[Tue Nov 11 00:49:28.344381 2025] [proxy_fcgi:error] [pid 17139:tid 17158] (70007)The timeout specified has expired: [client 91.92.242.56:50865] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:50:29.190411 2025] [proxy_fcgi:error] [pid 17139:tid 17145] (70007)The timeout specified has expired: [client 91.92.242.56:50865] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:04:31.309395 2025] [proxy_fcgi:error] [pid 41839:tid 41926] (70007)The timeout specified has expired: [client 91.92.242.56:63019] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:05:32.170254 2025] [proxy_fcgi:error] [pid 41839:tid 41919] (70007)The timeout specified has expired: [client 91.92.242.56:63019] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:06:33.016388 2025] [proxy_fcgi:error] [pid 41839:tid 41919] (70007)The timeout specified has expired: [client 91.92.242.56:63019] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:07:35.113501 2025] [proxy_fcgi:error] [pid 31985:tid 32013] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:08:35.960408 2025] [proxy_fcgi:error] [pid 31985:tid 32011] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:09:36.818362 2025] [proxy_fcgi:error] [pid 31985:tid 32018] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:10:37.670556 2025] [proxy_fcgi:error] [pid 31985:tid 32011] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:11:38.524373 2025] [proxy_fcgi:error] [pid 31985:tid 32034] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:12:39.376370 2025] [proxy_fcgi:error] [pid 31985:tid 32014] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:13:40.252418 2025] [proxy_fcgi:error] [pid 31985:tid 32024] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:14:41.099388 2025] [proxy_fcgi:error] [pid 31985:tid 32026] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:15:41.952008 2025] [proxy_fcgi:error] [pid 31985:tid 32016] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:16:42.801368 2025] [proxy_fcgi:error] [pid 31985:tid 32032] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:17:43.653367 2025] [proxy_fcgi:error] [pid 31985:tid 32010] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:18:44.501542 2025] [proxy_fcgi:error] [pid 31985:tid 32029] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:19:45.358464 2025] [proxy_fcgi:error] [pid 31985:tid 32024] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:20:46.221386 2025] [proxy_fcgi:error] [pid 31985:tid 32014] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:21:47.069369 2025] [proxy_fcgi:error] [pid 31985:tid 32032] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:22:47.934420 2025] [proxy_fcgi:error] [pid 31985:tid 32029] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:23:48.789478 2025] [proxy_fcgi:error] [pid 31985:tid 32025] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:24:49.641389 2025] [proxy_fcgi:error] [pid 31985:tid 32017] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:25:50.492431 2025] [proxy_fcgi:error] [pid 31985:tid 32016] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:26:51.372377 2025] [proxy_fcgi:error] [pid 31985:tid 32030] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:27:52.222597 2025] [proxy_fcgi:error] [pid 31985:tid 32014] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:28:53.084392 2025] [proxy_fcgi:error] [pid 31985:tid 32032] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:29:53.930377 2025] [proxy_fcgi:error] [pid 31985:tid 32012] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:29:54.717075 2025] [:error] [pid 31985:tid 32025] [client 91.92.242.56:49988] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||funnyemuart.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "funnyemuart.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRIhEpeXIbTtCYJNJFCFcgAAARA"]
[Tue Nov 11 01:30:55.568490 2025] [proxy_fcgi:error] [pid 31985:tid 32029] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:31:56.428379 2025] [proxy_fcgi:error] [pid 31985:tid 32032] (70007)The timeout specified has expired: [client 91.92.242.56:49988] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:51:08.689146 2025] [:error] [pid 24354:tid 24380] [client 91.92.242.56:56641] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRImDCiUwEIL0MTd44PiLgAAApY"]
[Tue Nov 11 01:54:44.306226 2025] [:error] [pid 24554:tid 24567] [client 91.92.242.56:65226] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRIm5Bbgcg5JFvN-BGV57wAAAsk"]
[Tue Nov 11 01:54:45.384064 2025] [:error] [pid 24225:tid 24245] [client 91.92.242.56:50702] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRIm5Z2rrdiHvhXEioV91wAAAkw"]
[Tue Nov 11 01:54:47.512482 2025] [:error] [pid 24225:tid 24249] [client 91.92.242.56:56550] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRIm552rrdiHvhXEioV94AAAAlA"]
[Tue Nov 11 01:54:48.635186 2025] [:error] [pid 24225:tid 24245] [client 91.92.242.56:57782] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIm6J2rrdiHvhXEioV95AAAAkw"]
[Tue Nov 11 01:54:49.828407 2025] [:error] [pid 24225:tid 24249] [client 91.92.242.56:55821] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRIm6Z2rrdiHvhXEioV95gAAAlA"]
[Tue Nov 11 01:54:50.925545 2025] [:error] [pid 41825:tid 41899] [client 91.92.242.56:63142] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIm6or5hkwmQG_pQgAZ5AAAAEw"]
[Tue Nov 11 01:54:52.010210 2025] [:error] [pid 24225:tid 24251] [client 91.92.242.56:57017] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIm7J2rrdiHvhXEioV96AAAAlI"]
[Tue Nov 11 01:54:53.080105 2025] [:error] [pid 24554:tid 24577] [client 91.92.242.56:51273] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRIm7Rbgcg5JFvN-BGV59gAAAtM"]
[Tue Nov 11 01:54:54.147087 2025] [:error] [pid 24554:tid 24559] [client 91.92.242.56:59473] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRIm7hbgcg5JFvN-BGV59wAAAsE"]
[Tue Nov 11 04:59:47.819225 2025] [:error] [pid 43435:tid 43464] [client 152.42.168.23:54680] [client 152.42.168.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/sftp-config.json"] [unique_id "aRJSQ2eCenDmgzLwDULXtQAAABg"]
[Tue Nov 11 06:38:36.727259 2025] [autoindex:error] [pid 57437:tid 57462] [client 196.251.85.129:55756] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 08:03:16.554407 2025] [proxy_fcgi:error] [pid 33888:tid 33901] (70007)The timeout specified has expired: [client 91.92.242.56:56410] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:05:34.239592 2025] [:error] [pid 18828:tid 18845] [client 91.92.242.56:64680] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||funnyemuart.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "funnyemuart.com.au"] [uri "/wp-content/debug.log"] [unique_id "aRJ9zhPP-hmbFD1dOrqT5gAAAM4"]
[Tue Nov 11 08:06:35.097420 2025] [proxy_fcgi:error] [pid 18828:tid 18841] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:07:35.952404 2025] [proxy_fcgi:error] [pid 18828:tid 18838] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:08:36.810745 2025] [proxy_fcgi:error] [pid 18828:tid 18843] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:09:37.664383 2025] [proxy_fcgi:error] [pid 18828:tid 18846] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:10:38.526387 2025] [proxy_fcgi:error] [pid 18828:tid 18842] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:11:39.384390 2025] [proxy_fcgi:error] [pid 18828:tid 18853] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:12:40.237423 2025] [proxy_fcgi:error] [pid 18828:tid 18849] (70007)The timeout specified has expired: [client 91.92.242.56:64680] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:15:32.982414 2025] [proxy_fcgi:error] [pid 57437:tid 57452] (70007)The timeout specified has expired: [client 91.92.242.56:56063] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:18:07.386782 2025] [proxy_fcgi:error] [pid 57437:tid 57461] (70007)The timeout specified has expired: [client 91.92.242.56:56063] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:32:22.864423 2025] [proxy_fcgi:error] [pid 19756:tid 19778] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:33:23.727363 2025] [proxy_fcgi:error] [pid 19756:tid 19760] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:34:24.583439 2025] [proxy_fcgi:error] [pid 19756:tid 19761] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:35:25.448950 2025] [proxy_fcgi:error] [pid 19756:tid 19775] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:36:26.325323 2025] [proxy_fcgi:error] [pid 19756:tid 19758] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:37:27.755434 2025] [proxy_fcgi:error] [pid 19756:tid 19768] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:38:28.609648 2025] [proxy_fcgi:error] [pid 19756:tid 19761] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:39:29.509401 2025] [proxy_fcgi:error] [pid 19756:tid 19774] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:40:31.350402 2025] [proxy_fcgi:error] [pid 19756:tid 19773] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:41:32.230558 2025] [proxy_fcgi:error] [pid 19756:tid 19781] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:42:33.085377 2025] [proxy_fcgi:error] [pid 19756:tid 19765] (70007)The timeout specified has expired: [client 91.92.242.56:58357] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 12:07:01.399626 2025] [:error] [pid 59670:tid 59697] [client 213.209.143.137:59523] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aRK2Zak2Cnts0y-hpfqxrQAAAJg"]
[Tue Nov 11 12:07:01.920131 2025] [:error] [pid 53355:tid 53382] [client 213.209.143.137:58415] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aRK2ZYB5X5A3rMc4_nD5CQAAABg"]
[Tue Nov 11 12:07:02.440566 2025] [:error] [pid 53355:tid 53380] [client 213.209.143.137:50996] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aRK2ZoB5X5A3rMc4_nD5DwAAABY"]
[Tue Nov 11 12:07:02.983013 2025] [:error] [pid 53449:tid 53458] [client 213.209.143.137:60527] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/motors/CHANGELOG.md"] [unique_id "aRK2Ztpz08j5NoUSzp_raAAAAUQ"]
[Tue Nov 11 14:39:09.618114 2025] [:error] [pid 53449:tid 53466] [client 104.131.180.96:41352] [client 104.131.180.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRLaDdpz08j5NoUSzp8ptAAAAUw"]
[Tue Nov 11 14:39:10.903435 2025] [:error] [pid 53355:tid 53373] [client 104.131.180.96:40252] [client 104.131.180.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRLaDoB5X5A3rMc4_nAuYAAAAA8"]
[Tue Nov 11 15:13:54.877765 2025] [:error] [pid 53449:tid 53477] [client 182.48.210.180:58539] [client 182.48.210.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.180, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLiMtpz08j5NoUSzp83BgAAAVc"]
[Tue Nov 11 15:17:19.581217 2025] [:error] [pid 59670:tid 59684] [client 182.48.210.180:58346] [client 182.48.210.180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRLi_6k2Cnts0y-hpfoR-gAAAIs"]
[Tue Nov 11 15:18:29.169615 2025] [:error] [pid 59670:tid 59697] [client 182.48.210.180:27942] [client 182.48.210.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.180, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLjRak2Cnts0y-hpfoSZQAAAJg"]
[Tue Nov 11 15:19:30.490141 2025] [:error] [pid 53356:tid 53398] [client 182.48.210.180:27341] [client 182.48.210.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.180, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLjgukdmt0kzjVcUN-pQwAAAE0"]
[Tue Nov 11 15:20:36.774234 2025] [:error] [pid 59670:tid 59693] [client 182.48.210.180:27765] [client 182.48.210.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.180, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLjxKk2Cnts0y-hpfoToAAAAJQ"]
[Tue Nov 11 15:22:02.471773 2025] [:error] [pid 53355:tid 53368] [client 182.48.210.180:27874] [client 182.48.210.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.180, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLkGoB5X5A3rMc4_nA8ygAAAAo"]
[Tue Nov 11 19:28:56.602289 2025] [:error] [pid 43205:tid 43217] [client 45.153.34.41:46824] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRMd-L48SbhIkX6TjwOGjQAAAQk"]
[Tue Nov 11 19:29:30.630471 2025] [:error] [pid 43205:tid 43230] [client 104.131.180.96:38828] [client 104.131.180.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRMeGr48SbhIkX6TjwOGsgAAARY"]
[Tue Nov 11 19:29:36.951279 2025] [:error] [pid 36580:tid 36656] [client 104.131.180.96:57160] [client 104.131.180.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRMeIJaaFQZGE3H9yOHNHgAAAFI"]
[Tue Nov 11 19:46:59.391422 2025] [:error] [pid 43205:tid 43230] [client 45.153.34.41:38612] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRMiM748SbhIkX6TjwOMWAAAARY"]
[Tue Nov 11 21:00:52.724179 2025] [:error] [pid 43205:tid 43216] [client 213.209.143.137:53087] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRMzhL48SbhIkX6TjwOnowAAAQg"]
[Tue Nov 11 21:01:01.087384 2025] [:error] [pid 36579:tid 36631] [client 213.209.143.137:53794] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRMzjemuedRSntjwLw6UAAAAABQ"]
[Tue Nov 11 21:01:04.741430 2025] [:error] [pid 43205:tid 43231] [client 213.209.143.137:57414] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aRMzkL48SbhIkX6TjwOntAAAARc"]
[Tue Nov 11 22:10:28.457808 2025] [:error] [pid 47859:tid 47873] [client 213.209.143.137:63995] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND1KRzLR7egYHK_4d59AAAAAk"]
[Tue Nov 11 22:10:28.980255 2025] [:error] [pid 47860:tid 47903] [client 213.209.143.137:51700] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND1KPe6bkmJWx80CzSMgAAAEw"]
[Tue Nov 11 22:10:29.501082 2025] [:error] [pid 47860:tid 47909] [client 213.209.143.137:55064] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND1aPe6bkmJWx80CzSNgAAAFI"]
[Tue Nov 11 22:28:42.934577 2025] [:error] [pid 47964:tid 47969] [client 104.131.180.96:34512] [client 104.131.180.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRNIGl6CQC3ebUS5pkQMgQAAAYI"]
[Tue Nov 11 22:28:44.833161 2025] [:error] [pid 47964:tid 47979] [client 104.131.180.96:53798] [client 104.131.180.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRNIHF6CQC3ebUS5pkQMiAAAAYw"]
[Wed Nov 12 04:19:51.274811 2025] [:error] [pid 57312:tid 57326] [client 213.209.143.137:49171] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aROaZ40cuHgB17JK5qWdkgAAAMk"]
[Wed Nov 12 04:19:51.780127 2025] [:error] [pid 57223:tid 57260] [client 213.209.143.137:55137] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aROaZxUU8_2aS__aG8YtAAAAAEM"]
[Wed Nov 12 04:19:52.287469 2025] [:error] [pid 57224:tid 57305] [client 213.209.143.137:58518] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aROaaBs7oZ7imwCSdAnmpQAAAJU"]
[Wed Nov 12 04:19:52.789491 2025] [:error] [pid 57312:tid 57325] [client 213.209.143.137:61207] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/wp-event-solution/readme.txt"] [unique_id "aROaaI0cuHgB17JK5qWdmwAAAMg"]
[Wed Nov 12 13:02:57.189318 2025] [:error] [pid 60095:tid 60118] [client 209.97.180.8:36272] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/@vite/env"] [unique_id "aRQVAXlw2elroagFF1rYeQAAAFM"]
[Wed Nov 12 13:02:57.917217 2025] [:error] [pid 60097:tid 60166] [client 209.97.180.8:42032] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/actuator/env"] [unique_id "aRQVAcdT5oio_TbWpi8W7wAAAM0"]
[Wed Nov 12 13:02:58.643182 2025] [:error] [pid 60180:tid 60206] [client 209.97.180.8:42034] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQVAlhgd7ccS8EZg1rXDQAAAVg"]
[Wed Nov 12 13:02:59.371755 2025] [:error] [pid 12744:tid 12771] [client 209.97.180.8:42036] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/server"] [unique_id "aRQVA51cp_ouUvkFj0XIrQAAARc"]
[Wed Nov 12 13:03:00.107256 2025] [:error] [pid 60096:tid 60157] [client 209.97.180.8:42038] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQVBDmzkhCvvk8DXOxAmAAAAJc"]
[Wed Nov 12 13:03:00.834390 2025] [:error] [pid 60096:tid 60134] [client 209.97.180.8:42048] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/about"] [unique_id "aRQVBDmzkhCvvk8DXOxAmQAAAIg"]
[Wed Nov 12 13:03:01.558542 2025] [:error] [pid 60097:tid 60172] [client 209.97.180.8:42052] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/debug/default/view"] [unique_id "aRQVBcdT5oio_TbWpi8W9QAAANM"]
[Wed Nov 12 13:03:02.283000 2025] [:error] [pid 60405:tid 60412] [client 209.97.180.8:42058] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/v2/_catalog"] [unique_id "aRQVBnMGv_mlVi6mf5qPsQAAAAQ"]
[Wed Nov 12 13:03:03.011049 2025] [:error] [pid 60405:tid 60428] [client 209.97.180.8:42070] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQVB3MGv_mlVi6mf5qPsgAAABQ"]
[Wed Nov 12 13:03:03.737150 2025] [:error] [pid 60405:tid 60418] [client 209.97.180.8:42080] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/server-status"] [unique_id "aRQVB3MGv_mlVi6mf5qPtAAAAAo"]
[Wed Nov 12 13:03:04.465152 2025] [:error] [pid 60095:tid 60122] [client 209.97.180.8:42092] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/login.action"] [unique_id "aRQVCHlw2elroagFF1rYggAAAFc"]
[Wed Nov 12 13:03:07.757573 2025] [:error] [pid 60180:tid 60201] [client 209.97.180.8:48614] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aRQVC1hgd7ccS8EZg1rXGwAAAVM"]
[Wed Nov 12 13:03:08.485295 2025] [:error] [pid 60405:tid 60425] [client 209.97.180.8:48626] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aRQVDHMGv_mlVi6mf5qPuQAAABE"]
[Wed Nov 12 13:03:09.210434 2025] [:error] [pid 60180:tid 60205] [client 209.97.180.8:48642] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRQVDVhgd7ccS8EZg1rXHQAAAVc"]
[Wed Nov 12 13:03:09.959194 2025] [:error] [pid 60405:tid 60413] [client 209.97.180.8:48656] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQVDXMGv_mlVi6mf5qPuwAAAAU"]
[Wed Nov 12 13:03:10.689435 2025] [:error] [pid 60405:tid 60419] [client 209.97.180.8:48666] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/config.json"] [unique_id "aRQVDnMGv_mlVi6mf5qPvAAAAAs"]
[Wed Nov 12 13:03:11.414331 2025] [:error] [pid 60096:tid 60128] [client 209.97.180.8:48680] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aRQVDzmzkhCvvk8DXOxApwAAAII"]
[Wed Nov 12 13:03:12.135534 2025] [:error] [pid 60097:tid 60166] [client 209.97.180.8:48692] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aRQVEMdT5oio_TbWpi8XAwAAAM0"]
[Wed Nov 12 13:03:12.860246 2025] [:error] [pid 60405:tid 60424] [client 209.97.180.8:48696] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRQVEHMGv_mlVi6mf5qPwAAAABA"]
[Wed Nov 12 14:02:26.678148 2025] [:error] [pid 60097:tid 60154] [client 1.201.162.20:51768] [client 1.201.162.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aRQi8sdT5oio_TbWpi8s2AAAAMY"]
[Wed Nov 12 14:02:28.103972 2025] [:error] [pid 60097:tid 60152] [client 1.201.162.20:52184] [client 1.201.162.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/api/.env"] [unique_id "aRQi9MdT5oio_TbWpi8s3gAAAMU"]
[Wed Nov 12 14:02:29.561015 2025] [:error] [pid 60097:tid 60170] [client 1.201.162.20:52628] [client 1.201.162.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/env/.env"] [unique_id "aRQi9cdT5oio_TbWpi8s4AAAANE"]
[Wed Nov 12 15:31:02.589453 2025] [:error] [pid 12744:tid 12748] [client 128.199.182.55:44576] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/@vite/env"] [unique_id "aRQ3tp1cp_ouUvkFj0UM6gAAAQA"]
[Wed Nov 12 15:31:02.857348 2025] [:error] [pid 60180:tid 60204] [client 128.199.182.55:44590] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/actuator/env"] [unique_id "aRQ3tlhgd7ccS8EZg1oIXQAAAVY"]
[Wed Nov 12 15:31:03.118414 2025] [:error] [pid 60405:tid 60431] [client 128.199.182.55:44596] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQ3t3MGv_mlVi6mf5rCzQAAABc"]
[Wed Nov 12 15:31:03.378377 2025] [:error] [pid 60095:tid 60108] [client 128.199.182.55:44604] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/server"] [unique_id "aRQ3t3lw2elroagFF1oCqAAAAEk"]
[Wed Nov 12 15:31:03.638711 2025] [:error] [pid 60180:tid 60190] [client 128.199.182.55:44608] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRQ3t1hgd7ccS8EZg1oIXgAAAUg"]
[Wed Nov 12 15:31:03.902305 2025] [:error] [pid 60095:tid 60115] [client 128.199.182.55:44624] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/about"] [unique_id "aRQ3t3lw2elroagFF1oCqgAAAFA"]
[Wed Nov 12 15:31:04.163011 2025] [:error] [pid 60405:tid 60423] [client 128.199.182.55:44628] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/debug/default/view"] [unique_id "aRQ3uHMGv_mlVi6mf5rCzgAAAA8"]
[Wed Nov 12 15:31:04.423287 2025] [:error] [pid 60180:tid 60192] [client 128.199.182.55:44644] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/v2/_catalog"] [unique_id "aRQ3uFhgd7ccS8EZg1oIYAAAAUo"]
[Wed Nov 12 15:31:04.683635 2025] [:error] [pid 60180:tid 60185] [client 128.199.182.55:44658] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQ3uFhgd7ccS8EZg1oIYQAAAUM"]
[Wed Nov 12 15:31:04.943552 2025] [:error] [pid 12744:tid 12766] [client 128.199.182.55:44666] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/server-status"] [unique_id "aRQ3uJ1cp_ouUvkFj0UM7wAAARI"]
[Wed Nov 12 15:31:05.203397 2025] [:error] [pid 12744:tid 12750] [client 128.199.182.55:44668] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/login.action"] [unique_id "aRQ3uZ1cp_ouUvkFj0UM8AAAAQI"]
