 03:01:00.409826 2026] [:error] [pid 11368:tid 11377] [client 52.242.222.214:6088] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moshou.php"] [unique_id "ahNK7Ifq_sTmmtTKm1WT1QAAAQc"]
[Mon May 25 03:01:01.502904 2026] [:error] [pid 11368:tid 11393] [client 52.242.222.214:6065] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moshou.php"] [unique_id "ahNK7Yfq_sTmmtTKm1WT2QAAARc"]
[Mon May 25 03:01:02.440238 2026] [:error] [pid 15835:tid 15859] [client 52.242.222.214:31771] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moshou.php"] [unique_id "ahNK7mWbknYlUM9P0qNkYQAAABY"]
[Mon May 25 03:01:03.001912 2026] [:error] [pid 15835:tid 15853] [client 52.242.222.214:31808] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/moshou.php"] [unique_id "ahNK72WbknYlUM9P0qNkZQAAABA"]
[Mon May 25 03:01:03.473070 2026] [:error] [pid 15835:tid 15852] [client 52.242.222.214:6081] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahNK72WbknYlUM9P0qNkawAAAA8"]
[Mon May 25 03:01:03.918440 2026] [:error] [pid 11280:tid 11295] [client 52.242.222.214:31831] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahNK74Rn5s7laoSxy1RSoQAAAEo"]
[Mon May 25 03:01:04.495785 2026] [:error] [pid 11280:tid 11297] [client 52.242.222.214:31776] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahNK8IRn5s7laoSxy1RSowAAAEw"]
[Mon May 25 03:01:05.131416 2026] [:error] [pid 11282:tid 11341] [client 52.242.222.214:31844] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/lib.php"] [unique_id "ahNK8e0bPyN3C7HZ1R_xVwAAAME"]
[Mon May 25 03:01:05.916320 2026] [:error] [pid 15835:tid 15855] [client 52.242.222.214:6055] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "ahNK8WWbknYlUM9P0qNkdAAAABI"]
[Mon May 25 03:01:06.882060 2026] [:error] [pid 11280:tid 11296] [client 52.242.222.214:31867] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "ahNK8oRn5s7laoSxy1RSqAAAAEs"]
[Mon May 25 03:01:07.348869 2026] [:error] [pid 15835:tid 15854] [client 52.242.222.214:6089] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "ahNK82WbknYlUM9P0qNkegAAABE"]
[Mon May 25 03:01:07.849569 2026] [:error] [pid 15835:tid 15842] [client 52.242.222.214:6143] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zoper1.php"] [unique_id "ahNK82WbknYlUM9P0qNkfAAAAAU"]
[Mon May 25 03:01:08.246348 2026] [:error] [pid 15835:tid 15860] [client 52.242.222.214:6129] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/19.php"] [unique_id "ahNK9GWbknYlUM9P0qNkfwAAABc"]
[Mon May 25 03:01:08.824122 2026] [:error] [pid 15835:tid 15844] [client 52.242.222.214:31871] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/19.php"] [unique_id "ahNK9GWbknYlUM9P0qNkhAAAAAc"]
[Mon May 25 03:01:09.297124 2026] [:error] [pid 11368:tid 11390] [client 52.242.222.214:5961] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/19.php"] [unique_id "ahNK9Yfq_sTmmtTKm1WT5AAAARQ"]
[Mon May 25 03:01:09.698606 2026] [:error] [pid 11282:tid 11344] [client 52.242.222.214:6113] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/19.php"] [unique_id "ahNK9e0bPyN3C7HZ1R_xWQAAAMQ"]
[Mon May 25 03:01:10.115965 2026] [:error] [pid 11280:tid 11289] [client 52.242.222.214:31760] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/geforce.php"] [unique_id "ahNK9oRn5s7laoSxy1RSqwAAAEQ"]
[Mon May 25 03:01:10.510532 2026] [:error] [pid 11368:tid 11380] [client 52.242.222.214:31783] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/geforce.php"] [unique_id "ahNK9ofq_sTmmtTKm1WT6AAAAQo"]
[Mon May 25 03:01:10.943700 2026] [:error] [pid 11282:tid 11354] [client 52.242.222.214:31856] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/geforce.php"] [unique_id "ahNK9u0bPyN3C7HZ1R_xWgAAAM4"]
[Mon May 25 03:01:11.368658 2026] [:error] [pid 11282:tid 11357] [client 52.242.222.214:31854] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/geforce.php"] [unique_id "ahNK9-0bPyN3C7HZ1R_xWwAAANE"]
[Mon May 25 03:01:11.878156 2026] [:error] [pid 11368:tid 11394] [client 52.242.222.214:6087] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dostshell.php"] [unique_id "ahNK94fq_sTmmtTKm1WT6gAAARg"]
[Mon May 25 03:01:12.326482 2026] [:error] [pid 15835:tid 15846] [client 52.242.222.214:31865] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dostshell.php"] [unique_id "ahNK-GWbknYlUM9P0qNkjwAAAAk"]
[Mon May 25 03:01:12.844407 2026] [:error] [pid 15835:tid 15841] [client 52.242.222.214:31757] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dostshell.php"] [unique_id "ahNK-GWbknYlUM9P0qNkkAAAAAQ"]