[Wed Nov 12 15:31:07.548648 2025] [:error] [pid 12744:tid 12762] [client 128.199.182.55:44690] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aRQ3u51cp_ouUvkFj0UM-AAAAQ4"]
[Wed Nov 12 15:31:07.808654 2025] [:error] [pid 12744:tid 12758] [client 128.199.182.55:44704] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.env"] [unique_id "aRQ3u51cp_ouUvkFj0UM-gAAAQo"]
[Wed Nov 12 15:31:08.068967 2025] [:error] [pid 60097:tid 60169] [client 128.199.182.55:44718] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRQ3vMdT5oio_TbWpi9EwgAAANA"]
[Wed Nov 12 15:31:08.329934 2025] [:error] [pid 60405:tid 60429] [client 128.199.182.55:44732] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQ3vHMGv_mlVi6mf5rC0QAAABU"]
[Wed Nov 12 15:31:08.589880 2025] [:error] [pid 12744:tid 12756] [client 128.199.182.55:44748] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/config.json"] [unique_id "aRQ3vJ1cp_ouUvkFj0UM_QAAAQg"]
[Wed Nov 12 15:31:08.849947 2025] [:error] [pid 60180:tid 60200] [client 128.199.182.55:44762] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aRQ3vFhgd7ccS8EZg1oIZAAAAVI"]
[Wed Nov 12 15:31:09.110361 2025] [:error] [pid 12744:tid 12762] [client 128.199.182.55:44778] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/info.php"] [unique_id "aRQ3vZ1cp_ouUvkFj0UNAQAAAQ4"]
[Wed Nov 12 15:31:09.370104 2025] [:error] [pid 12744:tid 12749] [client 128.199.182.55:44792] [client 128.199.182.55] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.funnyemuart.com.au"] [uri "/"] [unique_id "aRQ3vZ1cp_ouUvkFj0UNAwAAAQE"]
[Thu Nov 13 02:37:07.444402 2025] [:error] [pid 23737:tid 23749] [client 177.91.193.39:62491] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRTT0xQUsVVfOZWgW_U3SAAAAYA"]
[Thu Nov 13 04:58:39.614108 2025] [:error] [pid 51407:tid 51481] [client 177.91.193.39:53277] [client 177.91.193.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRT0_6KnD465ID-ycMKQywAAAJA"]
[Thu Nov 13 05:00:29.145194 2025] [:error] [pid 51491:tid 51511] [client 177.91.193.39:53733] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT1bdQaME15TQuGVKT8OwAAAM8"]
[Thu Nov 13 05:02:09.806274 2025] [:error] [pid 18960:tid 18962] [client 177.91.193.39:58258] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT10YvOP-uT_KFAcQNvxAAAAQA"]
[Thu Nov 13 05:03:30.063826 2025] [:error] [pid 51405:tid 51416] [client 177.91.193.39:56175] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT2IsgQcOoeDKJ17JeefQAAAAU"]
[Thu Nov 13 05:05:09.741021 2025] [:error] [pid 51407:tid 51486] [client 177.91.193.39:64293] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT2haKnD465ID-ycMKVewAAAJU"]
[Thu Nov 13 05:06:40.098430 2025] [:error] [pid 18960:tid 18962] [client 177.91.193.39:61238] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT24IvOP-uT_KFAcQNzZgAAAQA"]
[Thu Nov 13 05:07:59.591559 2025] [:error] [pid 18960:tid 18980] [client 177.91.193.39:62845] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT3L4vOP-uT_KFAcQN0MwAAARI"]
[Thu Nov 13 05:09:27.753120 2025] [:error] [pid 51405:tid 51431] [client 177.91.193.39:50865] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT3h8gQcOoeDKJ17JehpQAAABQ"]
[Thu Nov 13 05:10:58.084218 2025] [:error] [pid 51405:tid 51415] [client 177.91.193.39:61536] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT34sgQcOoeDKJ17Jeh6gAAAAQ"]
[Thu Nov 13 05:12:27.278777 2025] [:error] [pid 51406:tid 51438] [client 177.91.193.39:55037] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT4O3J88_IXhWnPqG9tcAAAAEA"]
[Thu Nov 13 05:13:45.417960 2025] [:error] [pid 51491:tid 51496] [client 177.91.193.39:59937] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT4idQaME15TQuGVKQDQQAAAMA"]
[Thu Nov 13 05:15:13.985509 2025] [:error] [pid 51407:tid 51481] [client 177.91.193.39:64301] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT44aKnD465ID-ycMKY_QAAAJA"]
[Thu Nov 13 05:16:45.732856 2025] [:error] [pid 51407:tid 51485] [client 177.91.193.39:54469] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT5PaKnD465ID-ycMKZTAAAAJQ"]
[Thu Nov 13 05:18:14.079427 2025] [:error] [pid 51491:tid 51520] [client 177.91.193.39:50721] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT5ltQaME15TQuGVKQEJQAAANg"]
[Thu Nov 13 05:19:46.322523 2025] [:error] [pid 30162:tid 30165] [client 177.91.193.39:56790] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT58pYPAuLETx2485WTbQAAAUE"]
[Thu Nov 13 05:21:01.119487 2025] [:error] [pid 51406:tid 51453] [client 177.91.193.39:50747] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT6PXJ88_IXhWnPqG9vVAAAAE8"]
[Thu Nov 13 05:22:14.310091 2025] [:error] [pid 51405:tid 51427] [client 177.91.193.39:63855] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT6hsgQcOoeDKJ17JekSAAAABA"]
[Thu Nov 13 05:23:22.509159 2025] [:error] [pid 30162:tid 30169] [client 177.91.193.39:55717] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT6ypYPAuLETx2485WUVwAAAUU"]
[Thu Nov 13 05:24:29.589866 2025] [:error] [pid 51405:tid 51429] [client 177.91.193.39:50787] [client 177.91.193.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.193.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRT7DcgQcOoeDKJ17Jek2AAAABI"]
[Thu Nov 13 07:32:16.175364 2025] [:error] [pid 22223:tid 22270] [client 45.89.242.99:51567] [client 45.89.242.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aRUZAN6it_tNBGH9EAE3YQAAAFE"]
[Thu Nov 13 22:40:40.065316 2025] [:error] [pid 5086:tid 5099] [client 187.181.224.158:55399] [client 187.181.224.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.181.224.158, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRXt6B_dsYLFCHw574i-zAAAAQo"]
[Fri Nov 14 01:20:09.890387 2025] [autoindex:error] [pid 56495:tid 56520] [client 157.245.63.215:54522] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/plugins/contact-form-7/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 14 10:13:31.645249 2025] [:error] [pid 47155:tid 47196] [client 192.178.4.103:64605] [client 192.178.4.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/video/Daftar%20%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%20pg.html"] [unique_id "aRaQS5ipxRXMZJH8hmhNBAAAAEo"]
[Fri Nov 14 10:13:37.092788 2025] [:error] [pid 47156:tid 47221] [client 192.178.4.103:36915] [client 192.178.4.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/video/Login%20%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%81%E0%B8%A1%20pg.html"] [unique_id "aRaQUdjrQX_P-kC7M_5yHwAAAIc"]
[Fri Nov 14 10:13:41.553352 2025] [:error] [pid 47242:tid 47266] [client 192.178.4.103:46126] [client 192.178.4.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/betting/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20PG%20%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%81%E0%B8%B1%E0%B8%9A%E0%B9%81%E0%B8%AD%E0%B8%94%E0%B8%A1%E0%B8%B4%E0%B8%99.html"] [unique_id "aRaQVVPNnvrux3OMagzpuAAAANU"]
[Fri Nov 14 12:22:44.626030 2025] [:error] [pid 16573:tid 16582] [client 192.178.4.103:51724] [client 192.178.4.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cash/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20168%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%AD%E0%B8%AD%E0%B9%82%E0%B8%95%E0%B9%89.html"] [unique_id "aRaulCPGexfUk9FDoEIelwAAAEQ"]
[Fri Nov 14 12:23:19.952413 2025] [:error] [pid 16573:tid 16583] [client 192.178.4.103:36522] [client 192.178.4.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gambling/%E0%B9%80%E0%B8%97%E0%B8%84%E0%B8%99%E0%B8%B4%E0%B8%84%E0%B9%81%E0%B8%97%E0%B8%87%E0%B9%84%E0%B8%AE%E0%B9%82%E0%B8%A5%20Win.html"] [unique_id "aRautyPGexfUk9FDoEIewwAAAEU"]
[Fri Nov 14 15:31:20.318438 2025] [:error] [pid 16573:tid 16601] [client 45.153.34.41:41398] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRbayCPGexfUk9FDoEJoSwAAAFc"]
[Fri Nov 14 15:36:26.670193 2025] [:error] [pid 16709:tid 16732] [client 206.81.12.187:34966] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRbb-qNdzfVNC4oipLUeNwAAAVU"]
[Fri Nov 14 15:36:27.292108 2025] [:error] [pid 16671:tid 16696] [client 206.81.12.187:34974] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/server"] [unique_id "aRbb-zsoHwEAmeIzZXAfAAAAARM"]
[Fri Nov 14 15:36:27.912209 2025] [:error] [pid 16574:tid 16607] [client 206.81.12.187:34978] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRbb-_6XQqe4NqaoE9IIgAAAAIA"]
[Fri Nov 14 15:36:28.532023 2025] [:error] [pid 16709:tid 16730] [client 206.81.12.187:34990] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/about"] [unique_id "aRbb_KNdzfVNC4oipLUePgAAAVM"]
[Fri Nov 14 15:36:29.156771 2025] [:error] [pid 16709:tid 16735] [client 206.81.12.187:35002] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/debug/default/view"] [unique_id "aRbb_aNdzfVNC4oipLUeRAAAAVg"]
[Fri Nov 14 15:36:29.778153 2025] [:error] [pid 16575:tid 16658] [client 206.81.12.187:35012] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/v2/_catalog"] [unique_id "aRbb_e6qT670YxigvbBW_wAAANg"]
[Fri Nov 14 15:36:30.399205 2025] [:error] [pid 16709:tid 16715] [client 206.81.12.187:35014] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRbb_qNdzfVNC4oipLUeSgAAAUQ"]
[Fri Nov 14 15:36:31.019336 2025] [:error] [pid 16573:tid 16578] [client 206.81.12.187:44656] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/server-status"] [unique_id "aRbb_yPGexfUk9FDoEJqMQAAAEA"]
[Fri Nov 14 15:36:31.639725 2025] [:error] [pid 16573:tid 16594] [client 206.81.12.187:44666] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/login.action"] [unique_id "aRbb_yPGexfUk9FDoEJqNAAAAFA"]
[Fri Nov 14 15:36:32.264782 2025] [:error] [pid 16671:tid 16694] [client 206.81.12.187:44676] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/_all_dbs"] [unique_id "aRbcADsoHwEAmeIzZXAfCAAAARE"]
[Fri Nov 14 15:36:32.885120 2025] [:error] [pid 16574:tid 16618] [client 206.81.12.187:44680] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aRbcAP6XQqe4NqaoE9IIhwAAAIs"]
[Fri Nov 14 15:36:33.504837 2025] [:error] [pid 16671:tid 16691] [client 206.81.12.187:44682] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.env"] [unique_id "aRbcATsoHwEAmeIzZXAfDAAAAQ4"]
[Fri Nov 14 15:36:34.155125 2025] [:error] [pid 16709:tid 16711] [client 206.81.12.187:44698] [client 206.81.12.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRbcAqNdzfVNC4oipLUeUwAAAUA"]
[Fri Nov 14 15:36:34.841851 2025] [:error] [pid 16573:tid 16587] [client 206.81.12.187:44702] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRbcAiPGexfUk9FDoEJqPgAAAEk"]
[Fri Nov 14 15:36:35.570956 2025] [:error] [pid 16709:tid 16720] [client 206.81.12.187:44716] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/config.json"] [unique_id "aRbcA6NdzfVNC4oipLUeVQAAAUk"]
[Fri Nov 14 15:36:36.226089 2025] [:error] [pid 16671:tid 16679] [client 206.81.12.187:44724] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aRbcBDsoHwEAmeIzZXAfFQAAAQI"]
[Fri Nov 14 15:36:36.844842 2025] [:error] [pid 16671:tid 16691] [client 206.81.12.187:44732] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/info.php"] [unique_id "aRbcBDsoHwEAmeIzZXAfFwAAAQ4"]
[Fri Nov 14 15:36:37.464474 2025] [:error] [pid 16575:tid 16642] [client 206.81.12.187:44736] [client 206.81.12.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/"] [unique_id "aRbcBe6qT670YxigvbBXEAAAAMg"]
[Sat Nov 15 01:48:44.819511 2025] [autoindex:error] [pid 45908:tid 45951] [client 4.205.170.231:28000] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 01:49:08.224223 2025] [:error] [pid 45908:tid 45954] [client 4.205.170.231:28000] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/"] [unique_id "aRdrlGWG19mWwZX7KatqpwAAABA"]
[Sat Nov 15 01:49:08.633809 2025] [:error] [pid 45909:tid 45966] [client 4.205.170.231:4888] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/"] [unique_id "aRdrlMZqItrYybG86kiemwAAAcE"]
[Sat Nov 15 01:49:09.043492 2025] [:error] [pid 45907:tid 45924] [client 4.205.170.231:4926] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/"] [unique_id "aRdrlVAqmYxCpnT9gJGM1QAAAU0"]
[Sat Nov 15 01:49:09.475028 2025] [:error] [pid 45909:tid 45974] [client 4.205.170.231:49684] [client 4.205.170.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/"] [unique_id "aRdrlcZqItrYybG86kienAAAAck"]
[Sat Nov 15 12:09:33.880611 2025] [:error] [pid 22613:tid 22628] [client 138.197.23.42:58237] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRf8_SoyR3cDsIRGPRl8zQAAAg0"]
[Sat Nov 15 12:09:34.296639 2025] [:error] [pid 22765:tid 22784] [client 138.197.23.42:58407] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRf8_qbrQzjuZmPIWDafcQAAAo4"]
[Sat Nov 15 12:09:34.733412 2025] [:error] [pid 27997:tid 28000] [client 138.197.23.42:58620] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRf8_tpja_6cDxKbxFmOmwAAAME"]
[Sat Nov 15 12:09:35.150920 2025] [:error] [pid 19961:tid 20015] [client 138.197.23.42:58815] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRf8_zar7Si-84EApVQ2kgAAAdY"]
[Sat Nov 15 16:29:38.451017 2025] [:error] [pid 19959:tid 19986] [client 49.205.100.3:44424] [client 49.205.100.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.100.3, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRg58sjejiTUP1-IawO7YgAAAZQ"]
[Sat Nov 15 20:01:47.363183 2025] [:error] [pid 27997:tid 28010] [client 49.205.100.3:45057] [client 49.205.100.3] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRhrq9pja_6cDxKbxFnn7wAAAMs"]
[Sat Nov 15 20:03:16.580734 2025] [:error] [pid 22765:tid 22781] [client 49.205.100.3:45279] [client 49.205.100.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.100.3, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhsBKbrQzjuZmPIWDb7kQAAAos"]
[Sat Nov 15 20:04:07.936510 2025] [:error] [pid 27911:tid 27977] [client 49.205.100.3:44533] [client 49.205.100.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.100.3, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhsN8GzUdrhGBIfiKRzFgAAAIk"]
[Sat Nov 15 20:05:09.754483 2025] [:error] [pid 27997:tid 27999] [client 49.205.100.3:44194] [client 49.205.100.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.100.3, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhsddpja_6cDxKbxFnoVAAAAMA"]
[Sat Nov 15 20:06:06.299072 2025] [:error] [pid 19959:tid 19967] [client 49.205.100.3:45514] [client 49.205.100.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.100.3, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhsrsjejiTUP1-IawPqoQAAAYE"]
[Sat Nov 15 20:07:05.326025 2025] [:error] [pid 19961:tid 20013] [client 49.205.100.3:44757] [client 49.205.100.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.100.3, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRhs6Tar7Si-84EApVSDgAAAAdQ"]
[Sat Nov 15 20:26:25.909955 2025] [:error] [pid 20346:tid 20357] [client 45.134.79.103:63292] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRhxcZ7hsydZdIoVTltMugAAAwg"]
[Sat Nov 15 20:26:26.560668 2025] [:error] [pid 19959:tid 19976] [client 45.134.79.103:63494] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRhxcsjejiTUP1-IawPtrAAAAYo"]
[Sat Nov 15 20:26:27.189297 2025] [:error] [pid 27909:tid 27932] [client 45.134.79.103:63751] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxcyTfZ6B57n8HepU9jQAAABM"]
[Sun Nov 16 03:44:29.541207 2025] [:error] [pid 8300:tid 8327] [client 167.71.198.12:53881] [client 167.71.198.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/sftp-config.json"] [unique_id "aRjYHb4U9_qUKfUcXjOnAAAAAA0"]
[Sun Nov 16 12:52:42.308596 2025] [:error] [pid 52469:tid 52496] [client 128.199.182.152:34672] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/actuator/env"] [unique_id "aRlYmk6HaXpHeEZ98Z1swwAAABM"]
[Sun Nov 16 12:52:42.640735 2025] [:error] [pid 52563:tid 52589] [client 128.199.182.152:34688] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRlYms-l3ey-hVJ5AutrAAAAANc"]
[Sun Nov 16 12:52:42.986735 2025] [:error] [pid 20556:tid 20578] [client 128.199.182.152:34700] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/server"] [unique_id "aRlYmkkbyEckbWtBcCIvUQAAARQ"]
[Sun Nov 16 12:52:43.330197 2025] [:error] [pid 52469:tid 52480] [client 128.199.182.152:34706] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aRlYm06HaXpHeEZ98Z1sxgAAAAM"]
[Sun Nov 16 12:52:43.640171 2025] [:error] [pid 52469:tid 52494] [client 128.199.182.152:34708] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about"] [unique_id "aRlYm06HaXpHeEZ98Z1sxwAAABE"]
[Sun Nov 16 12:52:43.903649 2025] [:error] [pid 52469:tid 52481] [client 128.199.182.152:34718] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/debug/default/view"] [unique_id "aRlYm06HaXpHeEZ98Z1syAAAAAQ"]
[Sun Nov 16 12:52:44.166378 2025] [:error] [pid 52563:tid 52571] [client 128.199.182.152:34720] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v2/_catalog"] [unique_id "aRlYnM-l3ey-hVJ5AutrAgAAAMU"]
[Sun Nov 16 12:52:44.429946 2025] [:error] [pid 52563:tid 52575] [client 128.199.182.152:34732] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRlYnM-l3ey-hVJ5AutrBAAAAMk"]
[Sun Nov 16 12:52:44.692322 2025] [:error] [pid 20556:tid 20560] [client 128.199.182.152:34740] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/server-status"] [unique_id "aRlYnEkbyEckbWtBcCIvUgAAAQI"]
[Sun Nov 16 12:52:44.955501 2025] [:error] [pid 52563:tid 52584] [client 128.199.182.152:34752] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/login.action"] [unique_id "aRlYnM-l3ey-hVJ5AutrCQAAANI"]
[Sun Nov 16 12:52:45.218909 2025] [:error] [pid 52471:tid 52546] [client 128.199.182.152:34754] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/_all_dbs"] [unique_id "aRlYndmWsFzjR5CEgDUO3AAAAI4"]
[Sun Nov 16 12:52:45.481703 2025] [:error] [pid 34133:tid 34158] [client 128.199.182.152:34768] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aRlYnfSAB3iwXVRY0gFeAgAAAVc"]
[Sun Nov 16 12:52:45.744995 2025] [:error] [pid 34271:tid 34275] [client 128.199.182.152:34774] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aRlYnUNmlZhoZZV1BUB_WgAAAkI"]
[Sun Nov 16 12:52:46.007619 2025] [:error] [pid 52563:tid 52581] [client 128.199.182.152:34778] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRlYns-l3ey-hVJ5AutrDwAAAM8"]
[Sun Nov 16 12:52:46.273834 2025] [:error] [pid 34164:tid 34189] [client 128.199.182.152:34794] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRlYnu93ccBCLD8-Q4YCAAAAAZU"]
[Sun Nov 16 12:52:46.537151 2025] [:error] [pid 52469:tid 52493] [client 128.199.182.152:34806] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/config.json"] [unique_id "aRlYnk6HaXpHeEZ98Z1s3wAAABA"]
[Sun Nov 16 12:52:46.801979 2025] [:error] [pid 34227:tid 34236] [client 128.199.182.152:34812] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aRlYnn108zGLYs9eMuj9SQAAAgc"]
[Sun Nov 16 12:52:47.066752 2025] [:error] [pid 20556:tid 20571] [client 128.199.182.152:34824] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aRlYn0kbyEckbWtBcCIvVAAAAQ0"]
[Sun Nov 16 12:52:47.330236 2025] [:error] [pid 34271:tid 34297] [client 128.199.182.152:34828] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRlYn0NmlZhoZZV1BUB_XAAAAlg"]
[Sun Nov 16 14:18:24.454374 2025] [:error] [pid 52471:tid 52550] [client 49.36.123.95:56726] [client 49.36.123.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.123.95, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRlssNmWsFzjR5CEgDUgrgAAAJI"]
[Sun Nov 16 14:23:41.003928 2025] [:error] [pid 52471:tid 52556] [client 123.253.93.243:51928] [client 123.253.93.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.253.93.243, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRlt7dmWsFzjR5CEgDUhkQAAAJg"]
[Sun Nov 16 18:28:39.156424 2025] [:error] [pid 34164:tid 34171] [client 155.94.163.116:57765] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/"] [unique_id "aRmnV-93ccBCLD8-Q4ZQCgAAAYM"], referer: binance.com
[Mon Nov 17 02:58:53.525309 2025] [:error] [pid 55745:tid 55768] [client 35.185.51.105:54134] [client 35.185.51.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRoe7YZk0eT801XQsaugLQAAAFU"]
[Mon Nov 17 11:45:11.671281 2025] [:error] [pid 15150:tid 15170] [client 64.227.151.89:21692] [client 64.227.151.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.env"] [unique_id "aRqaR32DEo_rcsFuxj08lwAAAZI"]
[Mon Nov 17 11:45:29.052212 2025] [:error] [pid 39537:tid 39542] [client 64.227.151.89:42842] [client 64.227.151.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aRqaWYZRrh1pcrdcLB9yPQAAAMI"]
[Mon Nov 17 12:12:06.188091 2025] [:error] [pid 40548:tid 40558] [client 103.119.96.165:60615] [client 103.119.96.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.119.96.165, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqglgM_PykfYnxh-j8vbgAAAQg"]
[Mon Nov 17 20:01:52.200602 2025] [:error] [pid 39449:tid 39462] [client 103.186.31.45:57051] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/style.php"] [unique_id "aRsOsKUCymTA3MDfzLNb1AAAAAg"]
[Mon Nov 17 20:01:52.455181 2025] [:error] [pid 39449:tid 39462] [client 103.186.31.45:57117] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-content/style.php"] [unique_id "aRsOsKUCymTA3MDfzLNb3wAAAAg"]
[Mon Nov 17 20:01:54.186457 2025] [:error] [pid 65302:tid 65320] [client 103.186.31.45:57504] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aRsOsgPMSx2v85r8y7wD1wAAAVA"]
[Mon Nov 17 20:01:54.455380 2025] [:error] [pid 40548:tid 40566] [client 103.186.31.45:57554] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/style.php"] [unique_id "aRsOsgM_PykfYnxh-j9sVwAAARA"]
[Mon Nov 17 20:01:54.739083 2025] [:error] [pid 31419:tid 31443] [client 103.186.31.45:57612] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/style.php"] [unique_id "aRsOsgHQ5Sbp7elmDZiY2AAAApY"]
[Mon Nov 17 20:01:55.004307 2025] [:error] [pid 39537:tid 39543] [client 103.186.31.45:57664] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/chosen.php"] [unique_id "aRsOs4ZRrh1pcrdcLB-9hAAAAMM"]
[Mon Nov 17 20:01:55.275947 2025] [:error] [pid 30801:tid 30816] [client 103.186.31.45:57723] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/file.php"] [unique_id "aRsOszbGAU49DhMTBD7wAQAAAk0"]
[Mon Nov 17 20:01:55.521728 2025] [:error] [pid 39449:tid 39472] [client 103.186.31.45:57794] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/flower.php"] [unique_id "aRsOs6UCymTA3MDfzLNcDQAAABI"]
[Mon Nov 17 20:01:55.763256 2025] [:error] [pid 39451:tid 39527] [client 103.186.31.45:57875] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/gifclass.php"] [unique_id "aRsOs-fgkqXTS0SO3fAiygAAAJM"]
[Mon Nov 17 20:01:56.012027 2025] [:error] [pid 65302:tid 65319] [client 103.186.31.45:57957] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/bless.php"] [unique_id "aRsOtAPMSx2v85r8y7wD6wAAAU8"]
[Mon Nov 17 20:01:56.267402 2025] [:error] [pid 65302:tid 65316] [client 103.186.31.45:58022] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/class-t.api.php"] [unique_id "aRsOtAPMSx2v85r8y7wD7QAAAUw"]
[Mon Nov 17 20:01:56.530787 2025] [:error] [pid 39449:tid 39472] [client 103.186.31.45:58086] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/blurbs.php"] [unique_id "aRsOtKUCymTA3MDfzLNcGQAAABI"]
[Mon Nov 17 20:01:56.797956 2025] [:error] [pid 39449:tid 39462] [client 103.186.31.45:58154] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/akcc.php"] [unique_id "aRsOtKUCymTA3MDfzLNcGgAAAAg"]
[Mon Nov 17 20:01:57.058808 2025] [:error] [pid 31419:tid 31439] [client 103.186.31.45:58259] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/abcd.php"] [unique_id "aRsOtQHQ5Sbp7elmDZiY5wAAApI"]
[Mon Nov 17 20:01:57.313586 2025] [:error] [pid 39537:tid 39556] [client 103.186.31.45:58458] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/shelp.php"] [unique_id "aRsOtYZRrh1pcrdcLB-9lgAAANA"]
[Mon Nov 17 20:01:57.582362 2025] [:error] [pid 20913:tid 20925] [client 103.186.31.45:58570] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/cord.php"] [unique_id "aRsOtekafGNeN3nY1bdbMAAAA0o"]
[Mon Nov 17 20:01:57.837521 2025] [:error] [pid 32753:tid 32763] [client 103.186.31.45:58635] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/dex.php"] [unique_id "aRsOtU6YNqI5vkht922D1QAAA8c"]
[Mon Nov 17 20:01:58.083655 2025] [:error] [pid 39537:tid 39541] [client 103.186.31.45:58687] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRsOtoZRrh1pcrdcLB-9oQAAAME"]
[Mon Nov 17 20:01:58.333638 2025] [:error] [pid 30801:tid 30807] [client 103.186.31.45:58751] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/file2.php"] [unique_id "aRsOtjbGAU49DhMTBD7wNQAAAkQ"]
[Mon Nov 17 20:01:58.575752 2025] [:error] [pid 65302:tid 65313] [client 103.186.31.45:58801] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/zwso.php"] [unique_id "aRsOtgPMSx2v85r8y7wEIQAAAUk"]
[Mon Nov 17 20:01:58.823127 2025] [:error] [pid 32753:tid 32764] [client 103.186.31.45:58864] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aRsOtk6YNqI5vkht922D6gAAA8g"]
[Mon Nov 17 20:01:59.065518 2025] [:error] [pid 31419:tid 31423] [client 103.186.31.45:58922] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aRsOtwHQ5Sbp7elmDZiY-AAAAoI"]
[Mon Nov 17 20:01:59.313108 2025] [:error] [pid 30801:tid 30814] [client 103.186.31.45:58970] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/bolt.php"] [unique_id "aRsOtzbGAU49DhMTBD7wQgAAAks"]
[Mon Nov 17 20:01:59.568691 2025] [:error] [pid 32753:tid 32776] [client 103.186.31.45:59016] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/shlo.php"] [unique_id "aRsOt06YNqI5vkht922D_QAAA9Q"]
[Mon Nov 17 20:01:59.857824 2025] [:error] [pid 32753:tid 32776] [client 103.186.31.45:59080] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/133.php"] [unique_id "aRsOt06YNqI5vkht922EDAAAA9Q"]
[Mon Nov 17 20:02:00.125713 2025] [:error] [pid 15888:tid 15899] [client 103.186.31.45:59154] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/ahax.php"] [unique_id "aRsOuAjAdDTBm4W3qW036gAAAcg"]
[Mon Nov 17 20:02:00.376288 2025] [:error] [pid 20913:tid 20926] [client 103.186.31.45:59347] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/php8.php"] [unique_id "aRsOuOkafGNeN3nY1bdbTQAAA0s"]
[Mon Nov 17 20:02:00.617996 2025] [:error] [pid 65302:tid 65306] [client 103.186.31.45:59399] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/lufix1.php"] [unique_id "aRsOuAPMSx2v85r8y7wEPgAAAUI"]
[Mon Nov 17 20:02:00.863596 2025] [:error] [pid 39537:tid 39546] [client 103.186.31.45:59460] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/witmm.php"] [unique_id "aRsOuIZRrh1pcrdcLB-9sgAAAMY"]
[Mon Nov 17 20:02:01.106981 2025] [:error] [pid 39537:tid 39544] [client 103.186.31.45:59549] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aRsOuYZRrh1pcrdcLB-9uAAAAMQ"]
[Mon Nov 17 20:02:01.350893 2025] [:error] [pid 32753:tid 32758] [client 103.186.31.45:59606] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aRsOuU6YNqI5vkht922ENAAAA8I"]
[Mon Nov 17 20:02:01.598266 2025] [:error] [pid 15888:tid 15903] [client 103.186.31.45:59662] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aRsOuQjAdDTBm4W3qW039wAAAcw"]
[Mon Nov 17 20:02:01.843941 2025] [:error] [pid 32753:tid 32775] [client 103.186.31.45:59712] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aRsOuU6YNqI5vkht922EPwAAA9M"]
[Mon Nov 17 20:02:02.091639 2025] [:error] [pid 39451:tid 39525] [client 103.186.31.45:59863] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aRsOuufgkqXTS0SO3fAi9gAAAJE"]
[Mon Nov 17 20:02:02.340727 2025] [:error] [pid 39451:tid 39530] [client 103.186.31.45:59927] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/files.php"] [unique_id "aRsOuufgkqXTS0SO3fAi_QAAAJY"]
[Mon Nov 17 20:02:02.590906 2025] [:error] [pid 31419:tid 31426] [client 103.186.31.45:59982] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "funnyemuart.com.au"] [uri "/wp-editor.php"] [unique_id "aRsOugHQ5Sbp7elmDZiZEQAAAoU"]
[Mon Nov 17 23:24:47.269708 2025] [:error] [pid 20913:tid 20919] [client 128.199.162.116:64437] [client 128.199.162.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/sftp-config.json"] [unique_id "aRs-P-kafGNeN3nY1bd6XQAAA0Q"]
[Tue Nov 18 05:45:02.483353 2025] [:error] [pid 61482:tid 61493] [client 223.123.102.166:61321] [client 223.123.102.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.123.102.166, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aRuXXvtNHsWZClVWav5D6QAAAMY"]
[Tue Nov 18 17:46:34.775943 2025] [:error] [pid 44624:tid 44649] [client 84.247.191.22:59613] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/"] [unique_id "aRxAeillffozoBluWCV14AAAAZY"], referer: binance.com
[Tue Nov 18 21:37:29.747664 2025] [:error] [pid 44472:tid 44548] [client 45.134.79.103:49271] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRx2mYKhGwkiLjv8BQwe0QAAAVE"]
[Tue Nov 18 21:37:30.428965 2025] [:error] [pid 3500:tid 3521] [client 45.134.79.103:56541] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aRx2mvCbRC7k2D7mjbSTnwAAAdM"]
[Tue Nov 18 21:37:31.120464 2025] [:error] [pid 44472:tid 44538] [client 45.134.79.103:51303] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2m4KhGwkiLjv8BQwe6AAAAUc"]
[Wed Nov 19 07:30:36.378898 2025] [:error] [pid 6554:tid 6560] [client 18.191.165.250:56016] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR0BnN8rvPWLafJFqmVWigAAAAE"]
[Wed Nov 19 07:30:36.769566 2025] [:error] [pid 6555:tid 6610] [client 18.191.165.250:56085] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR0BnEbVJm8eMsGMTCONcwAAAFM"]
[Wed Nov 19 07:30:37.159796 2025] [:error] [pid 6556:tid 6640] [client 18.191.165.250:56158] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR0BnZuL7hhgrmdM1mt66AAAAJY"]
[Wed Nov 19 07:30:37.557636 2025] [:error] [pid 6555:tid 6598] [client 18.191.165.250:56254] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR0BnUbVJm8eMsGMTCONkwAAAEc"]
[Wed Nov 19 07:30:37.951700 2025] [:error] [pid 6554:tid 6583] [client 18.191.165.250:56329] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR0Bnd8rvPWLafJFqmVWvwAAABc"]
[Wed Nov 19 20:35:57.747471 2025] [:error] [pid 6554:tid 6561] [client 104.196.176.201:58071] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rd8rvPWLafJFqmX7awAAAAI"]
[Wed Nov 19 21:08:07.591373 2025] [:error] [pid 26664:tid 26670] [client 106.222.203.39:29650] [client 106.222.203.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.203.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3BN4pWc1yoj2P7MeAJdgAAAUM"]
[Wed Nov 19 21:32:10.881846 2025] [:error] [pid 26664:tid 26692] [client 106.222.203.39:32768] [client 106.222.203.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aR3G2opWc1yoj2P7MeAMsQAAAVg"]
[Wed Nov 19 21:33:14.672612 2025] [:error] [pid 6644:tid 6654] [client 106.222.203.39:31746] [client 106.222.203.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.203.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3HGk0i6Rf788MB6sbirQAAAMg"]
[Wed Nov 19 21:34:08.997640 2025] [:error] [pid 12672:tid 12698] [client 106.222.203.39:5610] [client 106.222.203.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.203.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3HUP9vojl6X1cc5mU5hQAAAdU"]
[Wed Nov 19 21:35:10.130742 2025] [:error] [pid 6554:tid 6575] [client 106.222.203.39:5425] [client 106.222.203.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.203.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3Hjt8rvPWLafJFqmUD9AAAAA8"]
[Wed Nov 19 21:36:10.563374 2025] [:error] [pid 12672:tid 12693] [client 106.222.203.39:26860] [client 106.222.203.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.203.39, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aR3Hyv9vojl6X1cc5mU5xwAAAdA"]
[Thu Nov 20 02:20:18.172807 2025] [:error] [pid 8030:tid 8040] [client 91.92.242.56:59067] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/whmpress/history.txt"] [unique_id "aR4KYoaRI7v0Hh2prI87mwAAAYc"]
[Thu Nov 20 02:20:18.735654 2025] [:error] [pid 7924:tid 7926] [client 91.92.242.56:54303] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/whmpress/history.txt"] [unique_id "aR4KYqGUpXw1x9m1v_BMOQAAAUA"]
[Thu Nov 20 02:20:19.298299 2025] [:error] [pid 7924:tid 7926] [client 91.92.242.56:54557] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/whmpress/history.txt"] [unique_id "aR4KY6GUpXw1x9m1v_BMPAAAAUA"]
[Thu Nov 20 02:20:19.881039 2025] [:error] [pid 50236:tid 50364] [client 91.92.242.56:54905] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/whmpress/history.txt"] [unique_id "aR4KY2T-l-atWVKihhsszwAAAII"]
[Thu Nov 20 12:10:20.518158 2025] [:error] [pid 55342:tid 55385] [client 98.81.111.26:62657] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6UrLg6x32Tvk7fIG-LuQAAAE0"]
[Thu Nov 20 12:10:20.927565 2025] [:error] [pid 804:tid 846] [client 98.81.111.26:63132] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6UrPaRHpUlPL9O0Lk1bgAAAZY"]
[Thu Nov 20 12:10:21.339065 2025] [:error] [pid 55342:tid 55380] [client 98.81.111.26:59721] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6Urbg6x32Tvk7fIG-LzgAAAEg"]
[Thu Nov 20 12:10:21.748831 2025] [:error] [pid 804:tid 837] [client 98.81.111.26:58338] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6UrfaRHpUlPL9O0Lk1mAAAAY0"]
[Thu Nov 20 12:10:22.157869 2025] [:error] [pid 34405:tid 34412] [client 98.81.111.26:59179] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6UrjFpvu8oRK7ATfvJPAAAAQU"]
[Thu Nov 20 12:15:49.336415 2025] [:error] [pid 55343:tid 55419] [client 98.81.111.26:61611] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6V9VWlO3EnyVMV7w5ogwAAAJQ"]
[Thu Nov 20 12:15:49.741860 2025] [:error] [pid 34444:tid 34446] [client 98.81.111.26:63050] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6V9VNEol4jlmmA_GP0UwAAAUA"]
[Thu Nov 20 12:15:50.151373 2025] [:error] [pid 55340:tid 55348] [client 98.81.111.26:64318] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6V9vOxD-NeMydTybBNRAAAAAM"]
[Thu Nov 20 12:15:50.557886 2025] [:error] [pid 55342:tid 55378] [client 98.81.111.26:49620] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6V9rg6x32Tvk7fIG-PBQAAAEY"]
[Thu Nov 20 12:15:50.965000 2025] [:error] [pid 34405:tid 34426] [client 98.81.111.26:51282] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aR6V9jFpvu8oRK7ATfvM2AAAARM"]
[Thu Nov 20 17:06:05.767160 2025] [:error] [pid 40636:tid 40649] [client 20.243.53.228:62751] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kki.php"] [unique_id "aR7Z_QK8BWUoW3xq0HD7cQAAA4k"]
[Thu Nov 20 17:06:07.022424 2025] [:error] [pid 40508:tid 40511] [client 20.243.53.228:62741] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kki.php"] [unique_id "aR7Z_6xXNVCMW_ksxPuDSQAAAoE"]
[Thu Nov 20 17:06:08.580525 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:61484] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kki.php"] [unique_id "aR7aADFpvu8oRK7ATfsFSAAAARE"]
[Thu Nov 20 17:06:10.951730 2025] [:error] [pid 40415:tid 40437] [client 20.243.53.228:61489] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kki.php"] [unique_id "aR7aAqhjIyLSv09svwOP9AAAAdM"]
[Thu Nov 20 17:06:11.769319 2025] [:error] [pid 55340:tid 55368] [client 20.243.53.228:61502] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js.php"] [unique_id "aR7aA_OxD-NeMydTybCKiAAAABc"]
[Thu Nov 20 17:06:12.860810 2025] [:error] [pid 55340:tid 55355] [client 20.243.53.228:61495] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js.php"] [unique_id "aR7aBPOxD-NeMydTybCKjQAAAAo"]
[Thu Nov 20 17:06:15.786040 2025] [:error] [pid 40537:tid 40553] [client 20.243.53.228:61449] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js.php"] [unique_id "aR7aB6KlsL5kxTa3c1zQegAAAsw"]
[Thu Nov 20 17:06:16.892922 2025] [:error] [pid 40445:tid 40491] [client 20.243.53.228:61472] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js.php"] [unique_id "aR7aCFH-MuFcoWRjXpY7OQAAAlA"]
[Thu Nov 20 17:06:17.934057 2025] [:error] [pid 34405:tid 34409] [client 20.243.53.228:63298] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/view.php"] [unique_id "aR7aCTFpvu8oRK7ATfsFSwAAAQI"]
[Thu Nov 20 17:06:19.330387 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:62746] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/view.php"] [unique_id "aR7aC1H-MuFcoWRjXpY7PQAAAlQ"]
[Thu Nov 20 17:06:19.907752 2025] [:error] [pid 40445:tid 40479] [client 20.243.53.228:62736] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/view.php"] [unique_id "aR7aC1H-MuFcoWRjXpY7PwAAAkQ"]
[Thu Nov 20 17:06:20.424854 2025] [:error] [pid 40537:tid 40554] [client 20.243.53.228:61460] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/view.php"] [unique_id "aR7aDKKlsL5kxTa3c1zQewAAAs0"]
[Thu Nov 20 17:06:21.329115 2025] [:error] [pid 40508:tid 40525] [client 20.243.53.228:62756] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wso.php"] [unique_id "aR7aDaxXNVCMW_ksxPuDWwAAAo8"]
[Thu Nov 20 17:06:23.117511 2025] [:error] [pid 40537:tid 40547] [client 20.243.53.228:62753] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wso.php"] [unique_id "aR7aD6KlsL5kxTa3c1zQjQAAAsY"]
[Thu Nov 20 17:06:25.434263 2025] [:error] [pid 55430:tid 55444] [client 20.243.53.228:62734] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wso.php"] [unique_id "aR7aEfPZXaIMEU4pE7vtcAAAAMs"]
[Thu Nov 20 17:06:27.489375 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:62726] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wso.php"] [unique_id "aR7aE1H-MuFcoWRjXpY7SAAAAlE"]
[Thu Nov 20 17:06:29.058738 2025] [:error] [pid 40636:tid 40646] [client 20.243.53.228:52675] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sid3.php"] [unique_id "aR7aFQK8BWUoW3xq0HD7eQAAA4Y"]
[Thu Nov 20 17:06:31.328230 2025] [:error] [pid 55340:tid 55368] [client 20.243.53.228:62781] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sid3.php"] [unique_id "aR7aF_OxD-NeMydTybCKlgAAABc"]
[Thu Nov 20 17:06:35.054188 2025] [:error] [pid 55342:tid 55388] [client 20.243.53.228:52688] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sid3.php"] [unique_id "aR7aG7g6x32Tvk7fIG_HwwAAAFA"]
[Thu Nov 20 17:06:44.739182 2025] [:error] [pid 40537:tid 40556] [client 20.243.53.228:63304] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mans.php"] [unique_id "aR7aJKKlsL5kxTa3c1zQqwAAAs8"]
[Thu Nov 20 17:06:46.734220 2025] [:error] [pid 34405:tid 34416] [client 20.243.53.228:61470] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mans.php"] [unique_id "aR7aJjFpvu8oRK7ATfsFUgAAAQk"]
[Thu Nov 20 17:06:49.004340 2025] [:error] [pid 40415:tid 40422] [client 20.243.53.228:52732] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mans.php"] [unique_id "aR7aKahjIyLSv09svwOQDAAAAcQ"]
[Thu Nov 20 17:06:50.010229 2025] [:error] [pid 40445:tid 40475] [client 20.243.53.228:63324] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mans.php"] [unique_id "aR7aKlH-MuFcoWRjXpY7WAAAAkA"]
[Thu Nov 20 17:06:52.865178 2025] [:error] [pid 40636:tid 40661] [client 20.243.53.228:62780] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/111.php"] [unique_id "aR7aLAK8BWUoW3xq0HD7iwAAA5U"]
[Thu Nov 20 17:06:55.950360 2025] [:error] [pid 55430:tid 55452] [client 20.243.53.228:62747] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/111.php"] [unique_id "aR7aL_PZXaIMEU4pE7vtggAAANM"]
[Thu Nov 20 17:06:57.969783 2025] [:error] [pid 55343:tid 55419] [client 20.243.53.228:63299] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/111.php"] [unique_id "aR7aMVWlO3EnyVMV7w6gRQAAAJQ"]
[Thu Nov 20 17:07:00.915514 2025] [:error] [pid 40508:tid 40510] [client 20.243.53.228:52694] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/111.php"] [unique_id "aR7aNKxXNVCMW_ksxPuDfwAAAoA"]
[Thu Nov 20 17:07:02.092195 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:61458] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aR7aNlH-MuFcoWRjXpY7YQAAAkM"]
[Thu Nov 20 17:07:27.192325 2025] [:error] [pid 40508:tid 40528] [client 20.243.53.228:52716] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/an7.php"] [unique_id "aR7aT6xXNVCMW_ksxPuDrAAAApI"]
[Thu Nov 20 17:07:33.399900 2025] [:error] [pid 34405:tid 34425] [client 20.243.53.228:52705] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/an7.php"] [unique_id "aR7aVTFpvu8oRK7ATfsFfwAAARI"]
[Thu Nov 20 17:07:34.828359 2025] [:error] [pid 40508:tid 40516] [client 20.243.53.228:61498] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/an7.php"] [unique_id "aR7aVqxXNVCMW_ksxPuDvQAAAoY"]
[Thu Nov 20 17:07:37.590567 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:63311] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/an7.php"] [unique_id "aR7aWVH-MuFcoWRjXpY7jQAAAlE"]
[Thu Nov 20 17:07:40.018940 2025] [:error] [pid 40537:tid 40550] [client 20.243.53.228:52673] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fs7.php"] [unique_id "aR7aXKKlsL5kxTa3c1zQwAAAAsk"]
[Thu Nov 20 17:07:44.119576 2025] [:error] [pid 40537:tid 40559] [client 20.243.53.228:62761] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fs7.php"] [unique_id "aR7aYKKlsL5kxTa3c1zQyAAAAtI"]
[Thu Nov 20 17:07:45.209660 2025] [:error] [pid 40537:tid 40555] [client 20.243.53.228:62769] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fs7.php"] [unique_id "aR7aYaKlsL5kxTa3c1zQywAAAs4"]
[Thu Nov 20 17:07:47.386014 2025] [:error] [pid 55343:tid 55419] [client 20.243.53.228:63296] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fs7.php"] [unique_id "aR7aY1WlO3EnyVMV7w6gYgAAAJQ"]
[Thu Nov 20 17:07:49.209624 2025] [:error] [pid 40537:tid 40557] [client 20.243.53.228:61454] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aR7aZaKlsL5kxTa3c1zQzgAAAtA"]
[Thu Nov 20 17:07:52.304275 2025] [:error] [pid 40445:tid 40493] [client 20.243.53.228:52735] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aR7aaFH-MuFcoWRjXpY7kgAAAlI"]
[Thu Nov 20 17:07:53.959649 2025] [:error] [pid 40636:tid 40657] [client 20.243.53.228:52681] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aR7aaQK8BWUoW3xq0HD7pgAAA5E"]
[Thu Nov 20 17:07:57.953825 2025] [:error] [pid 34405:tid 34408] [client 20.243.53.228:61479] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aR7abTFpvu8oRK7ATfsFkAAAAQE"]
[Thu Nov 20 17:08:00.011245 2025] [:error] [pid 40415:tid 40433] [client 20.243.53.228:62759] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/icon.php"] [unique_id "aR7acKhjIyLSv09svwOQMQAAAc8"]
[Thu Nov 20 17:08:00.562206 2025] [:error] [pid 34405:tid 34408] [client 20.243.53.228:61479] [client 20.243.53.228] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "195.184.9.47_6d382825ae4c4ae5a7be44746e59caa783cf526e"): Internal error (specific information not available) [hostname "funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aR7abTFpvu8oRK7ATfsFkAAAAQE"]