[Mon May 25 03:01:13.244519 2026] [:error] [pid 15835:tid 15837] [client 52.242.222.214:6109] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/dostshell.php"] [unique_id "ahNK-WWbknYlUM9P0qNkkgAAAAA"]
[Mon May 25 03:01:13.685576 2026] [:error] [pid 11368:tid 11391] [client 52.242.222.214:6038] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ahNK-Yfq_sTmmtTKm1WT7QAAARU"]
[Mon May 25 03:01:14.163225 2026] [:error] [pid 11368:tid 11373] [client 52.242.222.214:6056] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ahNK-ofq_sTmmtTKm1WT8gAAAQM"]
[Mon May 25 03:01:14.673830 2026] [:error] [pid 15835:tid 15845] [client 52.242.222.214:31806] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ahNK-mWbknYlUM9P0qNklwAAAAg"]
[Mon May 25 03:01:15.144077 2026] [:error] [pid 15835:tid 15854] [client 52.242.222.214:6116] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/doc.php"] [unique_id "ahNK-2WbknYlUM9P0qNkmQAAABE"]
[Mon May 25 03:01:15.575004 2026] [:error] [pid 15835:tid 15849] [client 52.242.222.214:31778] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ahNK-2WbknYlUM9P0qNkmwAAAAw"]
[Mon May 25 03:01:15.981861 2026] [:error] [pid 15835:tid 15847] [client 52.242.222.214:31843] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ahNK-2WbknYlUM9P0qNknQAAAAo"]
[Mon May 25 03:01:16.387001 2026] [:error] [pid 11368:tid 11378] [client 52.242.222.214:31746] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ahNK_Ifq_sTmmtTKm1WT9QAAAQg"]
[Mon May 25 03:01:16.780606 2026] [:error] [pid 11368:tid 11374] [client 52.242.222.214:6107] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/mar.php"] [unique_id "ahNK_Ifq_sTmmtTKm1WT9wAAAQQ"]
[Mon May 25 03:01:17.184148 2026] [:error] [pid 11281:tid 11316] [client 52.242.222.214:31859] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "ahNK_ZKmC9taWvA91j7GRgAAAIM"]
[Mon May 25 03:01:17.637325 2026] [:error] [pid 11280:tid 11304] [client 52.242.222.214:6123] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "ahNK_YRn5s7laoSxy1RSrQAAAFM"]
[Mon May 25 03:01:18.048698 2026] [:error] [pid 15835:tid 15850] [client 52.242.222.214:31850] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "ahNK_mWbknYlUM9P0qNkpQAAAA0"]
[Mon May 25 03:01:18.432798 2026] [:error] [pid 11282:tid 11342] [client 52.242.222.214:31784] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/casp1.php"] [unique_id "ahNK_u0bPyN3C7HZ1R_xXgAAAMI"]
[Mon May 25 03:01:18.834274 2026] [:error] [pid 11281:tid 11330] [client 52.242.222.214:5977] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ahNK_pKmC9taWvA91j7GSQAAAJE"]
[Mon May 25 03:01:19.223496 2026] [:error] [pid 11281:tid 11321] [client 52.242.222.214:31797] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ahNK_5KmC9taWvA91j7GTAAAAIg"]
[Mon May 25 03:01:19.623089 2026] [:error] [pid 11281:tid 11335] [client 52.242.222.214:31849] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ahNK_5KmC9taWvA91j7GUAAAAJY"]
[Mon May 25 03:01:20.031791 2026] [:error] [pid 11282:tid 11348] [client 52.242.222.214:6029] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/a1.php"] [unique_id "ahNLAO0bPyN3C7HZ1R_xYAAAAMg"]
[Mon May 25 03:01:20.432109 2026] [:error] [pid 11280:tid 11299] [client 52.242.222.214:6035] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ahNLAIRn5s7laoSxy1RSsAAAAE4"]
[Mon May 25 03:01:20.821048 2026] [:error] [pid 11281:tid 11314] [client 52.242.222.214:6085] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ahNLAJKmC9taWvA91j7GUQAAAIE"]
[Mon May 25 03:01:21.221526 2026] [:error] [pid 11280:tid 11306] [client 52.242.222.214:6097] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ahNLAYRn5s7laoSxy1RSsgAAAFU"]
[Mon May 25 03:01:21.603009 2026] [:error] [pid 11280:tid 11286] [client 52.242.222.214:6119] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ms-edit.php"] [unique_id "ahNLAYRn5s7laoSxy1RSswAAAEE"]
[Mon May 25 03:01:22.047467 2026] [:error] [pid 11280:tid 11290] [client 52.242.222.214:5964] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ahNLAoRn5s7laoSxy1RStAAAAEU"]
[Mon May 25 03:01:22.448900 2026] [:error] [pid 11368:tid 11386] [client 52.242.222.214:6098] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ahNLAofq_sTmmtTKm1WT_QAAARA"]
[Mon May 25 03:01:22.830114 2026] [:error] [pid 11282:tid 11351] [client 52.242.222.214:31804] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ahNLAu0bPyN3C7HZ1R_xaQAAAMs"]