[Thu Nov 20 17:08:01.549070 2025] [:error] [pid 40415:tid 40423] [client 20.243.53.228:62727] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/icon.php"] [unique_id "aR7acahjIyLSv09svwOQOwAAAcU"]
[Thu Nov 20 17:08:03.779728 2025] [:error] [pid 40508:tid 40524] [client 20.243.53.228:61481] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/icon.php"] [unique_id "aR7ac6xXNVCMW_ksxPuD4gAAAo4"]
[Thu Nov 20 17:08:08.481732 2025] [:error] [pid 40508:tid 40525] [client 20.243.53.228:62731] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/icon.php"] [unique_id "aR7aeKxXNVCMW_ksxPuD5AAAAo8"]
[Thu Nov 20 17:08:10.086968 2025] [:error] [pid 40636:tid 40654] [client 20.243.53.228:62681] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/blox.php"] [unique_id "aR7aegK8BWUoW3xq0HD7qwAAA44"]
[Thu Nov 20 17:08:12.010246 2025] [:error] [pid 40636:tid 40651] [client 20.243.53.228:61490] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/blox.php"] [unique_id "aR7afAK8BWUoW3xq0HD7rQAAA4s"]
[Thu Nov 20 17:08:14.020143 2025] [:error] [pid 40415:tid 40418] [client 20.243.53.228:52731] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/blox.php"] [unique_id "aR7afqhjIyLSv09svwOQQQAAAcA"]
[Thu Nov 20 17:08:14.737479 2025] [:error] [pid 55430:tid 55437] [client 20.243.53.228:62760] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/blox.php"] [unique_id "aR7afvPZXaIMEU4pE7vttwAAAMQ"]
[Thu Nov 20 17:08:16.032151 2025] [:error] [pid 40508:tid 40517] [client 20.243.53.228:63301] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR7agKxXNVCMW_ksxPuD5gAAAoc"]
[Thu Nov 20 17:08:17.849587 2025] [:error] [pid 55343:tid 55402] [client 20.243.53.228:52695] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR7agVWlO3EnyVMV7w6gbwAAAIM"]
[Thu Nov 20 17:08:18.565590 2025] [:error] [pid 40415:tid 40428] [client 20.243.53.228:63338] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR7agqhjIyLSv09svwOQRQAAAco"]
[Thu Nov 20 17:08:21.159343 2025] [:error] [pid 40415:tid 40432] [client 20.243.53.228:61488] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR7ahahjIyLSv09svwOQTAAAAc4"]
[Thu Nov 20 17:08:23.515872 2025] [:error] [pid 40508:tid 40527] [client 20.243.53.228:52711] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/iko.php"] [unique_id "aR7ah6xXNVCMW_ksxPuD7AAAApE"]
[Thu Nov 20 17:08:45.764983 2025] [:error] [pid 55342:tid 55391] [client 20.243.53.228:62762] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/vansec.php"] [unique_id "aR7anbg6x32Tvk7fIG_IGwAAAFM"]
[Thu Nov 20 17:08:51.196520 2025] [:error] [pid 40445:tid 40475] [client 20.243.53.228:61456] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/vansec.php"] [unique_id "aR7ao1H-MuFcoWRjXpY7vAAAAkA"]
[Thu Nov 20 17:08:56.460725 2025] [:error] [pid 40415:tid 40429] [client 20.243.53.228:52723] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/vansec.php"] [unique_id "aR7aqKhjIyLSv09svwOQZwAAAcs"]
[Thu Nov 20 17:09:00.907708 2025] [:error] [pid 40508:tid 40518] [client 20.243.53.228:63305] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/vansec.php"] [unique_id "aR7arKxXNVCMW_ksxPuEcwAAAog"]
[Thu Nov 20 17:09:02.770150 2025] [:error] [pid 40415:tid 40433] [client 20.243.53.228:52701] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filesss.php"] [unique_id "aR7arqhjIyLSv09svwOQbAAAAc8"]
[Thu Nov 20 17:09:05.754146 2025] [:error] [pid 34405:tid 34420] [client 20.243.53.228:52717] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filesss.php"] [unique_id "aR7asTFpvu8oRK7ATfsFyAAAAQ0"]
[Thu Nov 20 17:09:08.249740 2025] [:error] [pid 40415:tid 40424] [client 20.243.53.228:61487] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filesss.php"] [unique_id "aR7atKhjIyLSv09svwOQdAAAAcY"]
[Thu Nov 20 17:09:11.525845 2025] [:error] [pid 40508:tid 40517] [client 20.243.53.228:52690] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filesss.php"] [unique_id "aR7at6xXNVCMW_ksxPuEfgAAAoc"]
[Thu Nov 20 17:09:17.964012 2025] [:error] [pid 55343:tid 55421] [client 20.243.53.228:62732] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ss.php"] [unique_id "aR7avVWlO3EnyVMV7w6gpAAAAJY"]
[Thu Nov 20 17:09:22.027680 2025] [:error] [pid 40415:tid 40439] [client 20.243.53.228:63313] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ss.php"] [unique_id "aR7awqhjIyLSv09svwOQjwAAAdU"]
[Thu Nov 20 17:09:25.212935 2025] [:error] [pid 40537:tid 40541] [client 20.243.53.228:52719] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ss.php"] [unique_id "aR7axaKlsL5kxTa3c1zQ8gAAAsA"]
[Thu Nov 20 17:09:27.977283 2025] [:error] [pid 55430:tid 55436] [client 20.243.53.228:52707] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-is.php"] [unique_id "aR7ax_PZXaIMEU4pE7vuCwAAAMM"]
[Thu Nov 20 17:09:30.622829 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:62748] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-is.php"] [unique_id "aR7aylH-MuFcoWRjXpY8AAAAAlE"]
[Thu Nov 20 17:09:31.735541 2025] [:error] [pid 34405:tid 34426] [client 20.243.53.228:63297] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-is.php"] [unique_id "aR7ayzFpvu8oRK7ATfsGEAAAARM"]
[Thu Nov 20 17:09:39.283936 2025] [:error] [pid 40508:tid 40524] [client 20.243.53.228:63300] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-is.php"] [unique_id "aR7a06xXNVCMW_ksxPuEuQAAAo4"]
[Thu Nov 20 17:09:42.055569 2025] [:error] [pid 40508:tid 40523] [client 20.243.53.228:52708] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jmfi2.php"] [unique_id "aR7a1qxXNVCMW_ksxPuEuwAAAo0"]
[Thu Nov 20 17:10:07.779685 2025] [:error] [pid 55342:tid 55375] [client 20.243.53.228:52699] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mah.php"] [unique_id "aR7a77g6x32Tvk7fIG_IeQAAAEM"]
[Thu Nov 20 17:10:13.739010 2025] [:error] [pid 55340:tid 55355] [client 20.243.53.228:62738] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mah.php"] [unique_id "aR7a9fOxD-NeMydTybCLZQAAAAo"]
[Thu Nov 20 17:10:18.227021 2025] [:error] [pid 40445:tid 40496] [client 20.243.53.228:62754] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mah.php"] [unique_id "aR7a-lH-MuFcoWRjXpY8NgAAAlU"]
[Thu Nov 20 17:10:27.393705 2025] [:error] [pid 55430:tid 55439] [client 20.243.53.228:62140] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/p.php"] [unique_id "aR7bA_PZXaIMEU4pE7vuLwAAAMY"]
[Thu Nov 20 17:10:34.155713 2025] [:error] [pid 55343:tid 55407] [client 20.243.53.228:52679] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/p.php"] [unique_id "aR7bClWlO3EnyVMV7w6g3wAAAIg"]
[Thu Nov 20 17:10:36.488682 2025] [:error] [pid 40415:tid 40427] [client 20.243.53.228:52734] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/p.php"] [unique_id "aR7bDKhjIyLSv09svwORFwAAAck"]
[Thu Nov 20 17:10:40.283375 2025] [:error] [pid 40445:tid 40491] [client 20.243.53.228:63314] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/p.php"] [unique_id "aR7bEFH-MuFcoWRjXpY8bgAAAlA"]
[Thu Nov 20 17:10:42.083777 2025] [:error] [pid 55340:tid 55354] [client 20.243.53.228:61466] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xpas22.php"] [unique_id "aR7bEvOxD-NeMydTybCLhQAAAAk"]
[Thu Nov 20 17:10:43.507389 2025] [:error] [pid 55430:tid 55456] [client 20.243.53.228:52721] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xpas22.php"] [unique_id "aR7bE_PZXaIMEU4pE7vuPgAAANc"]
[Thu Nov 20 17:10:45.828784 2025] [:error] [pid 40445:tid 40498] [client 20.243.53.228:62753] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xpas22.php"] [unique_id "aR7bFVH-MuFcoWRjXpY8cwAAAlc"]
[Thu Nov 20 17:10:51.848931 2025] [:error] [pid 55342:tid 55394] [client 20.243.53.228:52684] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xpas22.php"] [unique_id "aR7bG7g6x32Tvk7fIG_IxgAAAFY"]
[Thu Nov 20 17:10:53.658023 2025] [:error] [pid 55430:tid 55441] [client 20.243.53.228:52692] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp1.php"] [unique_id "aR7bHfPZXaIMEU4pE7vuQgAAAMg"]
[Thu Nov 20 17:10:58.212854 2025] [:error] [pid 40537:tid 40553] [client 20.243.53.228:62771] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp1.php"] [unique_id "aR7bIqKlsL5kxTa3c1zRFgAAAsw"]
[Thu Nov 20 17:11:00.845378 2025] [:error] [pid 40445:tid 40497] [client 20.243.53.228:62737] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp1.php"] [unique_id "aR7bJFH-MuFcoWRjXpY8fgAAAlY"]
[Thu Nov 20 17:11:11.422111 2025] [:error] [pid 55430:tid 55440] [client 20.243.53.228:63332] [client 20.243.53.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aR7bL_PZXaIMEU4pE7vuTAAAAMc"]
[Thu Nov 20 17:11:37.187954 2025] [:error] [pid 55342:tid 55380] [client 20.243.53.228:52709] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yanki.php"] [unique_id "aR7bSbg6x32Tvk7fIG_I6AAAAEg"]
[Thu Nov 20 17:11:39.230172 2025] [:error] [pid 40445:tid 40484] [client 20.243.53.228:52672] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yanki.php"] [unique_id "aR7bS1H-MuFcoWRjXpY8lgAAAkk"]
[Thu Nov 20 17:11:40.548863 2025] [:error] [pid 40508:tid 40519] [client 20.243.53.228:62741] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yanki.php"] [unique_id "aR7bTKxXNVCMW_ksxPuFowAAAok"]
[Thu Nov 20 17:11:42.380490 2025] [:error] [pid 34405:tid 34411] [client 20.243.53.228:62135] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yanki.php"] [unique_id "aR7bTjFpvu8oRK7ATfsGhgAAAQQ"]
[Thu Nov 20 17:11:45.439397 2025] [:error] [pid 55430:tid 55446] [client 20.243.53.228:61498] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/g7y.php"] [unique_id "aR7bUfPZXaIMEU4pE7vuYwAAAM0"]
[Thu Nov 20 17:11:46.402438 2025] [:error] [pid 55342:tid 55374] [client 20.243.53.228:63312] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/g7y.php"] [unique_id "aR7bUrg6x32Tvk7fIG_I8gAAAEI"]
[Thu Nov 20 17:11:47.271266 2025] [:error] [pid 40415:tid 40431] [client 20.243.53.228:62775] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/g7y.php"] [unique_id "aR7bU6hjIyLSv09svwORWAAAAc0"]
[Thu Nov 20 17:11:49.688516 2025] [:error] [pid 40415:tid 40421] [client 20.243.53.228:63329] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/g7y.php"] [unique_id "aR7bVahjIyLSv09svwORXAAAAcM"]
[Thu Nov 20 17:11:51.046819 2025] [:error] [pid 40415:tid 40422] [client 20.243.53.228:62770] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ok.php"] [unique_id "aR7bV6hjIyLSv09svwORYQAAAcQ"]
[Thu Nov 20 17:11:54.662915 2025] [:error] [pid 40636:tid 40650] [client 20.243.53.228:62781] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ok.php"] [unique_id "aR7bWgK8BWUoW3xq0HD8dgAAA4o"]
[Thu Nov 20 17:11:55.385155 2025] [:error] [pid 40445:tid 40498] [client 20.243.53.228:61486] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ok.php"] [unique_id "aR7bW1H-MuFcoWRjXpY8oAAAAlc"]
[Thu Nov 20 17:11:56.545443 2025] [:error] [pid 40415:tid 40441] [client 20.243.53.228:61491] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ok.php"] [unique_id "aR7bXKhjIyLSv09svwORbAAAAdc"]
[Thu Nov 20 17:11:56.959522 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:52696] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yasnu.php"] [unique_id "aR7bXDFpvu8oRK7ATfsGmAAAARE"]
[Thu Nov 20 17:12:00.642654 2025] [:error] [pid 55340:tid 55351] [client 20.243.53.228:63304] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yasnu.php"] [unique_id "aR7bYPOxD-NeMydTybCLuwAAAAY"]
[Thu Nov 20 17:12:10.183747 2025] [:error] [pid 40636:tid 40658] [client 20.243.53.228:52703] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yasnu.php"] [unique_id "aR7bagK8BWUoW3xq0HD8fgAAA5I"]
[Thu Nov 20 17:12:32.119301 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:62742] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wio.php"] [unique_id "aR7bgFH-MuFcoWRjXpY8uAAAAlE"]
[Thu Nov 20 17:12:33.194826 2025] [:error] [pid 40508:tid 40520] [client 20.243.53.228:52675] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wio.php"] [unique_id "aR7bgaxXNVCMW_ksxPuF4wAAAoo"]
[Thu Nov 20 17:12:34.818494 2025] [:error] [pid 55430:tid 55439] [client 20.243.53.228:62758] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wio.php"] [unique_id "aR7bgvPZXaIMEU4pE7vueAAAAMY"]
[Thu Nov 20 17:12:57.377286 2025] [:error] [pid 34405:tid 34415] [client 20.243.53.228:62706] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp670.php"] [unique_id "aR7bmTFpvu8oRK7ATfsG2AAAAQg"]
[Thu Nov 20 17:12:59.667367 2025] [:error] [pid 40415:tid 40438] [client 20.243.53.228:62740] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp670.php"] [unique_id "aR7bm6hjIyLSv09svwORkwAAAdQ"]
[Thu Nov 20 17:13:02.148818 2025] [:error] [pid 40415:tid 40420] [client 20.243.53.228:63302] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp670.php"] [unique_id "aR7bnqhjIyLSv09svwORlgAAAcI"]
[Thu Nov 20 17:13:08.066679 2025] [:error] [pid 55430:tid 55437] [client 20.243.53.228:62702] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp670.php"] [unique_id "aR7bpPPZXaIMEU4pE7vumAAAAMQ"]
[Thu Nov 20 17:13:08.570406 2025] [:error] [pid 40445:tid 40491] [client 20.243.53.228:62782] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Okxob.php"] [unique_id "aR7bpFH-MuFcoWRjXpY8ywAAAlA"]
[Thu Nov 20 17:13:15.625654 2025] [:error] [pid 40508:tid 40515] [client 20.243.53.228:62778] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Okxob.php"] [unique_id "aR7bq6xXNVCMW_ksxPuGKAAAAoU"]
[Thu Nov 20 17:13:17.321298 2025] [:error] [pid 40445:tid 40487] [client 20.243.53.228:52704] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Okxob.php"] [unique_id "aR7brVH-MuFcoWRjXpY81gAAAkw"]
[Thu Nov 20 17:13:18.125250 2025] [:error] [pid 55343:tid 55422] [client 20.243.53.228:61461] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Okxob.php"] [unique_id "aR7brlWlO3EnyVMV7w6hWAAAAJc"]
[Thu Nov 20 17:13:25.160752 2025] [:error] [pid 40636:tid 40660] [client 20.243.53.228:62674] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Sanskrit.php"] [unique_id "aR7btQK8BWUoW3xq0HD8pQAAA5Q"]
[Thu Nov 20 17:13:28.751944 2025] [:error] [pid 40445:tid 40498] [client 20.243.53.228:62713] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Sanskrit.php"] [unique_id "aR7buFH-MuFcoWRjXpY83AAAAlc"]
[Thu Nov 20 17:13:30.636880 2025] [:error] [pid 55343:tid 55399] [client 20.243.53.228:52695] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Sanskrit.php"] [unique_id "aR7bulWlO3EnyVMV7w6hZAAAAIA"]
[Thu Nov 20 17:13:42.331772 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:62739] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jq.php"] [unique_id "aR7bxlH-MuFcoWRjXpY86wAAAkg"]
[Thu Nov 20 17:13:43.275843 2025] [:error] [pid 40636:tid 40645] [client 20.243.53.228:62779] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jq.php"] [unique_id "aR7bxwK8BWUoW3xq0HD8vAAAA4U"]
[Thu Nov 20 17:14:25.806452 2025] [:error] [pid 55342:tid 55383] [client 20.243.53.228:52712] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-freya.php"] [unique_id "aR7b8bg6x32Tvk7fIG_JSQAAAEs"]
[Thu Nov 20 17:14:27.641078 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:52673] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-freya.php"] [unique_id "aR7b81H-MuFcoWRjXpY9AgAAAlQ"]
[Thu Nov 20 17:14:29.867829 2025] [:error] [pid 34405:tid 34421] [client 20.243.53.228:62763] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-freya.php"] [unique_id "aR7b9TFpvu8oRK7ATfsHMAAAAQ4"]
[Thu Nov 20 17:14:32.201776 2025] [:error] [pid 34405:tid 34417] [client 20.243.53.228:61450] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-freya.php"] [unique_id "aR7b-DFpvu8oRK7ATfsHMgAAAQo"]
[Thu Nov 20 17:14:34.918527 2025] [:error] [pid 55343:tid 55405] [client 20.243.53.228:63343] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hello.php"] [unique_id "aR7b-lWlO3EnyVMV7w6heQAAAIY"]
[Thu Nov 20 17:14:35.613280 2025] [:error] [pid 40636:tid 40662] [client 20.243.53.228:61463] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hello.php"] [unique_id "aR7b-wK8BWUoW3xq0HD8xgAAA5Y"]
[Thu Nov 20 17:14:39.565606 2025] [:error] [pid 55342:tid 55380] [client 20.243.53.228:52702] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hello.php"] [unique_id "aR7b_7g6x32Tvk7fIG_JTAAAAEg"]
[Thu Nov 20 17:14:42.990993 2025] [:error] [pid 40537:tid 40546] [client 20.243.53.228:52682] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hello.php"] [unique_id "aR7cAqKlsL5kxTa3c1zRswAAAsU"]
[Thu Nov 20 17:14:44.153655 2025] [:error] [pid 55342:tid 55375] [client 20.243.53.228:62743] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ex.php"] [unique_id "aR7cBLg6x32Tvk7fIG_JTgAAAEM"]
[Thu Nov 20 17:14:47.079851 2025] [:error] [pid 40445:tid 40476] [client 20.243.53.228:62759] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ex.php"] [unique_id "aR7cB1H-MuFcoWRjXpY9DwAAAkE"]
[Thu Nov 20 17:14:49.963304 2025] [:error] [pid 55340:tid 55358] [client 20.243.53.228:61496] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ex.php"] [unique_id "aR7cCfOxD-NeMydTybCL7wAAAA0"]
[Thu Nov 20 17:14:58.143964 2025] [:error] [pid 55342:tid 55376] [client 20.243.53.228:62757] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ex.php"] [unique_id "aR7cErg6x32Tvk7fIG_JUwAAAEQ"]
[Thu Nov 20 17:14:59.403016 2025] [:error] [pid 55340:tid 55346] [client 20.243.53.228:61448] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock1.php"] [unique_id "aR7cE_OxD-NeMydTybCL8AAAAAE"]
[Thu Nov 20 17:15:02.540667 2025] [:error] [pid 40508:tid 40522] [client 20.243.53.228:52716] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock1.php"] [unique_id "aR7cFqxXNVCMW_ksxPuGVwAAAow"]
[Thu Nov 20 17:15:03.848423 2025] [:error] [pid 55430:tid 55440] [client 20.243.53.228:61465] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock1.php"] [unique_id "aR7cF_PZXaIMEU4pE7vuxQAAAMc"]
[Thu Nov 20 17:15:08.436890 2025] [:error] [pid 40445:tid 40479] [client 20.243.53.228:61470] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock1.php"] [unique_id "aR7cHFH-MuFcoWRjXpY9GQAAAkQ"]
[Thu Nov 20 17:15:10.137081 2025] [:error] [pid 55430:tid 55447] [client 20.243.53.228:63297] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mini.php"] [unique_id "aR7cHvPZXaIMEU4pE7vuxgAAAM4"]
[Thu Nov 20 17:15:16.925474 2025] [:error] [pid 40508:tid 40519] [client 20.243.53.228:62689] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mini.php"] [unique_id "aR7cJKxXNVCMW_ksxPuGbQAAAok"]
[Thu Nov 20 17:15:18.725976 2025] [:error] [pid 34405:tid 34410] [client 20.243.53.228:38014] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mini.php"] [unique_id "aR7cJjFpvu8oRK7ATfsHWgAAAQM"]
[Thu Nov 20 17:15:20.870602 2025] [:error] [pid 55342:tid 55391] [client 20.243.53.228:64656] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mini.php"] [unique_id "aR7cKLg6x32Tvk7fIG_JYwAAAFM"]
[Thu Nov 20 17:15:22.018426 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:65171] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ups.php"] [unique_id "aR7cKqxXNVCMW_ksxPuGbwAAApU"]
[Thu Nov 20 17:15:46.977164 2025] [:error] [pid 40537:tid 40554] [client 20.243.53.228:65211] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-gr.php"] [unique_id "aR7cQqKlsL5kxTa3c1zRxwAAAs0"]
[Thu Nov 20 17:15:55.225202 2025] [:error] [pid 40636:tid 40641] [client 20.243.53.228:38542] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-gr.php"] [unique_id "aR7cSwK8BWUoW3xq0HD84AAAA4E"]
[Thu Nov 20 17:16:10.198718 2025] [:error] [pid 55342:tid 55393] [client 20.243.53.228:38553] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aR7cWrg6x32Tvk7fIG_JbQAAAFU"]
[Thu Nov 20 17:16:12.683911 2025] [:error] [pid 55340:tid 55351] [client 20.243.53.228:63821] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aR7cXPOxD-NeMydTybCMAgAAAAY"]
[Thu Nov 20 17:16:13.658119 2025] [:error] [pid 40508:tid 40527] [client 20.243.53.228:38572] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aR7cXaxXNVCMW_ksxPuGiAAAApE"]
[Thu Nov 20 17:16:17.354875 2025] [:error] [pid 40508:tid 40515] [client 20.243.53.228:38574] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aR7cYaxXNVCMW_ksxPuGigAAAoU"]
[Thu Nov 20 17:16:35.649625 2025] [:error] [pid 40636:tid 40644] [client 20.243.53.228:38569] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/aa.php"] [unique_id "aR7ccwK8BWUoW3xq0HD85wAAA4Q"]
[Thu Nov 20 17:16:36.665060 2025] [:error] [pid 55342:tid 55383] [client 20.243.53.228:38096] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/aa.php"] [unique_id "aR7cdLg6x32Tvk7fIG_JcwAAAEs"]
[Thu Nov 20 17:16:39.182759 2025] [:error] [pid 40537:tid 40542] [client 20.243.53.228:38545] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/aa.php"] [unique_id "aR7cd6KlsL5kxTa3c1zR1QAAAsE"]
[Thu Nov 20 17:16:40.454766 2025] [:error] [pid 40445:tid 40476] [client 20.243.53.228:63860] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/aa.php"] [unique_id "aR7ceFH-MuFcoWRjXpY9RQAAAkE"]
[Thu Nov 20 17:17:06.380679 2025] [:error] [pid 40537:tid 40563] [client 20.243.53.228:38551] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bkxzo.php"] [unique_id "aR7ckqKlsL5kxTa3c1zR6AAAAtY"]
[Thu Nov 20 17:17:07.493241 2025] [:error] [pid 55340:tid 55348] [client 20.243.53.228:38555] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bkxzo.php"] [unique_id "aR7ck_OxD-NeMydTybCMCwAAAAM"]
[Thu Nov 20 17:17:09.969892 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:63867] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bkxzo.php"] [unique_id "aR7claxXNVCMW_ksxPuGxwAAApU"]
[Thu Nov 20 17:17:11.608852 2025] [:error] [pid 40508:tid 40517] [client 20.243.53.228:38543] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bkxzo.php"] [unique_id "aR7cl6xXNVCMW_ksxPuGyAAAAoc"]
[Thu Nov 20 17:17:13.307796 2025] [:error] [pid 55430:tid 55437] [client 20.243.53.228:63829] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/okxoby.php"] [unique_id "aR7cmfPZXaIMEU4pE7vu_QAAAMQ"]
[Thu Nov 20 17:17:15.311028 2025] [:error] [pid 40636:tid 40655] [client 20.243.53.228:63820] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/okxoby.php"] [unique_id "aR7cmwK8BWUoW3xq0HD8-AAAA48"]
[Thu Nov 20 17:17:21.829990 2025] [:error] [pid 55343:tid 55423] [client 20.243.53.228:63836] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/okxoby.php"] [unique_id "aR7coVWlO3EnyVMV7w6hvgAAAJg"]
[Thu Nov 20 17:17:22.953105 2025] [:error] [pid 34405:tid 34421] [client 20.243.53.228:63880] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/okxoby.php"] [unique_id "aR7cojFpvu8oRK7ATfsHjwAAAQ4"]
[Thu Nov 20 17:17:27.150627 2025] [:error] [pid 55430:tid 55457] [client 20.243.53.228:38115] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/error1.php"] [unique_id "aR7cp_PZXaIMEU4pE7vvBwAAANg"]
[Thu Nov 20 17:17:28.927511 2025] [:error] [pid 55342:tid 55385] [client 20.243.53.228:38138] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/error1.php"] [unique_id "aR7cqLg6x32Tvk7fIG_JwQAAAE0"]
[Thu Nov 20 17:17:32.113379 2025] [:error] [pid 40415:tid 40418] [client 20.243.53.228:63831] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/error1.php"] [unique_id "aR7crKhjIyLSv09svwOSGgAAAcA"]
[Thu Nov 20 17:17:33.345715 2025] [:error] [pid 55430:tid 55435] [client 20.243.53.228:38097] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/error1.php"] [unique_id "aR7crfPZXaIMEU4pE7vvHAAAAMI"]
[Thu Nov 20 17:17:36.759369 2025] [:error] [pid 40415:tid 40424] [client 20.243.53.228:38557] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xtt.php"] [unique_id "aR7csKhjIyLSv09svwOSHQAAAcY"]
[Thu Nov 20 17:17:37.731954 2025] [:error] [pid 40508:tid 40524] [client 20.243.53.228:38536] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xtt.php"] [unique_id "aR7csaxXNVCMW_ksxPuHBgAAAo4"]
[Thu Nov 20 17:17:49.225336 2025] [:error] [pid 55342:tid 55382] [client 20.243.53.228:38093] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7cvbg6x32Tvk7fIG_J3AAAAEo"]
[Thu Nov 20 17:17:52.470630 2025] [:error] [pid 40508:tid 40513] [client 20.243.53.228:63812] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7cwKxXNVCMW_ksxPuHFgAAAoM"]
[Thu Nov 20 17:17:56.210175 2025] [:error] [pid 40415:tid 40425] [client 20.243.53.228:38105] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7cxKhjIyLSv09svwOSJQAAAcc"]
[Thu Nov 20 17:17:58.241629 2025] [:error] [pid 40415:tid 40432] [client 20.243.53.228:38575] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aR7cxqhjIyLSv09svwOSJgAAAc4"]
[Thu Nov 20 17:18:29.510174 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:63864] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aR7c5TFpvu8oRK7ATfsHuwAAARE"]
[Thu Nov 20 17:18:30.438634 2025] [:error] [pid 40508:tid 40530] [client 20.243.53.228:63363] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aR7c5qxXNVCMW_ksxPuHJQAAApQ"]
[Thu Nov 20 17:18:31.972142 2025] [:error] [pid 55430:tid 55441] [client 20.243.53.228:63402] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aR7c5_PZXaIMEU4pE7vvKgAAAMg"]
[Thu Nov 20 17:18:33.402018 2025] [:error] [pid 40508:tid 40522] [client 20.243.53.228:63840] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aR7c6axXNVCMW_ksxPuHLAAAAow"]
[Thu Nov 20 17:53:27.725043 2025] [:error] [pid 40537:tid 40554] [client 192.178.4.103:55476] [client 192.178.4.103] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "152.42.140.41_041223a463c7548505e91f17600a6794508aa066"): Internal error (specific information not available) [hostname "funnyemuart.com.au"] [uri "/index.php"] [unique_id "aR7lEKKlsL5kxTa3c1zWdAAAAs0"]
[Thu Nov 20 21:09:40.230061 2025] [:error] [pid 40445:tid 40494] [client 20.251.221.145:14360] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hi.php"] [unique_id "aR8TFFH-MuFcoWRjXpaMRgAAAlM"]
[Thu Nov 20 21:09:41.042814 2025] [:error] [pid 55340:tid 55348] [client 20.251.221.145:27364] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hi.php"] [unique_id "aR8TFfOxD-NeMydTybC5YwAAAAM"]
[Thu Nov 20 21:09:42.648469 2025] [:error] [pid 34405:tid 34408] [client 20.251.221.145:4451] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hi.php"] [unique_id "aR8TFjFpvu8oRK7ATfs5BwAAAQE"]
[Thu Nov 20 21:09:43.687233 2025] [:error] [pid 40415:tid 40427] [client 20.251.221.145:28155] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hi.php"] [unique_id "aR8TF6hjIyLSv09svwPJwwAAAck"]
[Thu Nov 20 21:09:45.856754 2025] [:error] [pid 40537:tid 40557] [client 20.251.221.145:4434] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v.php"] [unique_id "aR8TGaKlsL5kxTa3c1z8IQAAAtA"]
[Thu Nov 20 21:09:47.349065 2025] [:error] [pid 40508:tid 40512] [client 20.251.221.145:16899] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v.php"] [unique_id "aR8TG6xXNVCMW_ksxPvXQQAAAoI"]
[Thu Nov 20 21:09:49.222947 2025] [:error] [pid 40445:tid 40478] [client 20.251.221.145:9884] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v.php"] [unique_id "aR8THVH-MuFcoWRjXpaMUwAAAkM"]
[Thu Nov 20 21:09:50.828073 2025] [:error] [pid 40445:tid 40490] [client 20.251.221.145:11286] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v.php"] [unique_id "aR8THlH-MuFcoWRjXpaMWQAAAk8"]
[Thu Nov 20 21:09:53.090394 2025] [:error] [pid 40508:tid 40530] [client 20.251.221.145:28138] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ar.php"] [unique_id "aR8TIaxXNVCMW_ksxPvXRAAAApQ"]
[Thu Nov 20 21:09:54.702379 2025] [:error] [pid 55343:tid 55415] [client 20.251.221.145:28156] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ar.php"] [unique_id "aR8TIlWlO3EnyVMV7w7LWgAAAJA"]
[Thu Nov 20 21:09:56.101403 2025] [:error] [pid 34405:tid 34412] [client 20.251.221.145:11327] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ar.php"] [unique_id "aR8TJDFpvu8oRK7ATfs5CQAAAQU"]
[Thu Nov 20 21:09:56.985178 2025] [:error] [pid 40445:tid 40479] [client 20.251.221.145:9898] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ar.php"] [unique_id "aR8TJFH-MuFcoWRjXpaMZAAAAkQ"]
[Thu Nov 20 21:09:58.635590 2025] [:error] [pid 55340:tid 55359] [client 20.251.221.145:12658] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aR8TJvOxD-NeMydTybC5ZgAAAA4"]
[Thu Nov 20 21:10:01.229386 2025] [:error] [pid 55430:tid 55449] [client 20.251.221.145:9340] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aR8TKfPZXaIMEU4pE7sbjAAAANA"]
[Thu Nov 20 21:10:02.340526 2025] [:error] [pid 55340:tid 55356] [client 20.251.221.145:36485] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aR8TKvOxD-NeMydTybC5agAAAAs"]
[Thu Nov 20 21:10:05.412644 2025] [:error] [pid 40636:tid 40662] [client 20.251.221.145:22299] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aR8TLQK8BWUoW3xq0HAnUwAAA5Y"]
[Thu Nov 20 21:10:07.059873 2025] [:error] [pid 55343:tid 55407] [client 20.251.221.145:14126] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aR8TL1WlO3EnyVMV7w7LYgAAAIg"]
[Thu Nov 20 21:10:08.904145 2025] [:error] [pid 40537:tid 40563] [client 20.251.221.145:14180] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aR8TMKKlsL5kxTa3c1z8JgAAAtY"]
[Thu Nov 20 21:10:11.124244 2025] [:error] [pid 55342:tid 55385] [client 20.251.221.145:11085] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aR8TM7g6x32Tvk7fIG_84wAAAE0"]
[Thu Nov 20 21:10:13.055241 2025] [:error] [pid 40445:tid 40493] [client 20.251.221.145:11060] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aR8TNVH-MuFcoWRjXpaMeQAAAlI"]
[Thu Nov 20 21:10:14.083002 2025] [:error] [pid 55342:tid 55374] [client 20.251.221.145:10156] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aR8TNrg6x32Tvk7fIG_85QAAAEI"]
[Thu Nov 20 21:10:14.965434 2025] [:error] [pid 40445:tid 40480] [client 20.251.221.145:4512] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aR8TNlH-MuFcoWRjXpaMewAAAkU"]
[Thu Nov 20 21:10:16.434352 2025] [:error] [pid 34405:tid 34419] [client 20.251.221.145:13913] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aR8TODFpvu8oRK7ATfs5DgAAAQw"]
[Thu Nov 20 21:10:18.373672 2025] [:error] [pid 55340:tid 55369] [client 20.251.221.145:4768] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aR8TOvOxD-NeMydTybC5bQAAABg"]
[Thu Nov 20 21:10:19.870353 2025] [:error] [pid 40445:tid 40486] [client 20.251.221.145:18041] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bak.php"] [unique_id "aR8TO1H-MuFcoWRjXpaMhgAAAks"]
[Thu Nov 20 21:10:22.521627 2025] [:error] [pid 55343:tid 55405] [client 20.251.221.145:4746] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bak.php"] [unique_id "aR8TPlWlO3EnyVMV7w7LbwAAAIY"]
[Thu Nov 20 21:10:23.530610 2025] [:error] [pid 40537:tid 40564] [client 20.251.221.145:15998] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bak.php"] [unique_id "aR8TP6KlsL5kxTa3c1z8LQAAAtc"]
[Thu Nov 20 21:10:25.206938 2025] [:error] [pid 40445:tid 40486] [client 20.251.221.145:10734] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bak.php"] [unique_id "aR8TQVH-MuFcoWRjXpaMjwAAAks"]
[Thu Nov 20 21:10:27.520543 2025] [:error] [pid 40415:tid 40424] [client 20.251.221.145:10688] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ini.php"] [unique_id "aR8TQ6hjIyLSv09svwPJ1gAAAcY"]
[Thu Nov 20 21:10:29.825318 2025] [:error] [pid 40636:tid 40654] [client 20.251.221.145:13145] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ini.php"] [unique_id "aR8TRQK8BWUoW3xq0HAnYQAAA44"]
[Thu Nov 20 21:10:31.623653 2025] [:error] [pid 55343:tid 55401] [client 20.251.221.145:4979] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ini.php"] [unique_id "aR8TR1WlO3EnyVMV7w7LfwAAAII"]
[Thu Nov 20 21:10:32.544588 2025] [:error] [pid 55340:tid 55357] [client 20.251.221.145:12154] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ini.php"] [unique_id "aR8TSPOxD-NeMydTybC5cgAAAAw"]
[Thu Nov 20 21:10:33.771813 2025] [:error] [pid 40537:tid 40548] [client 20.251.221.145:4975] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aR8TSaKlsL5kxTa3c1z8MwAAAsc"]
[Thu Nov 20 21:10:35.400273 2025] [:error] [pid 40445:tid 40475] [client 20.251.221.145:4734] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aR8TS1H-MuFcoWRjXpaMpgAAAkA"]
[Thu Nov 20 21:10:36.990771 2025] [:error] [pid 40445:tid 40496] [client 20.251.221.145:12159] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aR8TTFH-MuFcoWRjXpaMrAAAAlU"]
[Thu Nov 20 21:11:01.113632 2025] [:error] [pid 40445:tid 40480] [client 20.251.221.145:13174] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aR8TZVH-MuFcoWRjXpaMzgAAAkU"]
[Thu Nov 20 21:11:03.564696 2025] [:error] [pid 40508:tid 40525] [client 20.251.221.145:28015] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aR8TZ6xXNVCMW_ksxPvXggAAAo8"]
[Thu Nov 20 21:11:06.309209 2025] [:error] [pid 40636:tid 40662] [client 20.251.221.145:18331] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aR8TagK8BWUoW3xq0HAnbgAAA5Y"]
[Thu Nov 20 21:11:07.390442 2025] [:error] [pid 40508:tid 40520] [client 20.251.221.145:18359] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aR8Ta6xXNVCMW_ksxPvXhAAAAoo"]
[Thu Nov 20 21:11:08.128795 2025] [:error] [pid 55343:tid 55414] [client 20.251.221.145:9601] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/iov.php"] [unique_id "aR8TbFWlO3EnyVMV7w7LkQAAAI8"]
[Thu Nov 20 21:11:10.752395 2025] [:error] [pid 40508:tid 40513] [client 20.251.221.145:40196] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/iov.php"] [unique_id "aR8TbqxXNVCMW_ksxPvXhwAAAoM"]
[Thu Nov 20 21:11:12.642233 2025] [:error] [pid 55340:tid 55360] [client 20.251.221.145:10634] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/iov.php"] [unique_id "aR8TcPOxD-NeMydTybC5fgAAAA8"]
[Thu Nov 20 21:11:14.657652 2025] [:error] [pid 40508:tid 40511] [client 20.251.221.145:4607] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/iov.php"] [unique_id "aR8TcqxXNVCMW_ksxPvXjwAAAoE"]
[Thu Nov 20 21:11:16.406773 2025] [:error] [pid 34405:tid 34408] [client 20.251.221.145:18366] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ouh.php"] [unique_id "aR8TdDFpvu8oRK7ATfs5MwAAAQE"]
[Thu Nov 20 21:11:20.088953 2025] [:error] [pid 55343:tid 55410] [client 20.251.221.145:40129] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ouh.php"] [unique_id "aR8TeFWlO3EnyVMV7w7LlwAAAIs"]
[Thu Nov 20 21:11:23.425058 2025] [:error] [pid 40537:tid 40545] [client 20.251.221.145:4580] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ouh.php"] [unique_id "aR8Te6KlsL5kxTa3c1z8WAAAAsQ"]
[Thu Nov 20 21:11:27.382720 2025] [:error] [pid 55430:tid 55448] [client 20.251.221.145:4841] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ouh.php"] [unique_id "aR8Tf_PZXaIMEU4pE7sbrgAAAM8"]
[Thu Nov 20 21:11:29.657737 2025] [:error] [pid 55430:tid 55453] [client 20.251.221.145:15881] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/asgtt.php"] [unique_id "aR8TgfPZXaIMEU4pE7sbsAAAANQ"]
[Thu Nov 20 21:11:30.505090 2025] [:error] [pid 40537:tid 40559] [client 20.251.221.145:18333] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/asgtt.php"] [unique_id "aR8TgqKlsL5kxTa3c1z8YwAAAtI"]
[Thu Nov 20 21:11:32.073511 2025] [:error] [pid 40445:tid 40480] [client 20.251.221.145:4991] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/asgtt.php"] [unique_id "aR8ThFH-MuFcoWRjXpaM5QAAAkU"]
[Thu Nov 20 21:11:33.338170 2025] [:error] [pid 40415:tid 40442] [client 20.251.221.145:40185] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/asgtt.php"] [unique_id "aR8ThahjIyLSv09svwPJ-wAAAdg"]
[Thu Nov 20 21:11:34.255052 2025] [:error] [pid 40508:tid 40520] [client 20.251.221.145:4928] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/image.php"] [unique_id "aR8ThqxXNVCMW_ksxPvXqQAAAoo"]
[Thu Nov 20 21:11:35.493135 2025] [:error] [pid 40636:tid 40651] [client 20.251.221.145:15568] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/image.php"] [unique_id "aR8ThwK8BWUoW3xq0HAngAAAA4s"]
[Thu Nov 20 21:11:37.425386 2025] [:error] [pid 55430:tid 55435] [client 20.251.221.145:4558] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/image.php"] [unique_id "aR8TifPZXaIMEU4pE7sbuwAAAMI"]
[Thu Nov 20 21:11:38.592465 2025] [:error] [pid 40445:tid 40496] [client 20.251.221.145:9943] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/image.php"] [unique_id "aR8TilH-MuFcoWRjXpaM8gAAAlU"]
[Thu Nov 20 21:11:39.855893 2025] [:error] [pid 40636:tid 40654] [client 20.251.221.145:12092] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wok.php"] [unique_id "aR8TiwK8BWUoW3xq0HAnggAAA44"]
[Thu Nov 20 21:11:41.721117 2025] [:error] [pid 40537:tid 40558] [client 20.251.221.145:4842] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wok.php"] [unique_id "aR8TjaKlsL5kxTa3c1z8aQAAAtE"]
[Thu Nov 20 21:11:42.666375 2025] [:error] [pid 55430:tid 55451] [client 20.251.221.145:18343] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wok.php"] [unique_id "aR8TjvPZXaIMEU4pE7sbxgAAANI"]
[Thu Nov 20 21:11:43.895814 2025] [:error] [pid 55340:tid 55362] [client 20.251.221.145:4556] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wok.php"] [unique_id "aR8Tj_OxD-NeMydTybC5ngAAABE"]
[Thu Nov 20 21:11:45.178096 2025] [:error] [pid 34405:tid 34424] [client 20.251.221.145:29077] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alexus.php"] [unique_id "aR8TkTFpvu8oRK7ATfs5RAAAARE"]
[Thu Nov 20 21:11:46.158883 2025] [:error] [pid 55430:tid 55453] [client 20.251.221.145:5058] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alexus.php"] [unique_id "aR8TkvPZXaIMEU4pE7sbygAAANQ"]
[Thu Nov 20 21:11:46.999470 2025] [:error] [pid 40445:tid 40491] [client 20.251.221.145:11541] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alexus.php"] [unique_id "aR8TklH-MuFcoWRjXpaM-wAAAlA"]
[Thu Nov 20 21:11:48.386154 2025] [:error] [pid 40508:tid 40522] [client 20.251.221.145:40812] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alexus.php"] [unique_id "aR8TlKxXNVCMW_ksxPvXvQAAAow"]
[Thu Nov 20 21:11:50.029753 2025] [:error] [pid 55340:tid 55364] [client 20.251.221.145:40183] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sadis.php"] [unique_id "aR8TlvOxD-NeMydTybC5ogAAABM"]
[Thu Nov 20 21:11:50.886793 2025] [:error] [pid 55343:tid 55420] [client 20.251.221.145:4828] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sadis.php"] [unique_id "aR8TllWlO3EnyVMV7w7LsQAAAJU"]
[Thu Nov 20 21:11:51.814051 2025] [:error] [pid 34405:tid 34422] [client 20.251.221.145:4572] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sadis.php"] [unique_id "aR8TlzFpvu8oRK7ATfs5SQAAAQ8"]
[Thu Nov 20 21:11:52.651379 2025] [:error] [pid 40445:tid 40497] [client 20.251.221.145:4843] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sadis.php"] [unique_id "aR8TmFH-MuFcoWRjXpaNAgAAAlY"]
[Thu Nov 20 21:11:54.588007 2025] [:error] [pid 55343:tid 55408] [client 20.251.221.145:4545] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admir.php"] [unique_id "aR8TmlWlO3EnyVMV7w7LwAAAAIk"]
[Thu Nov 20 21:11:55.796980 2025] [:error] [pid 55342:tid 55375] [client 20.251.221.145:11544] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admir.php"] [unique_id "aR8Tm7g6x32Tvk7fIG_9HAAAAEM"]
[Thu Nov 20 21:11:57.264545 2025] [:error] [pid 55342:tid 55374] [client 20.251.221.145:15578] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admir.php"] [unique_id "aR8Tnbg6x32Tvk7fIG_9HgAAAEI"]
[Thu Nov 20 21:11:58.291213 2025] [:error] [pid 34405:tid 34430] [client 20.251.221.145:4819] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admir.php"] [unique_id "aR8TnjFpvu8oRK7ATfs5TgAAARc"]
[Thu Nov 20 21:12:17.844567 2025] [:error] [pid 55430:tid 55439] [client 20.251.221.145:39131] [client 20.251.221.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aR8TsfPZXaIMEU4pE7sb6QAAAMY"]
[Thu Nov 20 21:12:25.379866 2025] [:error] [pid 40445:tid 40492] [client 20.251.221.145:10218] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR8TuVH-MuFcoWRjXpaNLAAAAlE"]
[Thu Nov 20 21:12:26.178645 2025] [:error] [pid 55342:tid 55392] [client 20.251.221.145:40187] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR8Turg6x32Tvk7fIG_9MwAAAFQ"]
[Thu Nov 20 21:12:28.017064 2025] [:error] [pid 55430:tid 55446] [client 20.251.221.145:15557] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR8TvPPZXaIMEU4pE7sb8wAAAM0"]
[Thu Nov 20 21:12:30.625395 2025] [:error] [pid 40445:tid 40477] [client 20.251.221.145:15553] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gm.php"] [unique_id "aR8TvlH-MuFcoWRjXpaNMwAAAkI"]
[Thu Nov 20 21:12:33.207859 2025] [:error] [pid 40537:tid 40563] [client 20.251.221.145:10237] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aR8TwaKlsL5kxTa3c1z8lgAAAtY"]
[Thu Nov 20 21:12:34.238132 2025] [:error] [pid 40537:tid 40549] [client 20.251.221.145:15580] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aR8TwqKlsL5kxTa3c1z8lwAAAsg"]
[Thu Nov 20 21:12:36.183728 2025] [:error] [pid 55430:tid 55453] [client 20.251.221.145:40165] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aR8TxPPZXaIMEU4pE7sb_AAAANQ"]
[Thu Nov 20 21:12:38.188733 2025] [:error] [pid 55430:tid 55434] [client 20.251.221.145:15821] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aR8TxvPZXaIMEU4pE7sb_QAAAME"]
[Thu Nov 20 21:12:39.694857 2025] [:error] [pid 40508:tid 40517] [client 20.251.221.145:15614] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8Tx6xXNVCMW_ksxPvX6QAAAoc"]
[Thu Nov 20 21:12:40.889938 2025] [:error] [pid 55340:tid 55349] [client 20.251.221.145:40135] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8TyPOxD-NeMydTybC54AAAAAQ"]
[Thu Nov 20 21:12:42.151222 2025] [:error] [pid 40415:tid 40419] [client 20.251.221.145:15609] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8TyqhjIyLSv09svwPKVwAAAcE"]
[Thu Nov 20 21:12:43.316833 2025] [:error] [pid 55430:tid 55445] [client 20.251.221.145:15812] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8Ty_PZXaIMEU4pE7scAQAAAMw"]
[Thu Nov 20 21:12:44.792193 2025] [:error] [pid 40445:tid 40497] [client 20.251.221.145:10227] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aR8TzFH-MuFcoWRjXpaNaAAAAlY"]
[Thu Nov 20 21:12:46.845266 2025] [:error] [pid 40508:tid 40532] [client 20.251.221.145:9959] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aR8TzqxXNVCMW_ksxPvX8AAAApY"]
[Thu Nov 20 21:12:48.299959 2025] [:error] [pid 55342:tid 55386] [client 20.251.221.145:14819] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aR8T0Lg6x32Tvk7fIG_9WwAAAE4"]
[Thu Nov 20 21:12:49.542820 2025] [:error] [pid 40636:tid 40664] [client 20.251.221.145:11529] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aR8T0QK8BWUoW3xq0HAn2gAAA5g"]