[Mon May 25 03:01:23.213751 2026] [:error] [pid 15835:tid 15846] [client 52.242.222.214:31795] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/8.php"] [unique_id "ahNLA2WbknYlUM9P0qNkqgAAAAk"]
[Mon May 25 03:01:23.598883 2026] [:error] [pid 11368:tid 11394] [client 52.242.222.214:6073] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ahNLA4fq_sTmmtTKm1WT_wAAARg"]
[Mon May 25 03:01:23.980824 2026] [:error] [pid 11280:tid 11293] [client 52.242.222.214:6064] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ahNLA4Rn5s7laoSxy1RSuAAAAEg"]
[Mon May 25 03:01:24.402730 2026] [:error] [pid 11281:tid 11330] [client 52.242.222.214:6028] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ahNLBJKmC9taWvA91j7GVQAAAJE"]
[Mon May 25 03:01:24.830371 2026] [:error] [pid 11281:tid 11337] [client 52.242.222.214:6025] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xltt.php"] [unique_id "ahNLBJKmC9taWvA91j7GVwAAAJg"]
[Mon May 25 03:01:25.245764 2026] [:error] [pid 11280:tid 11309] [client 52.242.222.214:31861] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahNLBYRn5s7laoSxy1RSuQAAAFg"]
[Mon May 25 03:01:25.627975 2026] [:error] [pid 11368:tid 11370] [client 52.242.222.214:6114] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahNLBYfq_sTmmtTKm1WUAQAAAQA"]
[Mon May 25 03:01:26.025736 2026] [:error] [pid 11368:tid 11393] [client 52.242.222.214:31817] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahNLBofq_sTmmtTKm1WUAgAAARc"]
[Mon May 25 03:01:26.421312 2026] [:error] [pid 11282:tid 11346] [client 52.242.222.214:31835] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/cilus.php"] [unique_id "ahNLBu0bPyN3C7HZ1R_xcAAAAMY"]
[Mon May 25 03:01:26.842810 2026] [:error] [pid 11368:tid 11391] [client 52.242.222.214:6095] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ahNLBofq_sTmmtTKm1WUBQAAARU"]
[Mon May 25 03:01:27.256401 2026] [:error] [pid 15835:tid 15853] [client 52.242.222.214:6136] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ahNLB2WbknYlUM9P0qNkrgAAABA"]
[Mon May 25 03:01:28.337947 2026] [:error] [pid 11368:tid 11375] [client 52.242.222.214:6128] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ahNLCIfq_sTmmtTKm1WUBgAAAQU"]
[Mon May 25 03:01:28.774922 2026] [:error] [pid 15835:tid 15858] [client 52.242.222.214:5892] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/press.php"] [unique_id "ahNLCGWbknYlUM9P0qNktAAAABU"]
[Mon May 25 03:01:29.191096 2026] [:error] [pid 11282:tid 11353] [client 52.242.222.214:6053] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file6.php"] [unique_id "ahNLCe0bPyN3C7HZ1R_xdAAAAM0"]
[Mon May 25 03:01:29.635325 2026] [:error] [pid 11281:tid 11329] [client 52.242.222.214:31826] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file6.php"] [unique_id "ahNLCZKmC9taWvA91j7GWwAAAJA"]
[Mon May 25 03:01:30.021296 2026] [:error] [pid 11368:tid 11389] [client 52.242.222.214:6032] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file6.php"] [unique_id "ahNLCofq_sTmmtTKm1WUCAAAARM"]
[Mon May 25 03:01:30.440427 2026] [:error] [pid 11281:tid 11319] [client 52.242.222.214:31837] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/file6.php"] [unique_id "ahNLCpKmC9taWvA91j7GXgAAAIY"]
[Mon May 25 03:01:30.899993 2026] [:error] [pid 11281:tid 11313] [client 52.242.222.214:6138] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ahNLCpKmC9taWvA91j7GXwAAAIA"]
[Mon May 25 03:01:31.376100 2026] [:error] [pid 11282:tid 11340] [client 52.242.222.214:6044] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ahNLC-0bPyN3C7HZ1R_xeQAAAMA"]
[Mon May 25 03:01:31.756160 2026] [:error] [pid 11280:tid 11286] [client 52.242.222.214:6031] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ahNLC4Rn5s7laoSxy1RSwAAAAEE"]
[Mon May 25 03:01:32.141521 2026] [:error] [pid 15835:tid 15854] [client 52.242.222.214:6016] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ss.php"] [unique_id "ahNLDGWbknYlUM9P0qNkvAAAABE"]
[Mon May 25 03:01:32.552028 2026] [:error] [pid 11282:tid 11343] [client 52.242.222.214:5983] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/options.php"] [unique_id "ahNLDO0bPyN3C7HZ1R_xegAAAMM"]
[Mon May 25 03:01:32.961972 2026] [:error] [pid 11280:tid 11290] [client 52.242.222.214:5954] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/options.php"] [unique_id "ahNLDIRn5s7laoSxy1RSwQAAAEU"]
[Mon May 25 03:01:33.373351 2026] [:error] [pid 11280:tid 11301] [client 52.242.222.214:31839] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/options.php"] [unique_id "ahNLDYRn5s7laoSxy1RSwgAAAFA"]
[Mon May 25 03:01:33.790855 2026] [:error] [pid 11282:tid 11359] [client 52.242.222.214:6057] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/options.php"] [unique_id "ahNLDe0bPyN3C7HZ1R_xfAAAANM"]
[Mon May 25 03:01:34.195707 2026] [:error] [pid 11280:tid 11285] [client 52.242.222.214:6112] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/min.php"] [unique_id "ahNLDoRn5s7laoSxy1RSxAAAAEA"]
[Mon May 25 03:01:34.616300 2026] [:error] [pid 11282:tid 11350] [client 52.242.222.214:6120] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/min.php"] [unique_id "ahNLDu0bPyN3C7HZ1R_xgAAAAMo"]
[Mon May 25 03:01:35.053870 2026] [:error] [pid 11282:tid 11344] [client 52.242.222.214:6019] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/min.php"] [unique_id "ahNLD-0bPyN3C7HZ1R_xggAAAMQ"]
[Mon May 25 03:01:35.464622 2026] [:error] [pid 15835:tid 15843] [client 52.242.222.214:6134] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/min.php"] [unique_id "ahNLD2WbknYlUM9P0qNkxQAAAAY"]
[Mon May 25 03:01:35.903125 2026] [:error] [pid 11281:tid 11324] [client 52.242.222.214:31823] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "ahNLD5KmC9taWvA91j7GZAAAAIs"]
[Mon May 25 03:01:36.327864 2026] [:error] [pid 15835:tid 15846] [client 52.242.222.214:31796] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "ahNLEGWbknYlUM9P0qNkyQAAAAk"]
[Mon May 25 03:01:36.773382 2026] [:error] [pid 15835:tid 15861] [client 52.242.222.214:6140] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "ahNLEGWbknYlUM9P0qNkywAAABg"]
[Mon May 25 03:01:37.168751 2026] [:error] [pid 11368:tid 11370] [client 52.242.222.214:31790] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/img.php"] [unique_id "ahNLEYfq_sTmmtTKm1WUCwAAAQA"]
[Mon May 25 03:01:37.603091 2026] [:error] [pid 15835:tid 15838] [client 52.242.222.214:6127] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ahNLEWWbknYlUM9P0qNkzQAAAAE"]
[Mon May 25 03:01:38.036423 2026] [:error] [pid 11281:tid 11326] [client 52.242.222.214:6042] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ahNLEpKmC9taWvA91j7GZwAAAI0"]
[Mon May 25 03:01:38.434579 2026] [:error] [pid 11280:tid 11295] [client 52.242.222.214:6082] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ahNLEoRn5s7laoSxy1RSyAAAAEo"]
[Mon May 25 03:01:38.835130 2026] [:error] [pid 11281:tid 11318] [client 52.242.222.214:6139] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/7.php"] [unique_id "ahNLEpKmC9taWvA91j7GagAAAIU"]
[Mon May 25 03:01:39.242832 2026] [:error] [pid 15835:tid 15860] [client 52.242.222.214:6040] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ahNLE2WbknYlUM9P0qNkzwAAABc"]
[Mon May 25 03:01:39.642511 2026] [:error] [pid 11368:tid 11393] [client 52.242.222.214:6078] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ahNLE4fq_sTmmtTKm1WUDgAAARc"]
[Mon May 25 03:01:40.035736 2026] [:error] [pid 11368:tid 11374] [client 52.242.222.214:6111] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ahNLFIfq_sTmmtTKm1WUDwAAAQQ"]
[Mon May 25 03:01:40.443263 2026] [:error] [pid 11368:tid 11388] [client 52.242.222.214:6131] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ggb.php"] [unique_id "ahNLFIfq_sTmmtTKm1WUEAAAARI"]
[Mon May 25 03:01:40.852934 2026] [:error] [pid 11280:tid 11294] [client 52.242.222.214:31841] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxa.php"] [unique_id "ahNLFIRn5s7laoSxy1RSygAAAEk"]
[Mon May 25 03:01:41.252156 2026] [:error] [pid 11281:tid 11325] [client 52.242.222.214:6023] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxa.php"] [unique_id "ahNLFZKmC9taWvA91j7GawAAAIw"]
[Mon May 25 03:01:41.651160 2026] [:error] [pid 11281:tid 11317] [client 52.242.222.214:6018] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxa.php"] [unique_id "ahNLFZKmC9taWvA91j7GbAAAAIQ"]
[Mon May 25 03:01:42.058050 2026] [:error] [pid 11281:tid 11323] [client 52.242.222.214:6036] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xxa.php"] [unique_id "ahNLFpKmC9taWvA91j7GbgAAAIo"]
[Mon May 25 03:01:42.435734 2026] [:error] [pid 11281:tid 11328] [client 52.242.222.214:6100] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aj11.php"] [unique_id "ahNLFpKmC9taWvA91j7GcQAAAI8"]
[Mon May 25 03:01:42.845073 2026] [:error] [pid 11280:tid 11299] [client 52.242.222.214:6117] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aj11.php"] [unique_id "ahNLFoRn5s7laoSxy1RSywAAAE4"]