[Thu Nov 20 21:12:50.734898 2025] [:error] [pid 40508:tid 40513] [client 20.251.221.145:15572] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aR8T0qxXNVCMW_ksxPvX8gAAAoM"]
[Thu Nov 20 21:12:53.204501 2025] [:error] [pid 40445:tid 40497] [client 20.251.221.145:21727] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aR8T1VH-MuFcoWRjXpaNjwAAAlY"]
[Thu Nov 20 21:12:54.552851 2025] [:error] [pid 34405:tid 34417] [client 20.251.221.145:10213] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aR8T1jFpvu8oRK7ATfs59QAAAQo"]
[Thu Nov 20 21:12:55.937616 2025] [:error] [pid 40445:tid 40488] [client 20.251.221.145:10179] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aR8T11H-MuFcoWRjXpaNlAAAAk0"]
[Thu Nov 20 21:12:57.194265 2025] [:error] [pid 34405:tid 34428] [client 20.251.221.145:11555] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aR8T2TFpvu8oRK7ATfs5-QAAARU"]
[Thu Nov 20 21:12:59.269664 2025] [:error] [pid 40445:tid 40478] [client 20.251.221.145:15831] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aR8T21H-MuFcoWRjXpaNlwAAAkM"]
[Thu Nov 20 21:13:00.428946 2025] [:error] [pid 55342:tid 55391] [client 20.251.221.145:9958] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aR8T3Lg6x32Tvk7fIG_9ZwAAAFM"]
[Thu Nov 20 21:13:01.535074 2025] [:error] [pid 40636:tid 40653] [client 20.251.221.145:29923] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aR8T3QK8BWUoW3xq0HAn4QAAA40"]
[Thu Nov 20 21:13:02.649820 2025] [:error] [pid 40537:tid 40543] [client 20.251.221.145:9935] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aR8T3qKlsL5kxTa3c1z8rAAAAsI"]
[Thu Nov 20 21:13:04.556386 2025] [:error] [pid 40415:tid 40440] [client 20.251.221.145:20145] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aR8T4KhjIyLSv09svwPKZAAAAdY"]
[Thu Nov 20 21:13:06.427318 2025] [:error] [pid 40537:tid 40541] [client 20.251.221.145:36603] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aR8T4qKlsL5kxTa3c1z8rQAAAsA"]
[Thu Nov 20 21:13:09.377600 2025] [:error] [pid 40415:tid 40442] [client 20.251.221.145:29908] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aR8T5ahjIyLSv09svwPKcQAAAdg"]
[Thu Nov 20 21:13:10.743992 2025] [:error] [pid 40636:tid 40644] [client 20.251.221.145:4912] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/d12.php"] [unique_id "aR8T5gK8BWUoW3xq0HAn5gAAA4Q"]
[Thu Nov 20 21:13:12.096133 2025] [:error] [pid 40445:tid 40496] [client 20.251.221.145:10214] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/d12.php"] [unique_id "aR8T6FH-MuFcoWRjXpaNqgAAAlU"]
[Thu Nov 20 21:13:13.426511 2025] [:error] [pid 55343:tid 55402] [client 20.251.221.145:36570] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/d12.php"] [unique_id "aR8T6VWlO3EnyVMV7w7MIwAAAIM"]
[Thu Nov 20 21:13:15.331244 2025] [:error] [pid 40537:tid 40544] [client 20.251.221.145:28011] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/d12.php"] [unique_id "aR8T66KlsL5kxTa3c1z8twAAAsM"]
[Thu Nov 20 21:13:16.165061 2025] [:error] [pid 40415:tid 40441] [client 20.251.221.145:36550] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8T7KhjIyLSv09svwPKcwAAAdc"]
[Thu Nov 20 21:13:18.324612 2025] [:error] [pid 40445:tid 40484] [client 20.251.221.145:4661] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8T7lH-MuFcoWRjXpaNuQAAAkk"]
[Thu Nov 20 21:13:20.273469 2025] [:error] [pid 55343:tid 55403] [client 20.251.221.145:4661] [client 20.251.221.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/up.php"] [unique_id "aR8T8FWlO3EnyVMV7w7MLQAAAIQ"]
[Fri Nov 21 14:13:50.300565 2025] [:error] [pid 46276:tid 46287] [client 180.190.51.241:29518] [client 180.190.51.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.51.241, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSADHnbpxuSAfajqqKP2YQAAAgQ"]
[Fri Nov 21 14:18:39.137613 2025] [:error] [pid 46276:tid 46292] [client 180.190.51.241:57241] [client 180.190.51.241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSAEP3bpxuSAfajqqKP3ggAAAgk"]
[Fri Nov 21 14:20:32.202634 2025] [:error] [pid 13326:tid 13373] [client 180.190.51.241:2374] [client 180.190.51.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.51.241, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAEsNh942-HkDIkOWp3KAAAAE8"]
[Fri Nov 21 14:22:15.432984 2025] [:error] [pid 46276:tid 46287] [client 180.190.51.241:29822] [client 180.190.51.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.51.241, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAFF3bpxuSAfajqqKP4RgAAAgQ"]
[Fri Nov 21 14:24:15.175345 2025] [:error] [pid 51434:tid 51444] [client 180.190.51.241:3165] [client 180.190.51.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.51.241, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAFj_U96liplEDkw_RhmwAAAQg"]
[Fri Nov 21 14:26:05.260509 2025] [:error] [pid 13327:tid 13400] [client 180.190.51.241:56974] [client 180.190.51.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.51.241, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSAF_fBXf-8B6mFkLeP_swAAAI8"]
[Fri Nov 21 14:35:40.339378 2025] [:error] [pid 25431:tid 25505] [client 213.21.239.4:49794] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSAIPMklhXxmoIExII39YAAAAJI"]
[Fri Nov 21 15:06:24.713250 2025] [:error] [pid 25521:tid 25547] [client 213.21.239.4:43076] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSAPcPhXnBMilDddn3W9FAAAANg"]
[Fri Nov 21 15:34:43.883236 2025] [:error] [pid 25554:tid 25577] [client 213.21.239.4:46290] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAWEx-NtB-9AzFZrk42bgAAARM"]
[Fri Nov 21 15:43:06.741090 2025] [:error] [pid 25554:tid 25574] [client 152.42.180.191:56505] [client 152.42.180.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/sftp-config.json"] [unique_id "aSAYCh-NtB-9AzFZrk48vgAAARA"]
[Fri Nov 21 16:05:26.939943 2025] [:error] [pid 25521:tid 25537] [client 213.21.239.4:37578] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAdRvhXnBMilDddn3XsZQAAAM4"]
[Fri Nov 21 17:41:37.193965 2025] [:error] [pid 25521:tid 25534] [client 134.149.18.28:12316] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSAz0fhXnBMilDddn3UM7wAAAMs"]
[Fri Nov 21 17:41:40.033706 2025] [:error] [pid 25430:tid 25473] [client 134.149.18.28:12318] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSAz1KpnWJcWt_4foXlk2wAAAE0"]
[Fri Nov 21 17:41:43.314855 2025] [:error] [pid 25430:tid 25472] [client 134.149.18.28:12346] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSAz16pnWJcWt_4foXlk3wAAAEw"]
[Fri Nov 21 17:41:45.944874 2025] [:error] [pid 25429:tid 25438] [client 134.149.18.28:12311] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSAz2T4rZbRSr7vu-NPLjAAAAAU"]
[Fri Nov 21 17:41:48.540366 2025] [:error] [pid 25431:tid 25500] [client 134.149.18.28:12289] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSAz3MklhXxmoIExII1d2wAAAI0"]
[Fri Nov 21 17:41:51.632701 2025] [:error] [pid 25521:tid 25544] [client 134.149.18.28:12320] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSAz3_hXnBMilDddn3UNBQAAANU"]
[Fri Nov 21 17:41:53.146892 2025] [:error] [pid 25431:tid 25501] [client 134.149.18.28:52481] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSAz4cklhXxmoIExII1eIgAAAI4"]
[Fri Nov 21 17:41:55.197207 2025] [:error] [pid 25429:tid 25446] [client 134.149.18.28:52492] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSAz4z4rZbRSr7vu-NPLkwAAAA0"]
[Fri Nov 21 17:42:13.955225 2025] [:error] [pid 25521:tid 25528] [client 134.149.18.28:12319] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSAz9fhXnBMilDddn3UNGQAAAMU"]
[Fri Nov 21 17:42:17.095585 2025] [:error] [pid 25430:tid 25465] [client 134.149.18.28:12300] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSAz-apnWJcWt_4foXllFwAAAEU"]
[Fri Nov 21 17:42:19.065533 2025] [:error] [pid 25521:tid 25538] [client 134.149.18.28:52490] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSAz-_hXnBMilDddn3UNHgAAAM8"]
[Fri Nov 21 17:42:21.881906 2025] [:error] [pid 25521:tid 25528] [client 134.149.18.28:52499] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aSAz_fhXnBMilDddn3UNKQAAAMU"]
[Fri Nov 21 17:42:25.750633 2025] [:error] [pid 46939:tid 46964] [client 134.149.18.28:12334] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSA0Ae0OmVoxD4VZ_Zmp7QAAAVY"]
[Fri Nov 21 17:42:27.588250 2025] [:error] [pid 25429:tid 25435] [client 134.149.18.28:52487] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSA0Az4rZbRSr7vu-NPLogAAAAI"]
[Fri Nov 21 17:42:34.329790 2025] [:error] [pid 46939:tid 46949] [client 134.149.18.28:52498] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSA0Cu0OmVoxD4VZ_Zmp8AAAAUc"]
[Fri Nov 21 17:42:46.267672 2025] [:error] [pid 46939:tid 46949] [client 134.149.18.28:52488] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSA0Fu0OmVoxD4VZ_Zmp_QAAAUc"]
[Fri Nov 21 17:42:53.263585 2025] [:error] [pid 25521:tid 25535] [client 134.149.18.28:52485] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aSA0HfhXnBMilDddn3UNOgAAAMw"]
[Fri Nov 21 17:42:57.014510 2025] [:error] [pid 46939:tid 46965] [client 134.149.18.28:12298] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aSA0Ie0OmVoxD4VZ_ZmqGwAAAVc"]
[Fri Nov 21 17:42:58.980960 2025] [:error] [pid 25521:tid 25540] [client 134.149.18.28:12338] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aSA0IvhXnBMilDddn3UNQQAAANE"]
[Fri Nov 21 17:43:11.592108 2025] [:error] [pid 25521:tid 25545] [client 134.149.18.28:12302] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/nc4.php"] [unique_id "aSA0L_hXnBMilDddn3UNZAAAANY"]
[Fri Nov 21 17:43:12.770216 2025] [:error] [pid 25429:tid 25450] [client 134.149.18.28:52495] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/nc4.php"] [unique_id "aSA0MD4rZbRSr7vu-NPLvgAAABE"]
[Fri Nov 21 17:43:14.352978 2025] [:error] [pid 25554:tid 25573] [client 134.149.18.28:12308] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/nc4.php"] [unique_id "aSA0Mh-NtB-9AzFZrk57cQAAAQ8"]
[Fri Nov 21 17:43:16.099335 2025] [:error] [pid 25521:tid 25528] [client 134.149.18.28:12291] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/nc4.php"] [unique_id "aSA0NPhXnBMilDddn3UNZgAAAMU"]
[Fri Nov 21 17:43:17.808052 2025] [:error] [pid 25431:tid 25509] [client 134.149.18.28:12313] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSA0NcklhXxmoIExII1eXwAAAJY"]
[Fri Nov 21 17:43:19.703748 2025] [:error] [pid 46939:tid 46947] [client 134.149.18.28:52501] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSA0N-0OmVoxD4VZ_ZmqMwAAAUU"]
[Fri Nov 21 17:43:30.518622 2025] [:error] [pid 25429:tid 25434] [client 134.149.18.28:52503] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSA0Qj4rZbRSr7vu-NPLxAAAAAE"]
[Fri Nov 21 17:43:46.856271 2025] [:error] [pid 25431:tid 25501] [client 134.149.18.28:48671] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/g.php"] [unique_id "aSA0UsklhXxmoIExII1ecwAAAI4"]
[Fri Nov 21 17:43:48.657863 2025] [:error] [pid 25430:tid 25467] [client 134.149.18.28:52496] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/13.php"] [unique_id "aSA0VKpnWJcWt_4foXllYwAAAEc"]
[Fri Nov 21 17:43:51.886218 2025] [:error] [pid 25554:tid 25567] [client 134.149.18.28:12304] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/13.php"] [unique_id "aSA0Vx-NtB-9AzFZrk57jAAAAQk"]
[Fri Nov 21 17:44:01.684711 2025] [:error] [pid 25554:tid 25564] [client 134.149.18.28:12329] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSA0YR-NtB-9AzFZrk57mQAAAQY"]
[Fri Nov 21 17:44:03.840468 2025] [proxy_fcgi:error] [pid 25554:tid 25560] [client 134.149.18.28:52525] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 17:44:04.110594 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:52525] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSA0ZB-NtB-9AzFZrk57oQAAAQs"]
[Fri Nov 21 17:44:06.544202 2025] [:error] [pid 25430:tid 25463] [client 134.149.18.28:48662] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSA0ZqpnWJcWt_4foXllaAAAAEM"]
[Fri Nov 21 17:44:28.889368 2025] [:error] [pid 25521:tid 25532] [client 134.149.18.28:48682] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSA0fPhXnBMilDddn3UNuAAAAMk"]
[Fri Nov 21 17:45:15.251253 2025] [:error] [pid 25431:tid 25489] [client 134.149.18.28:52514] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/i1.php"] [unique_id "aSA0q8klhXxmoIExII1e0gAAAII"]
[Fri Nov 21 17:45:20.390992 2025] [:error] [pid 25431:tid 25509] [client 134.149.18.28:12347] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/i1.php"] [unique_id "aSA0sMklhXxmoIExII1e2gAAAJY"]
[Fri Nov 21 17:45:24.259891 2025] [:error] [pid 25430:tid 25470] [client 134.149.18.28:12345] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/i1.php"] [unique_id "aSA0tKpnWJcWt_4foXllkQAAAEo"]
[Fri Nov 21 17:45:26.245508 2025] [:error] [pid 25521:tid 25527] [client 134.149.18.28:48659] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/i1.php"] [unique_id "aSA0tvhXnBMilDddn3UN3AAAAMQ"]
[Fri Nov 21 17:45:27.838020 2025] [:error] [pid 25554:tid 25567] [client 134.149.18.28:52504] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSA0tx-NtB-9AzFZrk574wAAAQk"]
[Fri Nov 21 17:45:30.622615 2025] [:error] [pid 25554:tid 25572] [client 134.149.18.28:12301] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSA0uh-NtB-9AzFZrk576gAAAQ4"]
[Fri Nov 21 17:45:35.357452 2025] [:error] [pid 25429:tid 25448] [client 134.149.18.28:12340] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSA0vz4rZbRSr7vu-NPMEgAAAA8"]
[Fri Nov 21 17:45:37.297532 2025] [:error] [pid 25554:tid 25575] [client 134.149.18.28:12339] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSA0wR-NtB-9AzFZrk578QAAARE"]
[Fri Nov 21 17:45:40.243467 2025] [:error] [pid 46939:tid 46947] [client 134.149.18.28:12333] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSA0xO0OmVoxD4VZ_ZmrDQAAAUU"]
[Fri Nov 21 17:45:42.254813 2025] [:error] [pid 46939:tid 46958] [client 134.149.18.28:52483] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSA0xu0OmVoxD4VZ_ZmrEwAAAVA"]
[Fri Nov 21 17:45:46.883209 2025] [:error] [pid 46939:tid 46952] [client 134.149.18.28:12295] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSA0yu0OmVoxD4VZ_ZmrJAAAAUo"]
[Fri Nov 21 17:45:48.765562 2025] [:error] [pid 25429:tid 25439] [client 134.149.18.28:52517] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSA0zD4rZbRSr7vu-NPMJgAAAAY"]
[Fri Nov 21 17:45:53.228482 2025] [:error] [pid 25430:tid 25468] [client 134.149.18.28:12294] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aSA00apnWJcWt_4foXllrgAAAEg"]
[Fri Nov 21 17:45:55.589363 2025] [:error] [pid 46939:tid 46957] [client 134.149.18.28:52509] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aSA00-0OmVoxD4VZ_ZmrOQAAAU8"]
[Fri Nov 21 17:46:04.849196 2025] [:error] [pid 46939:tid 46948] [client 134.149.18.28:12318] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/themes.php"] [unique_id "aSA03O0OmVoxD4VZ_ZmrXAAAAUY"]
[Fri Nov 21 17:46:13.693154 2025] [:error] [pid 25430:tid 25480] [client 134.149.18.28:52500] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSA05apnWJcWt_4foXllvAAAAFQ"]
[Fri Nov 21 17:46:16.028400 2025] [:error] [pid 25430:tid 25462] [client 134.149.18.28:48649] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSA06KpnWJcWt_4foXllvwAAAEI"]
[Fri Nov 21 17:46:18.465475 2025] [:error] [pid 25431:tid 25498] [client 134.149.18.28:52512] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSA06sklhXxmoIExII1fKQAAAIs"]
[Fri Nov 21 17:46:20.935280 2025] [:error] [pid 25554:tid 25571] [client 134.149.18.28:52537] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/fm.php"] [unique_id "aSA07B-NtB-9AzFZrk58KgAAAQ0"]
[Fri Nov 21 17:46:23.185593 2025] [:error] [pid 46939:tid 46955] [client 134.149.18.28:12325] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/17.php"] [unique_id "aSA07-0OmVoxD4VZ_ZmriwAAAU0"]
[Fri Nov 21 17:46:25.220564 2025] [:error] [pid 25429:tid 25442] [client 134.149.18.28:12306] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/17.php"] [unique_id "aSA08T4rZbRSr7vu-NPMPAAAAAk"]
[Fri Nov 21 17:46:26.551500 2025] [:error] [pid 25430:tid 25480] [client 134.149.18.28:12317] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/17.php"] [unique_id "aSA08qpnWJcWt_4foXll0wAAAFQ"]
[Fri Nov 21 17:46:31.104764 2025] [:error] [pid 25429:tid 25455] [client 134.149.18.28:52482] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/17.php"] [unique_id "aSA09z4rZbRSr7vu-NPMQQAAABY"]
[Fri Nov 21 17:46:32.278947 2025] [:error] [pid 46939:tid 46946] [client 134.149.18.28:52507] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0.php"] [unique_id "aSA0-O0OmVoxD4VZ_ZmrjgAAAUQ"]
[Fri Nov 21 17:46:38.287743 2025] [:error] [pid 25431:tid 25509] [client 134.149.18.28:12288] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0.php"] [unique_id "aSA0_sklhXxmoIExII1fgAAAAJY"]
[Fri Nov 21 17:46:40.404109 2025] [:error] [pid 25554:tid 25574] [client 134.149.18.28:12343] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0.php"] [unique_id "aSA1AB-NtB-9AzFZrk58TQAAARA"]
[Fri Nov 21 17:46:41.901314 2025] [:error] [pid 25431:tid 25506] [client 134.149.18.28:48642] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0.php"] [unique_id "aSA1AcklhXxmoIExII1fhAAAAJM"]
[Fri Nov 21 17:46:45.013529 2025] [:error] [pid 46939:tid 46961] [client 134.149.18.28:12321] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSA1Be0OmVoxD4VZ_ZmrkwAAAVM"]
[Fri Nov 21 17:46:46.979022 2025] [:error] [pid 25554:tid 25560] [client 134.149.18.28:52487] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSA1Bh-NtB-9AzFZrk58VAAAAQI"]
[Fri Nov 21 17:46:49.353458 2025] [:error] [pid 46939:tid 46945] [client 134.149.18.28:52489] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSA1Ce0OmVoxD4VZ_ZmrmQAAAUM"]
[Fri Nov 21 17:46:53.740366 2025] [:error] [pid 25554:tid 25558] [client 134.149.18.28:48676] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSA1DR-NtB-9AzFZrk58VwAAAQA"]
[Fri Nov 21 17:46:56.026508 2025] [:error] [pid 25521:tid 25534] [client 134.149.18.28:12326] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-configs.php"] [unique_id "aSA1EPhXnBMilDddn3UOagAAAMs"]
[Fri Nov 21 17:46:57.789306 2025] [:error] [pid 46939:tid 46960] [client 134.149.18.28:48650] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-configs.php"] [unique_id "aSA1Ee0OmVoxD4VZ_ZmrqQAAAVI"]
[Fri Nov 21 17:47:02.297535 2025] [:error] [pid 25521:tid 25537] [client 134.149.18.28:12328] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-configs.php"] [unique_id "aSA1FvhXnBMilDddn3UOcgAAAM4"]
[Fri Nov 21 17:47:04.435353 2025] [:error] [pid 25430:tid 25481] [client 134.149.18.28:12297] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-configs.php"] [unique_id "aSA1GKpnWJcWt_4foXll6AAAAFU"]
[Fri Nov 21 17:47:06.350980 2025] [:error] [pid 46939:tid 46954] [client 134.149.18.28:12310] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSA1Gu0OmVoxD4VZ_ZmrwAAAAUw"]
[Fri Nov 21 17:47:43.767817 2025] [:error] [pid 25431:tid 25499] [client 134.149.18.28:12344] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aSA1P8klhXxmoIExII1fywAAAIw"]
[Fri Nov 21 17:47:47.338233 2025] [:error] [pid 46939:tid 46947] [client 134.149.18.28:52516] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aSA1Q-0OmVoxD4VZ_ZmsDQAAAUU"]
[Fri Nov 21 17:47:50.292893 2025] [:error] [pid 25429:tid 25451] [client 134.149.18.28:12296] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/10.php"] [unique_id "aSA1Rj4rZbRSr7vu-NPMgwAAABI"]
[Fri Nov 21 17:47:51.412870 2025] [:error] [pid 46939:tid 46949] [client 134.149.18.28:52527] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/10.php"] [unique_id "aSA1R-0OmVoxD4VZ_ZmsHQAAAUc"]
[Fri Nov 21 17:47:54.855017 2025] [:error] [pid 25429:tid 25433] [client 134.149.18.28:52481] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/10.php"] [unique_id "aSA1Sj4rZbRSr7vu-NPMiQAAAAA"]
[Fri Nov 21 17:47:56.190416 2025] [:error] [pid 25430:tid 25472] [client 134.149.18.28:12307] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/10.php"] [unique_id "aSA1TKpnWJcWt_4foXlmKwAAAEw"]
[Fri Nov 21 17:48:04.934448 2025] [:error] [pid 25554:tid 25561] [client 134.149.18.28:52484] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/goat1.php"] [unique_id "aSA1VB-NtB-9AzFZrk580AAAAQM"]
[Fri Nov 21 17:48:06.200125 2025] [:error] [pid 46939:tid 46960] [client 134.149.18.28:48678] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/goat1.php"] [unique_id "aSA1Vu0OmVoxD4VZ_ZmsQgAAAVI"]
[Fri Nov 21 17:48:15.014354 2025] [:error] [pid 25554:tid 25572] [client 134.149.18.28:52536] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yu.php"] [unique_id "aSA1Xx-NtB-9AzFZrk582gAAAQ4"]
[Fri Nov 21 17:48:37.948909 2025] [autoindex:error] [pid 25429:tid 25448] [client 134.149.18.28:52510] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 17:48:52.742729 2025] [:error] [pid 25429:tid 25449] [client 134.149.18.28:52510] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sk.php"] [unique_id "aSA1hD4rZbRSr7vu-NPM5AAAABA"]
[Fri Nov 21 17:49:05.645258 2025] [:error] [pid 46939:tid 46947] [client 134.149.18.28:52518] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sk.php"] [unique_id "aSA1ke0OmVoxD4VZ_ZmslAAAAUU"]