[Mon May 25 03:01:43.246941 2026] [:error] [pid 15835:tid 15858] [client 52.242.222.214:5968] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aj11.php"] [unique_id "ahNLF2WbknYlUM9P0qNk2AAAABU"]
[Mon May 25 03:01:43.626680 2026] [:error] [pid 15835:tid 15844] [client 52.242.222.214:6092] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/aj11.php"] [unique_id "ahNLF2WbknYlUM9P0qNk2wAAAAc"]
[Mon May 25 03:01:44.049751 2026] [:error] [pid 15835:tid 15854] [client 52.242.222.214:6137] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ahNLGGWbknYlUM9P0qNk3AAAABE"]
[Mon May 25 03:01:44.491894 2026] [:error] [pid 15835:tid 15849] [client 52.242.222.214:6103] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ahNLGGWbknYlUM9P0qNk4AAAAAw"]
[Mon May 25 03:01:44.928232 2026] [:error] [pid 11368:tid 11379] [client 52.242.222.214:6063] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ahNLGIfq_sTmmtTKm1WUFwAAAQk"]
[Mon May 25 03:01:45.363300 2026] [:error] [pid 11368:tid 11387] [client 52.242.222.214:6020] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/fs.php"] [unique_id "ahNLGYfq_sTmmtTKm1WUGAAAARE"]
[Mon May 25 03:01:45.768088 2026] [:error] [pid 11282:tid 11349] [client 52.242.222.214:5956] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ahNLGe0bPyN3C7HZ1R_xkQAAAMk"]
[Mon May 25 03:01:46.180453 2026] [:error] [pid 11282:tid 11353] [client 52.242.222.214:6071] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ahNLGu0bPyN3C7HZ1R_xlQAAAM0"]
[Mon May 25 03:01:46.597851 2026] [:error] [pid 15835:tid 15861] [client 52.242.222.214:5952] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2.php"] [unique_id "ahNLGmWbknYlUM9P0qNk6AAAABg"]
[Mon May 25 03:02:09.795393 2026] [:error] [pid 15835:tid 15844] [client 52.242.222.214:31781] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "ahNLMWWbknYlUM9P0qNlKQAAAAc"]
[Mon May 25 03:02:10.211375 2026] [:error] [pid 11282:tid 11363] [client 52.242.222.214:6034] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "ahNLMu0bPyN3C7HZ1R_xwAAAANc"]
[Mon May 25 03:02:10.611621 2026] [:error] [pid 15835:tid 15850] [client 52.242.222.214:5888] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "ahNLMmWbknYlUM9P0qNlLQAAAA0"]
[Mon May 25 03:02:11.061684 2026] [:error] [pid 11282:tid 11359] [client 52.242.222.214:6041] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/2026w.php"] [unique_id "ahNLM-0bPyN3C7HZ1R_xwgAAANM"]
[Mon May 25 03:02:11.445660 2026] [:error] [pid 11282:tid 11362] [client 52.242.222.214:6033] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ahNLM-0bPyN3C7HZ1R_xxAAAANY"]
[Mon May 25 03:02:11.863294 2026] [:error] [pid 15835:tid 15847] [client 52.242.222.214:6115] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ahNLM2WbknYlUM9P0qNlMgAAAAo"]
[Mon May 25 03:02:12.276011 2026] [:error] [pid 15835:tid 15845] [client 52.242.222.214:6105] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ahNLNGWbknYlUM9P0qNlNgAAAAg"]
[Mon May 25 03:02:12.684039 2026] [:error] [pid 15835:tid 15841] [client 52.242.222.214:6104] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/f35.php"] [unique_id "ahNLNGWbknYlUM9P0qNlPgAAAAQ"]
[Mon May 25 03:02:13.089918 2026] [:error] [pid 15835:tid 15859] [client 52.242.222.214:6045] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "ahNLNWWbknYlUM9P0qNlSgAAABY"]
[Mon May 25 03:02:13.526524 2026] [:error] [pid 15835:tid 15849] [client 52.242.222.214:5969] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "ahNLNWWbknYlUM9P0qNlUAAAAAw"]
[Mon May 25 03:02:13.965820 2026] [:error] [pid 11368:tid 11393] [client 52.242.222.214:6105] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "ahNLNYfq_sTmmtTKm1WUKQAAARc"]
[Mon May 25 03:02:14.361359 2026] [:error] [pid 15835:tid 15844] [client 52.242.222.214:31801] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xwx1.php"] [unique_id "ahNLNmWbknYlUM9P0qNlUwAAAAc"]
[Mon May 25 03:02:14.787306 2026] [:error] [pid 11368:tid 11377] [client 52.242.222.214:6050] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "ahNLNofq_sTmmtTKm1WULgAAAQc"]
[Mon May 25 03:02:15.177705 2026] [:error] [pid 11282:tid 11353] [client 52.242.222.214:6121] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "ahNLN-0bPyN3C7HZ1R_x2AAAAM0"]
[Mon May 25 03:02:15.584863 2026] [:error] [pid 11281:tid 11324] [client 52.242.222.214:5989] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "ahNLN5KmC9taWvA91j7GgwAAAIs"]
[Mon May 25 03:02:16.023616 2026] [:error] [pid 11368:tid 11382] [client 52.242.222.214:6106] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xmu.php"] [unique_id "ahNLOIfq_sTmmtTKm1WUMAAAAQw"]
[Mon May 25 03:02:16.430942 2026] [:error] [pid 11281:tid 11321] [client 52.242.222.214:6037] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "ahNLOJKmC9taWvA91j7GhQAAAIg"]
[Mon May 25 03:02:16.828180 2026] [:error] [pid 11280:tid 11308] [client 52.242.222.214:5960] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "ahNLOIRn5s7laoSxy1RS-AAAAFc"]
[Mon May 25 03:02:17.237942 2026] [:error] [pid 11282:tid 11355] [client 52.242.222.214:5979] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "ahNLOe0bPyN3C7HZ1R_x3QAAAM8"]
[Mon May 25 03:02:17.637089 2026] [:error] [pid 11282:tid 11363] [client 52.242.222.214:6030] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/simple.php"] [unique_id "ahNLOe0bPyN3C7HZ1R_x3gAAANc"]
[Mon May 25 03:02:18.078285 2026] [:error] [pid 11282:tid 11342] [client 52.242.222.214:6110] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "ahNLOu0bPyN3C7HZ1R_x4AAAAMI"]
[Mon May 25 03:02:18.473889 2026] [:error] [pid 11368:tid 11380] [client 52.242.222.214:5975] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "ahNLOofq_sTmmtTKm1WUMwAAAQo"]
[Mon May 25 03:02:18.886483 2026] [:error] [pid 11282:tid 11360] [client 52.242.222.214:6048] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "ahNLOu0bPyN3C7HZ1R_x5QAAANQ"]
[Mon May 25 03:02:19.280286 2026] [:error] [pid 11280:tid 11309] [client 52.242.222.214:6039] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ayk.php"] [unique_id "ahNLO4Rn5s7laoSxy1RS_AAAAFg"]
[Mon May 25 03:02:19.674951 2026] [:error] [pid 11282:tid 11341] [client 52.242.222.214:31787] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gecko.php"] [unique_id "ahNLO-0bPyN3C7HZ1R_x6QAAAME"]
[Mon May 25 03:02:20.092313 2026] [:error] [pid 11281:tid 11333] [client 52.242.222.214:6133] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gecko.php"] [unique_id "ahNLPJKmC9taWvA91j7GigAAAJQ"]
[Mon May 25 03:02:20.498897 2026] [:error] [pid 11282:tid 11353] [client 52.242.222.214:6141] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gecko.php"] [unique_id "ahNLPO0bPyN3C7HZ1R_x6gAAAM0"]
[Mon May 25 03:02:20.895635 2026] [:error] [pid 11280:tid 11297] [client 52.242.222.214:5963] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/gecko.php"] [unique_id "ahNLPIRn5s7laoSxy1RS_wAAAEw"]
[Mon May 25 03:02:21.313780 2026] [:error] [pid 11368:tid 11376] [client 52.242.222.214:5891] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "ahNLPYfq_sTmmtTKm1WUNQAAAQY"]
[Mon May 25 03:02:21.730198 2026] [:error] [pid 11280:tid 11295] [client 52.242.222.214:5981] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "ahNLPYRn5s7laoSxy1RTAQAAAEo"]
[Mon May 25 03:02:22.161269 2026] [:error] [pid 11368:tid 11394] [client 52.242.222.214:5972] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "ahNLPofq_sTmmtTKm1WUNgAAARg"]
[Mon May 25 03:02:22.551101 2026] [:error] [pid 11368:tid 11393] [client 52.242.222.214:6122] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/wpxml.php"] [unique_id "ahNLPofq_sTmmtTKm1WUNwAAARc"]
[Mon May 25 03:02:22.952676 2026] [:error] [pid 11368:tid 11391] [client 52.242.222.214:31785] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ahNLPofq_sTmmtTKm1WUOQAAARU"]
[Mon May 25 03:02:23.333133 2026] [:error] [pid 11368:tid 11375] [client 52.242.222.214:5992] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ahNLP4fq_sTmmtTKm1WUOwAAAQU"]
[Mon May 25 03:02:23.771776 2026] [:error] [pid 11282:tid 11356] [client 52.242.222.214:6077] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ahNLP-0bPyN3C7HZ1R_x8wAAANA"]
[Mon May 25 03:02:24.175833 2026] [:error] [pid 15835:tid 15855] [client 52.242.222.214:6062] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/zo.php"] [unique_id "ahNLQGWbknYlUM9P0qNlWwAAABI"]
[Mon May 25 03:02:24.636089 2026] [:error] [pid 11368:tid 11382] [client 52.242.222.214:6043] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ahNLQIfq_sTmmtTKm1WUPgAAAQw"]
[Mon May 25 03:02:25.012805 2026] [:error] [pid 15835:tid 15858] [client 52.242.222.214:5900] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ahNLQWWbknYlUM9P0qNlXgAAABU"]
[Mon May 25 03:02:25.404051 2026] [:error] [pid 11280:tid 11303] [client 52.242.222.214:6072] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ahNLQYRn5s7laoSxy1RTBAAAAFI"]