[Fri Nov 21 17:49:07.375002 2025] [:error] [pid 25521:tid 25528] [client 134.149.18.28:52532] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sk.php"] [unique_id "aSA1k_hXnBMilDddn3UPoQAAAMU"]
[Fri Nov 21 17:49:09.685017 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:52493] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-crom.php"] [unique_id "aSA1lR-NtB-9AzFZrk59HQAAAQs"]
[Fri Nov 21 17:49:11.450664 2025] [:error] [pid 46939:tid 46958] [client 134.149.18.28:12338] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-crom.php"] [unique_id "aSA1l-0OmVoxD4VZ_ZmsmQAAAVA"]
[Fri Nov 21 17:49:20.870200 2025] [:error] [pid 25431:tid 25504] [client 134.149.18.28:52480] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-crom.php"] [unique_id "aSA1oMklhXxmoIExII1gaAAAAJE"]
[Fri Nov 21 17:49:24.040925 2025] [:error] [pid 25521:tid 25546] [client 134.149.18.28:12315] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/max.php"] [unique_id "aSA1pPhXnBMilDddn3UPsAAAANc"]
[Fri Nov 21 17:49:26.178640 2025] [:error] [pid 25521:tid 25541] [client 134.149.18.28:52499] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/max.php"] [unique_id "aSA1pvhXnBMilDddn3UPsgAAANI"]
[Fri Nov 21 17:50:16.776079 2025] [:error] [pid 25430:tid 25468] [client 134.149.18.28:12335] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sim.php"] [unique_id "aSA12KpnWJcWt_4foXlm7AAAAEg"]
[Fri Nov 21 17:50:19.825919 2025] [:error] [pid 25430:tid 25467] [client 134.149.18.28:12324] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sim.php"] [unique_id "aSA126pnWJcWt_4foXlm7QAAAEc"]
[Fri Nov 21 17:50:21.424785 2025] [:error] [pid 25431:tid 25508] [client 134.149.18.28:52502] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sim.php"] [unique_id "aSA13cklhXxmoIExII1gswAAAJU"]
[Fri Nov 21 17:50:23.790558 2025] [:error] [pid 46939:tid 46951] [client 134.149.18.28:12300] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sim.php"] [unique_id "aSA13-0OmVoxD4VZ_ZmtFwAAAUk"]
[Fri Nov 21 17:50:25.233333 2025] [:error] [pid 25431:tid 25495] [client 134.149.18.28:52531] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSA14cklhXxmoIExII1gtwAAAIg"]
[Fri Nov 21 17:50:27.404722 2025] [:error] [pid 25429:tid 25439] [client 134.149.18.28:12349] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSA14z4rZbRSr7vu-NPNOwAAAAY"]
[Fri Nov 21 17:50:29.501478 2025] [:error] [pid 25554:tid 25581] [client 134.149.18.28:52508] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSA15R-NtB-9AzFZrk59RwAAARc"]
[Fri Nov 21 17:50:32.302232 2025] [:error] [pid 25430:tid 25463] [client 134.149.18.28:52500] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSA16KpnWJcWt_4foXlm-AAAAEM"]
[Fri Nov 21 17:50:34.024035 2025] [:error] [pid 46939:tid 46951] [client 134.149.18.28:12309] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/oo.php"] [unique_id "aSA16u0OmVoxD4VZ_ZmtJgAAAUk"]
[Fri Nov 21 17:50:40.304227 2025] [:error] [pid 46939:tid 46964] [client 134.149.18.28:52511] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/oo.php"] [unique_id "aSA18O0OmVoxD4VZ_ZmtMAAAAVY"]
[Fri Nov 21 17:50:41.628584 2025] [:error] [pid 46939:tid 46966] [client 134.149.18.28:12342] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/oo.php"] [unique_id "aSA18e0OmVoxD4VZ_ZmtMgAAAVg"]
[Fri Nov 21 17:50:42.714665 2025] [:error] [pid 25430:tid 25478] [client 134.149.18.28:52494] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/oo.php"] [unique_id "aSA18qpnWJcWt_4foXlnAAAAAFI"]
[Fri Nov 21 17:50:44.257610 2025] [:error] [pid 25554:tid 25581] [client 134.149.18.28:48655] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfanew.php"] [unique_id "aSA19B-NtB-9AzFZrk59VQAAARc"]
[Fri Nov 21 17:50:46.937372 2025] [:error] [pid 25521:tid 25537] [client 134.149.18.28:52482] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfanew.php"] [unique_id "aSA19vhXnBMilDddn3UP1gAAAM4"]
[Fri Nov 21 17:50:49.458652 2025] [:error] [pid 25554:tid 25575] [client 134.149.18.28:48648] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfanew.php"] [unique_id "aSA1-R-NtB-9AzFZrk59WQAAARE"]
[Fri Nov 21 17:50:51.103795 2025] [:error] [pid 25430:tid 25468] [client 134.149.18.28:12311] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfanew.php"] [unique_id "aSA1-6pnWJcWt_4foXlnBQAAAEg"]
[Fri Nov 21 17:50:53.636205 2025] [:error] [pid 25554:tid 25577] [client 134.149.18.28:52538] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSA1_R-NtB-9AzFZrk59ZQAAARM"]
[Fri Nov 21 17:50:54.891372 2025] [:error] [pid 25429:tid 25437] [client 134.149.18.28:12332] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSA1_j4rZbRSr7vu-NPNXAAAAAQ"]
[Fri Nov 21 17:50:57.288484 2025] [:error] [pid 46939:tid 46957] [client 134.149.18.28:52498] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSA2Ae0OmVoxD4VZ_ZmtQwAAAU8"]
[Fri Nov 21 17:50:59.742612 2025] [:error] [pid 46939:tid 46963] [client 134.149.18.28:13059] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSA2A-0OmVoxD4VZ_ZmtRwAAAVU"]
[Fri Nov 21 17:51:02.329454 2025] [:error] [pid 25429:tid 25442] [client 134.149.18.28:12325] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSA2Bj4rZbRSr7vu-NPNawAAAAk"]
[Fri Nov 21 17:51:07.559268 2025] [:error] [pid 46939:tid 46957] [client 134.149.18.28:12295] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ll.php"] [unique_id "aSA2C-0OmVoxD4VZ_ZmtYQAAAU8"]
[Fri Nov 21 17:51:09.701996 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:12336] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ll.php"] [unique_id "aSA2DR-NtB-9AzFZrk59gwAAAQs"]
[Fri Nov 21 17:51:17.609828 2025] [:error] [pid 25431:tid 25507] [client 134.149.18.28:52504] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSA2FcklhXxmoIExII1g-QAAAJQ"]
[Fri Nov 21 17:51:42.352583 2025] [:error] [pid 46939:tid 46963] [client 134.149.18.28:12331] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wi.php"] [unique_id "aSA2Lu0OmVoxD4VZ_ZmtsQAAAVU"]
[Fri Nov 21 17:51:44.098023 2025] [:error] [pid 25430:tid 25484] [client 134.149.18.28:52505] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wi.php"] [unique_id "aSA2MKpnWJcWt_4foXlnNgAAAFg"]
[Fri Nov 21 17:51:45.942311 2025] [:error] [pid 46939:tid 46966] [client 134.149.18.28:12303] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wi.php"] [unique_id "aSA2Me0OmVoxD4VZ_ZmtuAAAAVg"]
[Fri Nov 21 17:51:48.041752 2025] [:error] [pid 25430:tid 25463] [client 134.149.18.28:12313] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wi.php"] [unique_id "aSA2NKpnWJcWt_4foXlnNwAAAEM"]
[Fri Nov 21 17:51:49.245137 2025] [:error] [pid 25554:tid 25570] [client 134.149.18.28:48667] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mms.php"] [unique_id "aSA2NR-NtB-9AzFZrk59nwAAAQw"]
[Fri Nov 21 17:51:50.960972 2025] [:error] [pid 25431:tid 25489] [client 134.149.18.28:48646] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mms.php"] [unique_id "aSA2NsklhXxmoIExII1hKQAAAII"]
[Fri Nov 21 17:51:52.446677 2025] [:error] [pid 25429:tid 25445] [client 134.149.18.28:52503] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mms.php"] [unique_id "aSA2OD4rZbRSr7vu-NPNkwAAAAw"]
[Fri Nov 21 17:51:54.239176 2025] [:error] [pid 25554:tid 25569] [client 134.149.18.28:12292] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mms.php"] [unique_id "aSA2Oh-NtB-9AzFZrk59twAAAQs"]
[Fri Nov 21 17:51:55.389667 2025] [:error] [pid 25431:tid 25511] [client 134.149.18.28:12305] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSA2O8klhXxmoIExII1hRAAAAJg"]
[Fri Nov 21 17:51:57.613692 2025] [:error] [pid 25431:tid 25498] [client 134.149.18.28:12298] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v4.php"] [unique_id "aSA2PcklhXxmoIExII1hSQAAAIs"]
[Fri Nov 21 17:51:59.389829 2025] [:error] [pid 46939:tid 46966] [client 134.149.18.28:12297] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v4.php"] [unique_id "aSA2P-0OmVoxD4VZ_ZmuCwAAAVg"]
[Fri Nov 21 17:52:07.568812 2025] [:error] [pid 25429:tid 25446] [client 134.149.18.28:12310] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v4.php"] [unique_id "aSA2Rz4rZbRSr7vu-NPNrwAAAA0"]
[Fri Nov 21 17:52:11.812987 2025] [:error] [pid 25430:tid 25465] [client 134.149.18.28:12290] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-mn.php"] [unique_id "aSA2S6pnWJcWt_4foXlncQAAAEU"]
[Fri Nov 21 17:52:17.526149 2025] [:error] [pid 25521:tid 25537] [client 134.149.18.28:48670] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-mn.php"] [unique_id "aSA2UfhXnBMilDddn3UQPwAAAM4"]
[Fri Nov 21 17:52:28.968026 2025] [:error] [pid 25429:tid 25442] [client 134.149.18.28:48656] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSA2XD4rZbRSr7vu-NPN4QAAAAk"]
[Fri Nov 21 17:52:33.052366 2025] [:error] [pid 25521:tid 25524] [client 134.149.18.28:52543] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSA2YfhXnBMilDddn3UQVgAAAME"]
[Fri Nov 21 17:52:35.206039 2025] [:error] [pid 25431:tid 25505] [client 134.149.18.28:12319] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSA2Y8klhXxmoIExII1hswAAAJI"]
[Fri Nov 21 17:52:38.249394 2025] [:error] [pid 25431:tid 25509] [client 134.149.18.28:52530] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSA2ZsklhXxmoIExII1hxgAAAJY"]
[Fri Nov 21 17:52:49.272664 2025] [:error] [pid 25521:tid 25532] [client 134.149.18.28:48695] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSA2cfhXnBMilDddn3UQmwAAAMk"]
[Fri Nov 21 17:53:17.342849 2025] [:error] [pid 46939:tid 46963] [client 134.149.18.28:48662] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/zews.php"] [unique_id "aSA2je0OmVoxD4VZ_ZmvCwAAAVU"]
[Fri Nov 21 17:53:21.472801 2025] [:error] [pid 46939:tid 46945] [client 134.149.18.28:12339] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/zews.php"] [unique_id "aSA2ke0OmVoxD4VZ_ZmvEAAAAUM"]
[Fri Nov 21 17:53:23.384563 2025] [:error] [pid 25431:tid 25501] [client 134.149.18.28:52510] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/zews.php"] [unique_id "aSA2k8klhXxmoIExII1iRgAAAI4"]
[Fri Nov 21 17:53:29.197216 2025] [:error] [pid 25430:tid 25471] [client 134.149.18.28:48668] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/zews.php"] [unique_id "aSA2mapnWJcWt_4foXlnzQAAAEs"]
[Fri Nov 21 17:53:32.262067 2025] [:error] [pid 25554:tid 25573] [client 134.149.18.28:12312] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSA2nB-NtB-9AzFZrk5-OwAAAQ8"]
[Fri Nov 21 17:53:35.521451 2025] [:error] [pid 46939:tid 46956] [client 134.149.18.28:52513] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSA2n-0OmVoxD4VZ_ZmvLgAAAU4"]
[Fri Nov 21 17:53:36.701350 2025] [:error] [pid 46939:tid 46950] [client 134.149.18.28:52485] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSA2oO0OmVoxD4VZ_ZmvMQAAAUg"]
[Fri Nov 21 17:53:42.005453 2025] [:error] [pid 46939:tid 46951] [client 134.149.18.28:52483] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSA2pu0OmVoxD4VZ_ZmvNQAAAUk"]
[Fri Nov 21 17:53:45.837594 2025] [:error] [pid 25431:tid 25502] [client 134.149.18.28:12340] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/usage-file.php"] [unique_id "aSA2qcklhXxmoIExII1ibQAAAI8"]
[Fri Nov 21 17:53:48.218706 2025] [:error] [pid 25521:tid 25525] [client 134.149.18.28:48647] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/usage-file.php"] [unique_id "aSA2rPhXnBMilDddn3UQ4gAAAMI"]
[Fri Nov 21 17:53:53.398214 2025] [:error] [pid 25431:tid 25487] [client 134.149.18.28:12306] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/usage-file.php"] [unique_id "aSA2scklhXxmoIExII1icQAAAIA"]
[Fri Nov 21 17:53:54.449469 2025] [:error] [pid 46939:tid 46965] [client 134.149.18.28:12315] [client 134.149.18.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/usage-file.php"] [unique_id "aSA2su0OmVoxD4VZ_ZmvVgAAAVc"]
[Fri Nov 21 17:54:01.610173 2025] [:error] [pid 46939:tid 46948] [client 134.149.18.28:52536] [client 134.149.18.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSA2ue0OmVoxD4VZ_ZmvYAAAAUY"]
[Fri Nov 21 18:45:32.888744 2025] [:error] [pid 46939:tid 46947] [client 104.28.240.82:15336] [client 104.28.240.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.82, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSBCzO0OmVoxD4VZ_ZnEygAAAUU"]
[Fri Nov 21 23:37:02.397010 2025] [:error] [pid 46939:tid 46957] [client 74.176.50.101:5110] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp7.php"] [unique_id "aSCHHu0OmVoxD4VZ_ZkbSQAAAU8"]
[Fri Nov 21 23:37:07.318953 2025] [:error] [pid 25521:tid 25524] [client 74.176.50.101:5079] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp7.php"] [unique_id "aSCHI_hXnBMilDddn3WQiQAAAME"]
[Fri Nov 21 23:37:11.281332 2025] [:error] [pid 39979:tid 39991] [client 74.176.50.101:5000] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp7.php"] [unique_id "aSCHJ8BTn4w4bKlE6arG9AAAAYk"]
[Fri Nov 21 23:37:12.326854 2025] [:error] [pid 25430:tid 25475] [client 74.176.50.101:5077] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp7.php"] [unique_id "aSCHKKpnWJcWt_4foXm5TwAAAE8"]
[Fri Nov 21 23:37:13.650960 2025] [:error] [pid 25430:tid 25473] [client 74.176.50.101:5085] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSCHKapnWJcWt_4foXm5UAAAAE0"]
[Fri Nov 21 23:37:19.198002 2025] [:error] [pid 25431:tid 25507] [client 74.176.50.101:5075] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSCHL8klhXxmoIExII2_CAAAAJQ"]
[Fri Nov 21 23:37:21.325062 2025] [:error] [pid 25431:tid 25503] [client 74.176.50.101:5106] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSCHMcklhXxmoIExII2_CwAAAJA"]
[Fri Nov 21 23:37:27.051696 2025] [:error] [pid 25554:tid 25572] [client 74.176.50.101:5072] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSCHNx-NtB-9AzFZrk7XBAAAAQ4"]
[Fri Nov 21 23:38:21.284730 2025] [:error] [pid 25521:tid 25530] [client 74.176.50.101:5086] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wpc2.php"] [unique_id "aSCHbfhXnBMilDddn3WRCAAAAMc"]
[Fri Nov 21 23:38:55.394137 2025] [:error] [pid 25431:tid 25509] [client 74.176.50.101:5059] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/speculative.php"] [unique_id "aSCHj8klhXxmoIExII2_dQAAAJY"]
[Fri Nov 21 23:39:00.016919 2025] [:error] [pid 25430:tid 25479] [client 74.176.50.101:5088] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/speculative.php"] [unique_id "aSCHlKpnWJcWt_4foXm5sQAAAFM"]
[Fri Nov 21 23:39:01.610330 2025] [:error] [pid 25430:tid 25480] [client 74.176.50.101:4992] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/speculative.php"] [unique_id "aSCHlapnWJcWt_4foXm5sgAAAFQ"]
[Fri Nov 21 23:39:05.422531 2025] [:error] [pid 25521:tid 25534] [client 74.176.50.101:5115] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/speculative.php"] [unique_id "aSCHmfhXnBMilDddn3WRjAAAAMs"]
[Fri Nov 21 23:39:11.443045 2025] [:error] [pid 25521:tid 25523] [client 74.176.50.101:5055] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hans.php"] [unique_id "aSCHn_hXnBMilDddn3WRlQAAAMA"]
[Fri Nov 21 23:39:13.289801 2025] [:error] [pid 25429:tid 25456] [client 74.176.50.101:5099] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hans.php"] [unique_id "aSCHoT4rZbRSr7vu-NMhKQAAABc"]
[Fri Nov 21 23:39:13.821059 2025] [:error] [pid 25521:tid 25540] [client 74.176.50.101:5101] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hans.php"] [unique_id "aSCHofhXnBMilDddn3WRlwAAANE"]
[Fri Nov 21 23:39:16.429867 2025] [:error] [pid 25429:tid 25457] [client 74.176.50.101:5058] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hans.php"] [unique_id "aSCHpD4rZbRSr7vu-NMhKgAAABg"]
[Fri Nov 21 23:39:41.211506 2025] [:error] [pid 25429:tid 25455] [client 74.176.50.101:5087] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xl6.php"] [unique_id "aSCHvT4rZbRSr7vu-NMhQgAAABY"]
[Fri Nov 21 23:40:16.660101 2025] [:error] [pid 25554:tid 25570] [client 74.176.50.101:5010] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSCH4B-NtB-9AzFZrk7XlwAAAQw"]
[Fri Nov 21 23:40:17.652651 2025] [:error] [pid 46939:tid 46943] [client 74.176.50.101:5112] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSCH4e0OmVoxD4VZ_Zkb1AAAAUE"]
[Fri Nov 21 23:40:19.232565 2025] [:error] [pid 25521:tid 25532] [client 74.176.50.101:5023] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/domains.php"] [unique_id "aSCH4_hXnBMilDddn3WRxAAAAMk"]
[Fri Nov 21 23:40:21.204629 2025] [:error] [pid 25554:tid 25563] [client 74.176.50.101:4994] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/domains.php"] [unique_id "aSCH5R-NtB-9AzFZrk7XoAAAAQU"]
[Fri Nov 21 23:40:24.501178 2025] [:error] [pid 25430:tid 25473] [client 74.176.50.101:5078] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/domains.php"] [unique_id "aSCH6KpnWJcWt_4foXm58AAAAE0"]
[Fri Nov 21 23:40:26.228134 2025] [:error] [pid 39979:tid 39987] [client 74.176.50.101:5057] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/domains.php"] [unique_id "aSCH6sBTn4w4bKlE6arHiwAAAYU"]
[Fri Nov 21 23:40:32.293744 2025] [:error] [pid 25430:tid 25471] [client 74.176.50.101:5092] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock360.php"] [unique_id "aSCH8KpnWJcWt_4foXm58gAAAEs"]
[Fri Nov 21 23:41:02.217754 2025] [:error] [pid 25429:tid 25449] [client 74.176.50.101:5100] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/unsafer.php"] [unique_id "aSCIDj4rZbRSr7vu-NMhgwAAABA"]
[Fri Nov 21 23:41:08.074886 2025] [:error] [pid 25554:tid 25570] [client 74.176.50.101:5103] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/unsafer.php"] [unique_id "aSCIFB-NtB-9AzFZrk7X7wAAAQw"]
[Fri Nov 21 23:41:15.441258 2025] [:error] [pid 25429:tid 25453] [client 74.176.50.101:5026] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/unsafer.php"] [unique_id "aSCIGz4rZbRSr7vu-NMhkAAAABQ"]
[Fri Nov 21 23:41:24.144458 2025] [:error] [pid 25554:tid 25574] [client 74.176.50.101:5069] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/abc.php"] [unique_id "aSCIJB-NtB-9AzFZrk7YEQAAARA"]
[Fri Nov 21 23:41:25.980098 2025] [:error] [pid 25430:tid 25475] [client 74.176.50.101:4997] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/abc.php"] [unique_id "aSCIJapnWJcWt_4foXm6MgAAAE8"]
[Sat Nov 22 00:41:36.371415 2025] [:error] [pid 49641:tid 49836] [client 64.225.4.240:38000] [client 64.225.4.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSCWQFnhuiDak938N_ameQAAAA0"]
[Sat Nov 22 01:45:55.893588 2025] [:error] [pid 49641:tid 49826] [client 48.210.83.7:6143] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class-db.php"] [unique_id "aSClU1nhuiDak938N_bAQAAAAAM"]
[Sat Nov 22 01:45:56.662748 2025] [:error] [pid 49641:tid 49843] [client 48.210.83.7:6111] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class-db.php"] [unique_id "aSClVFnhuiDak938N_bARAAAABQ"]
[Sat Nov 22 01:45:57.443661 2025] [:error] [pid 49642:tid 49894] [client 48.210.83.7:6028] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class-db.php"] [unique_id "aSClVYOXTPSuQfgUUtWXRQAAAIM"]
[Sat Nov 22 01:45:58.125159 2025] [:error] [pid 9180:tid 9188] [client 48.210.83.7:6107] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class-db.php"] [unique_id "aSClVrrk9msixUFV2i-epAAAAEY"]
[Sat Nov 22 01:45:58.436916 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:6081] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/bq.php"] [unique_id "aSClVrrk9msixUFV2i-epgAAAEk"]
[Sat Nov 22 01:45:58.914405 2025] [:error] [pid 9180:tid 9186] [client 48.210.83.7:6040] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/bq.php"] [unique_id "aSClVrrk9msixUFV2i-epwAAAEQ"]
[Sat Nov 22 01:45:59.543749 2025] [:error] [pid 9180:tid 9183] [client 48.210.83.7:6128] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/bq.php"] [unique_id "aSClV7rk9msixUFV2i-eqgAAAEE"]
[Sat Nov 22 01:45:59.951091 2025] [:error] [pid 9180:tid 9201] [client 48.210.83.7:6091] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/bq.php"] [unique_id "aSClV7rk9msixUFV2i-erwAAAFM"]
[Sat Nov 22 01:46:00.607712 2025] [:error] [pid 49642:tid 49903] [client 48.210.83.7:6113] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tro.php"] [unique_id "aSClWIOXTPSuQfgUUtWXSAAAAIw"]
[Sat Nov 22 01:46:01.025511 2025] [:error] [pid 49643:tid 49941] [client 48.210.83.7:6063] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tro.php"] [unique_id "aSClWZwUojIRHhF_fj-VVgAAANU"]
[Sat Nov 22 01:46:01.434395 2025] [:error] [pid 49642:tid 49910] [client 48.210.83.7:6084] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tro.php"] [unique_id "aSClWYOXTPSuQfgUUtWXSQAAAJM"]
[Sat Nov 22 01:46:01.833337 2025] [:error] [pid 9180:tid 9194] [client 48.210.83.7:6093] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tro.php"] [unique_id "aSClWbrk9msixUFV2i-esQAAAEw"]
[Sat Nov 22 01:46:02.108450 2025] [:error] [pid 49643:tid 49944] [client 48.210.83.7:6136] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/lov.php"] [unique_id "aSClWpwUojIRHhF_fj-VWAAAANg"]
[Sat Nov 22 01:46:02.575459 2025] [:error] [pid 49643:tid 49937] [client 48.210.83.7:6025] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/lov.php"] [unique_id "aSClWpwUojIRHhF_fj-VWQAAANE"]
[Sat Nov 22 01:46:03.405585 2025] [:error] [pid 49642:tid 49915] [client 48.210.83.7:6026] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/lov.php"] [unique_id "aSClW4OXTPSuQfgUUtWXTQAAAJg"]