[Mon May 25 03:02:25.803675 2026] [:error] [pid 11368:tid 11384] [client 52.242.222.214:6047] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/sky.php"] [unique_id "ahNLQYfq_sTmmtTKm1WUQgAAAQ4"]
[Mon May 25 03:02:26.262144 2026] [:error] [pid 11282:tid 11354] [client 52.242.222.214:6061] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ahNLQu0bPyN3C7HZ1R_x9gAAAM4"]
[Mon May 25 03:02:26.658868 2026] [:error] [pid 15835:tid 15846] [client 52.242.222.214:6022] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ahNLQmWbknYlUM9P0qNlYAAAAAk"]
[Mon May 25 03:02:27.067389 2026] [:error] [pid 11368:tid 11386] [client 52.242.222.214:6076] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ahNLQ4fq_sTmmtTKm1WURAAAARA"]
[Mon May 25 03:02:27.471464 2026] [:error] [pid 15835:tid 15853] [client 52.242.222.214:6005] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/rh.php"] [unique_id "ahNLQ2WbknYlUM9P0qNlZQAAABA"]
[Mon May 25 03:02:27.886156 2026] [:error] [pid 11281:tid 11333] [client 52.242.222.214:5929] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahNLQ5KmC9taWvA91j7GlAAAAJQ"]
[Mon May 25 03:02:28.276612 2026] [:error] [pid 11281:tid 11313] [client 52.242.222.214:5896] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahNLRJKmC9taWvA91j7GlgAAAIA"]
[Mon May 25 03:02:28.695114 2026] [:error] [pid 11281:tid 11319] [client 52.242.222.214:5921] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahNLRJKmC9taWvA91j7GmQAAAIY"]
[Mon May 25 03:02:29.088967 2026] [:error] [pid 11282:tid 11359] [client 52.242.222.214:5937] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/ortasekerli1.php"] [unique_id "ahNLRe0bPyN3C7HZ1R_x9wAAANM"]
[Mon May 25 03:02:29.515101 2026] [:error] [pid 11281:tid 11337] [client 52.242.222.214:6070] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xstelth.php"] [unique_id "ahNLRZKmC9taWvA91j7GnQAAAJg"]
[Mon May 25 03:02:29.943004 2026] [:error] [pid 11281:tid 11324] [client 52.242.222.214:5927] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xstelth.php"] [unique_id "ahNLRZKmC9taWvA91j7GnwAAAIs"]
[Mon May 25 03:02:30.371068 2026] [:error] [pid 11282:tid 11347] [client 52.242.222.214:6079] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xstelth.php"] [unique_id "ahNLRu0bPyN3C7HZ1R_x-gAAAMc"]
[Mon May 25 03:02:30.812027 2026] [:error] [pid 11368:tid 11375] [client 52.242.222.214:6004] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/xstelth.php"] [unique_id "ahNLRofq_sTmmtTKm1WUSAAAAQU"]
[Mon May 25 03:02:31.202861 2026] [:error] [pid 11282:tid 11345] [client 52.242.222.214:6007] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3369.php"] [unique_id "ahNLR-0bPyN3C7HZ1R_x_AAAAMU"]
[Mon May 25 03:02:31.634727 2026] [:error] [pid 15835:tid 15860] [client 52.242.222.214:6074] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3369.php"] [unique_id "ahNLR2WbknYlUM9P0qNlbAAAABc"]
[Mon May 25 03:02:32.035037 2026] [:error] [pid 11368:tid 11384] [client 52.242.222.214:5988] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3369.php"] [unique_id "ahNLSIfq_sTmmtTKm1WUSwAAAQ4"]
[Mon May 25 03:02:32.432264 2026] [:error] [pid 11282:tid 11352] [client 52.242.222.214:6008] [client 52.242.222.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "end2end.hostone.com.au"] [uri "/3369.php"] [unique_id "ahNLSO0bPyN3C7HZ1R_x_QAAAMw"]
[Mon May 25 03:07:51.449332 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.449364 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:53.204916 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:53.204942 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.384645 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.384673 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.598651 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.598685 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.611932 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.611959 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.454512 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.454538 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:46.252615 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:46.252640 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.703688 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.703716 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.395853 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.395879 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.676438 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.676466 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.433336 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.433373 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.384586 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.384629 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:05.101311 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:05.101338 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:15.197846 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:15.197874 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:21.283768 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:21.283833 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.750506 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.750552 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:58.134568 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:58.134595 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 18:00:34.290905 2026] [authz_core:error] [pid 62722:tid 62743] [client 35.199.156.218:60336] AH01630: client denied by server configuration: /home/end2endh/public_html/wp-includes/ID3/license.txt
[Mon May 25 18:00:40.807642 2026] [:error] [pid 62722:tid 62725] [client 35.199.156.218:60336] [client 35.199.156.218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||end2end.hostone.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "end2end.hostone.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahQdyKM6ssnLWYf6CVA1oQAAAEE"]
[Mon May 25 18:00:42.333203 2026] [:error] [pid 62722:tid 62740] [client 35.199.156.218:60336] [client 35.199.156.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.199.156.218, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQdyqM6ssnLWYf6CVA1owAAAFA"]
[Mon May 25 18:00:42.333659 2026] [authz_core:error] [pid 62722:tid 62740] [client 35.199.156.218:60336] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Mon May 25 18:00:44.310893 2026] [:error] [pid 62722:tid 62729] [client 35.199.156.218:60336] [client 35.199.156.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.199.156.218, incrementing ddos counter"] [hostname "end2end.hostone.com.au"] [uri "/xmlrpc.php"] [unique_id "ahQdzKM6ssnLWYf6CVA1pQAAAEU"]
[Mon May 25 18:00:44.311393 2026] [authz_core:error] [pid 62722:tid 62729] [client 35.199.156.218:60336] AH01630: client denied by server configuration: /home/end2endh/public_html/xmlrpc.php
[Tue May 26 03:08:48.684897 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:48.684937 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:51.272043 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:51.272071 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.685437 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.685463 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.603495 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.603521 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.760017 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.760043 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.507565 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.507591 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:50.364700 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:50.364729 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:48.991194 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:48.991221 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.721226 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.721283 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.825300 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.825327 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.575889 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.575917 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:26:01.151698 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:26:01.151731 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:07.123280 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:07.123307 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.550212 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: end2end.hostone.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.550273 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: end2end.hostone.com.au:443:0 server certificate does NOT include an ID which matches the server name