[Sat Nov 22 01:46:03.700137 2025] [:error] [pid 49642:tid 49914] [client 48.210.83.7:6118] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/lov.php"] [unique_id "aSClW4OXTPSuQfgUUtWXTgAAAJc"]
[Sat Nov 22 01:46:04.094588 2025] [:error] [pid 9180:tid 9188] [client 48.210.83.7:6121] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wsz.php"] [unique_id "aSClXLrk9msixUFV2i-eswAAAEY"]
[Sat Nov 22 01:46:04.522117 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:6027] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wsz.php"] [unique_id "aSClXLrk9msixUFV2i-etQAAAEk"]
[Sat Nov 22 01:46:05.087664 2025] [:error] [pid 49641:tid 49828] [client 48.210.83.7:6139] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wsz.php"] [unique_id "aSClXVnhuiDak938N_bAWQAAAAU"]
[Sat Nov 22 01:46:05.468229 2025] [:error] [pid 49641:tid 49834] [client 48.210.83.7:6100] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wsz.php"] [unique_id "aSClXVnhuiDak938N_bAWgAAAAs"]
[Sat Nov 22 01:46:05.790745 2025] [:error] [pid 49641:tid 49838] [client 48.210.83.7:6140] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/73106.php"] [unique_id "aSClXVnhuiDak938N_bAXQAAAA8"]
[Sat Nov 22 01:46:06.426015 2025] [:error] [pid 9180:tid 9199] [client 48.210.83.7:6087] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/73106.php"] [unique_id "aSClXrrk9msixUFV2i-etgAAAFE"]
[Sat Nov 22 01:46:06.838967 2025] [:error] [pid 9180:tid 9206] [client 48.210.83.7:6067] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/73106.php"] [unique_id "aSClXrrk9msixUFV2i-etwAAAFg"]
[Sat Nov 22 01:46:07.165961 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:6019] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/73106.php"] [unique_id "aSClX1nhuiDak938N_bAYwAAABE"]
[Sat Nov 22 01:46:07.560909 2025] [:error] [pid 49643:tid 49936] [client 48.210.83.7:6018] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nas.php"] [unique_id "aSClX5wUojIRHhF_fj-VYQAAANA"]
[Sat Nov 22 01:46:07.886876 2025] [:error] [pid 49643:tid 49933] [client 48.210.83.7:6103] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nas.php"] [unique_id "aSClX5wUojIRHhF_fj-VZAAAAM0"]
[Sat Nov 22 01:46:08.548459 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:6082] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nas.php"] [unique_id "aSClYJwUojIRHhF_fj-VZQAAAME"]
[Sat Nov 22 01:46:08.918637 2025] [:error] [pid 50057:tid 50072] [client 48.210.83.7:6035] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nas.php"] [unique_id "aSClYFb9j9fTBoI0sRVRiwAAAQ0"]
[Sat Nov 22 01:46:09.331424 2025] [:error] [pid 50057:tid 50081] [client 48.210.83.7:6134] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/acp.php"] [unique_id "aSClYVb9j9fTBoI0sRVRjAAAARY"]
[Sat Nov 22 01:46:09.936377 2025] [:error] [pid 49643:tid 49941] [client 48.210.83.7:6097] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/acp.php"] [unique_id "aSClYZwUojIRHhF_fj-VZwAAANU"]
[Sat Nov 22 01:46:10.427399 2025] [:error] [pid 49643:tid 49943] [client 48.210.83.7:6104] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/acp.php"] [unique_id "aSClYpwUojIRHhF_fj-VaAAAANc"]
[Sat Nov 22 01:46:11.282951 2025] [:error] [pid 49642:tid 49898] [client 48.210.83.7:6071] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/acp.php"] [unique_id "aSClY4OXTPSuQfgUUtWXVAAAAIc"]
[Sat Nov 22 01:46:11.750276 2025] [:error] [pid 49641:tid 49830] [client 48.210.83.7:6031] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aol7.php"] [unique_id "aSClY1nhuiDak938N_bAbQAAAAc"]
[Sat Nov 22 01:46:12.162173 2025] [:error] [pid 50057:tid 50080] [client 48.210.83.7:6131] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aol7.php"] [unique_id "aSClZFb9j9fTBoI0sRVRkwAAARU"]
[Sat Nov 22 01:46:13.097465 2025] [:error] [pid 9180:tid 9205] [client 48.210.83.7:6050] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aol7.php"] [unique_id "aSClZbrk9msixUFV2i-evwAAAFc"]
[Sat Nov 22 01:46:13.649346 2025] [:error] [pid 50057:tid 50083] [client 48.210.83.7:6116] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aol7.php"] [unique_id "aSClZVb9j9fTBoI0sRVRlwAAARg"]
[Sat Nov 22 01:46:14.262358 2025] [:error] [pid 50057:tid 50060] [client 48.210.83.7:6076] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wui.php"] [unique_id "aSClZlb9j9fTBoI0sRVRmwAAAQE"]
[Sat Nov 22 01:46:14.778807 2025] [:error] [pid 50057:tid 50074] [client 48.210.83.7:6061] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wui.php"] [unique_id "aSClZlb9j9fTBoI0sRVRngAAAQ8"]
[Sat Nov 22 01:46:15.630361 2025] [:error] [pid 49643:tid 49943] [client 48.210.83.7:6024] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wui.php"] [unique_id "aSClZ5wUojIRHhF_fj-VdwAAANc"]
[Sat Nov 22 01:46:16.446690 2025] [:error] [pid 49642:tid 49895] [client 48.210.83.7:6036] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wui.php"] [unique_id "aSClaIOXTPSuQfgUUtWXdwAAAIQ"]
[Sat Nov 22 01:46:17.044919 2025] [:error] [pid 49643:tid 49922] [client 48.210.83.7:6086] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSClaZwUojIRHhF_fj-VegAAAMM"]
[Sat Nov 22 01:46:17.654706 2025] [:error] [pid 49641:tid 49845] [client 48.210.83.7:6069] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSClaVnhuiDak938N_bAdQAAABY"]
[Sat Nov 22 01:46:17.967780 2025] [:error] [pid 49642:tid 49896] [client 48.210.83.7:6070] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSClaYOXTPSuQfgUUtWXegAAAIU"]
[Sat Nov 22 01:46:18.781088 2025] [:error] [pid 49642:tid 49911] [client 48.210.83.7:6088] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSClaoOXTPSuQfgUUtWXfQAAAJQ"]
[Sat Nov 22 01:46:19.260864 2025] [:error] [pid 49642:tid 49913] [client 48.210.83.7:6085] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/poj.php"] [unique_id "aSCla4OXTPSuQfgUUtWXfgAAAJY"]
[Sat Nov 22 01:46:19.760149 2025] [:error] [pid 49641:tid 49828] [client 48.210.83.7:6022] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/poj.php"] [unique_id "aSCla1nhuiDak938N_bAeQAAAAU"]
[Sat Nov 22 01:46:20.173816 2025] [:error] [pid 49643:tid 49934] [client 48.210.83.7:6017] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/poj.php"] [unique_id "aSClbJwUojIRHhF_fj-VfgAAAM4"]
[Sat Nov 22 01:46:20.596341 2025] [:error] [pid 50057:tid 50079] [client 48.210.83.7:6041] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/poj.php"] [unique_id "aSClbFb9j9fTBoI0sRVRrAAAARQ"]
[Sat Nov 22 01:46:21.214871 2025] [:error] [pid 49641:tid 49837] [client 48.210.83.7:6020] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/log.php"] [unique_id "aSClbVnhuiDak938N_bAfwAAAA4"]
[Sat Nov 22 01:46:21.484041 2025] [:error] [pid 49642:tid 49906] [client 48.210.83.7:6102] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/log.php"] [unique_id "aSClbYOXTPSuQfgUUtWXgQAAAI8"]
[Sat Nov 22 01:46:21.979691 2025] [:error] [pid 49641:tid 49842] [client 48.210.83.7:6098] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/log.php"] [unique_id "aSClbVnhuiDak938N_bAgAAAABM"]
[Sat Nov 22 01:46:22.559231 2025] [:error] [pid 9180:tid 9189] [client 48.210.83.7:6083] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/log.php"] [unique_id "aSClbrrk9msixUFV2i-e4AAAAEc"]
[Sat Nov 22 01:46:23.052518 2025] [:error] [pid 50057:tid 50071] [client 48.210.83.7:6132] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zoro.php"] [unique_id "aSClb1b9j9fTBoI0sRVRtQAAAQw"]
[Sat Nov 22 01:46:23.815116 2025] [:error] [pid 9180:tid 9201] [client 48.210.83.7:6095] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zoro.php"] [unique_id "aSClb7rk9msixUFV2i-e5AAAAFM"]
[Sat Nov 22 01:46:24.355321 2025] [:error] [pid 50057:tid 50076] [client 48.210.83.7:5957] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zoro.php"] [unique_id "aSClcFb9j9fTBoI0sRVRugAAARE"]
[Sat Nov 22 01:46:24.948062 2025] [:error] [pid 50057:tid 50079] [client 48.210.83.7:6033] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zoro.php"] [unique_id "aSClcFb9j9fTBoI0sRVRvQAAARQ"]
[Sat Nov 22 01:46:25.672931 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:6122] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ker.php"] [unique_id "aSClcbrk9msixUFV2i-e6AAAAEk"]
[Sat Nov 22 01:46:26.211039 2025] [:error] [pid 49642:tid 49910] [client 48.210.83.7:6049] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ker.php"] [unique_id "aSClcoOXTPSuQfgUUtWXjAAAAJM"]
[Sat Nov 22 01:46:27.212698 2025] [:error] [pid 49643:tid 49924] [client 48.210.83.7:5959] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ker.php"] [unique_id "aSClc5wUojIRHhF_fj-VkQAAAMU"]
[Sat Nov 22 01:46:28.124004 2025] [:error] [pid 50057:tid 50060] [client 48.210.83.7:6120] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ker.php"] [unique_id "aSCldFb9j9fTBoI0sRVRygAAAQE"]
[Sat Nov 22 01:46:28.746372 2025] [:error] [pid 9180:tid 9182] [client 48.210.83.7:6106] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aaa.php"] [unique_id "aSCldLrk9msixUFV2i-e7QAAAEA"]
[Sat Nov 22 01:46:29.914955 2025] [:error] [pid 49641:tid 49843] [client 48.210.83.7:5961] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aaa.php"] [unique_id "aSCldVnhuiDak938N_bAkwAAABQ"]
[Sat Nov 22 01:46:30.939720 2025] [:error] [pid 9180:tid 9192] [client 48.210.83.7:6114] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aaa.php"] [unique_id "aSCldrrk9msixUFV2i-e7wAAAEo"]
[Sat Nov 22 01:46:32.015589 2025] [:error] [pid 49642:tid 49901] [client 48.210.83.7:6032] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/aaa.php"] [unique_id "aSCleIOXTPSuQfgUUtWXjwAAAIo"]
[Sat Nov 22 01:46:32.995634 2025] [:error] [pid 49643:tid 49930] [client 48.210.83.7:6094] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/efa4f.php"] [unique_id "aSCleJwUojIRHhF_fj-VnQAAAMo"]
[Sat Nov 22 01:46:33.337486 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:6130] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/efa4f.php"] [unique_id "aSClebrk9msixUFV2i-e8wAAAEM"]
[Sat Nov 22 01:46:34.093414 2025] [:error] [pid 9180:tid 9202] [client 48.210.83.7:6089] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/efa4f.php"] [unique_id "aSClerrk9msixUFV2i-e9QAAAFQ"]
[Sat Nov 22 01:46:34.783769 2025] [:error] [pid 49643:tid 49938] [client 48.210.83.7:5970] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/efa4f.php"] [unique_id "aSClepwUojIRHhF_fj-VogAAANI"]
[Sat Nov 22 01:46:36.232533 2025] [:error] [pid 49643:tid 49925] [client 48.210.83.7:6110] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/a2.php"] [unique_id "aSClfJwUojIRHhF_fj-VqQAAAMY"]
[Sat Nov 22 01:46:36.789380 2025] [:error] [pid 49641:tid 49837] [client 48.210.83.7:6039] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/a2.php"] [unique_id "aSClfFnhuiDak938N_bAngAAAA4"]
[Sat Nov 22 01:46:37.187850 2025] [:error] [pid 49641:tid 49830] [client 48.210.83.7:6101] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/a2.php"] [unique_id "aSClfVnhuiDak938N_bAnwAAAAc"]
[Sat Nov 22 01:46:37.893467 2025] [:error] [pid 9180:tid 9203] [client 48.210.83.7:6124] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/a2.php"] [unique_id "aSClfbrk9msixUFV2i-e-wAAAFU"]
[Sat Nov 22 01:46:38.587412 2025] [:error] [pid 49641:tid 49827] [client 48.210.83.7:6042] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/dop.php"] [unique_id "aSClflnhuiDak938N_bAoQAAAAQ"]
[Sat Nov 22 01:46:39.238163 2025] [:error] [pid 49641:tid 49842] [client 48.210.83.7:5976] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/dop.php"] [unique_id "aSClf1nhuiDak938N_bAogAAABM"]
[Sat Nov 22 01:46:39.767480 2025] [:error] [pid 50057:tid 50074] [client 48.210.83.7:6125] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/dop.php"] [unique_id "aSClf1b9j9fTBoI0sRVR8gAAAQ8"]
[Sat Nov 22 01:46:40.045785 2025] [:error] [pid 9180:tid 9195] [client 48.210.83.7:6142] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/dop.php"] [unique_id "aSClgLrk9msixUFV2i-fAwAAAE0"]
[Sat Nov 22 01:46:40.349584 2025] [:error] [pid 9180:tid 9205] [client 48.210.83.7:6047] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/l.php"] [unique_id "aSClgLrk9msixUFV2i-fBAAAAFc"]
[Sat Nov 22 01:46:40.685011 2025] [:error] [pid 9180:tid 9182] [client 48.210.83.7:5974] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/l.php"] [unique_id "aSClgLrk9msixUFV2i-fBgAAAEA"]
[Sat Nov 22 01:46:41.283342 2025] [:error] [pid 49641:tid 49829] [client 48.210.83.7:5981] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/l.php"] [unique_id "aSClgVnhuiDak938N_bAqAAAAAY"]
[Sat Nov 22 01:46:42.355656 2025] [:error] [pid 49642:tid 49899] [client 48.210.83.7:5969] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/l.php"] [unique_id "aSClgoOXTPSuQfgUUtWXlAAAAIg"]
[Sat Nov 22 01:46:42.876360 2025] [:error] [pid 49643:tid 49941] [client 48.210.83.7:6045] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sec.php"] [unique_id "aSClgpwUojIRHhF_fj-VswAAANU"]
[Sat Nov 22 01:46:43.571060 2025] [:error] [pid 9180:tid 9201] [client 48.210.83.7:6119] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sec.php"] [unique_id "aSClg7rk9msixUFV2i-fCwAAAFM"]
[Sat Nov 22 01:46:43.991278 2025] [:error] [pid 50057:tid 50077] [client 48.210.83.7:6057] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sec.php"] [unique_id "aSClg1b9j9fTBoI0sRVR-gAAARI"]
[Sat Nov 22 01:46:44.347603 2025] [:error] [pid 49642:tid 49891] [client 48.210.83.7:6077] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sec.php"] [unique_id "aSClhIOXTPSuQfgUUtWXmAAAAIA"]
[Sat Nov 22 01:46:45.110155 2025] [:error] [pid 49641:tid 49826] [client 48.210.83.7:6029] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/set.php"] [unique_id "aSClhVnhuiDak938N_bArAAAAAM"]
[Sat Nov 22 01:46:45.709818 2025] [:error] [pid 9180:tid 9193] [client 48.210.83.7:5977] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/set.php"] [unique_id "aSClhbrk9msixUFV2i-fDwAAAEs"]
[Sat Nov 22 01:46:46.042522 2025] [:error] [pid 49642:tid 49909] [client 48.210.83.7:6021] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/set.php"] [unique_id "aSClhoOXTPSuQfgUUtWXnAAAAJI"]
[Sat Nov 22 01:46:46.305058 2025] [:error] [pid 50057:tid 50060] [client 48.210.83.7:6034] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/set.php"] [unique_id "aSClhlb9j9fTBoI0sRVSAgAAAQE"]
[Sat Nov 22 01:46:47.029044 2025] [:error] [pid 49641:tid 49843] [client 48.210.83.7:5952] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/pn.php"] [unique_id "aSClh1nhuiDak938N_bAsAAAABQ"]
[Sat Nov 22 01:46:47.350366 2025] [:error] [pid 9180:tid 9199] [client 48.210.83.7:6092] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/pn.php"] [unique_id "aSClh7rk9msixUFV2i-fEQAAAFE"]
[Sat Nov 22 01:46:47.660332 2025] [:error] [pid 49641:tid 49828] [client 48.210.83.7:6030] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/pn.php"] [unique_id "aSClh1nhuiDak938N_bAtAAAAAU"]
[Sat Nov 22 01:46:48.085561 2025] [:error] [pid 49643:tid 49938] [client 48.210.83.7:6065] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/pn.php"] [unique_id "aSCliJwUojIRHhF_fj-VwQAAANI"]
[Sat Nov 22 01:46:48.464049 2025] [:error] [pid 49641:tid 49834] [client 48.210.83.7:6000] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/awh77.php"] [unique_id "aSCliFnhuiDak938N_bAtgAAAAs"]
[Sat Nov 22 01:46:48.894830 2025] [:error] [pid 50057:tid 50082] [client 48.210.83.7:6105] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/awh77.php"] [unique_id "aSCliFb9j9fTBoI0sRVSCgAAARc"]
[Sat Nov 22 01:46:49.404821 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:6046] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/awh77.php"] [unique_id "aSClibrk9msixUFV2i-fGgAAAEM"]
[Sat Nov 22 01:46:50.271016 2025] [:error] [pid 49643:tid 49933] [client 48.210.83.7:6041] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/awh77.php"] [unique_id "aSClipwUojIRHhF_fj-VxwAAAM0"]
[Sat Nov 22 01:46:51.377037 2025] [:error] [pid 49642:tid 49914] [client 48.210.83.7:5964] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/520.php"] [unique_id "aSCli4OXTPSuQfgUUtWXoQAAAJc"]
[Sat Nov 22 01:46:51.664713 2025] [:error] [pid 9180:tid 9203] [client 48.210.83.7:6096] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/520.php"] [unique_id "aSCli7rk9msixUFV2i-fHgAAAFU"]
[Sat Nov 22 01:46:52.243609 2025] [:error] [pid 50057:tid 50077] [client 48.210.83.7:6055] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/520.php"] [unique_id "aSCljFb9j9fTBoI0sRVSDAAAARI"]
[Sat Nov 22 01:46:52.720632 2025] [:error] [pid 50057:tid 50071] [client 48.210.83.7:5956] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/520.php"] [unique_id "aSCljFb9j9fTBoI0sRVSDQAAAQw"]
[Sat Nov 22 01:46:53.592004 2025] [:error] [pid 50057:tid 50066] [client 48.210.83.7:6023] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/hey.php"] [unique_id "aSCljVb9j9fTBoI0sRVSEAAAAQc"]
[Sat Nov 22 01:47:15.750804 2025] [:error] [pid 9180:tid 9186] [client 48.210.83.7:6099] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/re.php"] [unique_id "aSClo7rk9msixUFV2i-fRQAAAEQ"]
[Sat Nov 22 01:47:16.633699 2025] [:error] [pid 49643:tid 49923] [client 48.210.83.7:6054] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/re.php"] [unique_id "aSClpJwUojIRHhF_fj-V3wAAAMQ"]
[Sat Nov 22 01:47:17.430204 2025] [:error] [pid 49642:tid 49891] [client 48.210.83.7:6043] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/re.php"] [unique_id "aSClpYOXTPSuQfgUUtWXvQAAAIA"]
[Sat Nov 22 01:47:18.810772 2025] [:error] [pid 9180:tid 9197] [client 48.210.83.7:5999] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/re.php"] [unique_id "aSClprrk9msixUFV2i-fRwAAAE8"]
[Sat Nov 22 01:47:19.739913 2025] [:error] [pid 49642:tid 49895] [client 48.210.83.7:5984] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sow.php"] [unique_id "aSClp4OXTPSuQfgUUtWXwgAAAIQ"]
[Sat Nov 22 01:47:21.049465 2025] [:error] [pid 50057:tid 50078] [client 48.210.83.7:5996] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sow.php"] [unique_id "aSClqVb9j9fTBoI0sRVSSQAAARM"]
[Sat Nov 22 01:47:22.702671 2025] [:error] [pid 49642:tid 49893] [client 48.210.83.7:5990] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sow.php"] [unique_id "aSClqoOXTPSuQfgUUtWXyAAAAII"]
[Sat Nov 22 01:47:24.492183 2025] [:error] [pid 49642:tid 49911] [client 48.210.83.7:6079] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sow.php"] [unique_id "aSClrIOXTPSuQfgUUtWXywAAAJQ"]
[Sat Nov 22 01:47:25.855470 2025] [:error] [pid 49643:tid 49941] [client 48.210.83.7:5898] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xzs.php"] [unique_id "aSClrZwUojIRHhF_fj-V5wAAANU"]
[Sat Nov 22 01:47:26.905081 2025] [:error] [pid 9180:tid 9197] [client 48.210.83.7:6074] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xzs.php"] [unique_id "aSClrrrk9msixUFV2i-fUQAAAE8"]
[Sat Nov 22 01:47:28.136172 2025] [:error] [pid 9180:tid 9183] [client 48.210.83.7:6112] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xzs.php"] [unique_id "aSClsLrk9msixUFV2i-fVAAAAEE"]
[Sat Nov 22 01:47:28.925450 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:5978] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xzs.php"] [unique_id "aSClsJwUojIRHhF_fj-V6wAAAME"]
[Sat Nov 22 01:47:29.414908 2025] [:error] [pid 49643:tid 49942] [client 48.210.83.7:6016] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ppp.php"] [unique_id "aSClsZwUojIRHhF_fj-V7AAAANY"]
[Sat Nov 22 01:47:30.041798 2025] [:error] [pid 49641:tid 49831] [client 48.210.83.7:6137] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ppp.php"] [unique_id "aSClslnhuiDak938N_bA6gAAAAg"]
[Sat Nov 22 01:47:32.271583 2025] [:error] [pid 9180:tid 9194] [client 48.210.83.7:6108] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ppp.php"] [unique_id "aSCltLrk9msixUFV2i-fXQAAAEw"]
[Sat Nov 22 01:47:33.146660 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:5980] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ppp.php"] [unique_id "aSCltbrk9msixUFV2i-fXwAAAFI"]
[Sat Nov 22 01:47:33.838875 2025] [:error] [pid 9180:tid 9188] [client 48.210.83.7:5892] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kdrex.php"] [unique_id "aSCltbrk9msixUFV2i-fYQAAAEY"]
[Sat Nov 22 01:47:34.902004 2025] [:error] [pid 49641:tid 49825] [client 48.210.83.7:6007] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kdrex.php"] [unique_id "aSCltlnhuiDak938N_bA7wAAAAI"]
[Sat Nov 22 01:47:35.400164 2025] [:error] [pid 50057:tid 50072] [client 48.210.83.7:5973] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kdrex.php"] [unique_id "aSClt1b9j9fTBoI0sRVSdQAAAQ0"]
[Sat Nov 22 01:47:35.958711 2025] [:error] [pid 9180:tid 9187] [client 48.210.83.7:6141] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kdrex.php"] [unique_id "aSClt7rk9msixUFV2i-fZQAAAEU"]
[Sat Nov 22 01:47:36.286808 2025] [:error] [pid 49641:tid 49842] [client 48.210.83.7:6001] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSCluFnhuiDak938N_bA8QAAABM"]
[Sat Nov 22 01:47:36.957425 2025] [:error] [pid 50057:tid 50067] [client 48.210.83.7:6133] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSCluFb9j9fTBoI0sRVSdwAAAQg"]
[Sat Nov 22 01:47:37.782631 2025] [:error] [pid 9180:tid 9190] [client 48.210.83.7:5966] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSClubrk9msixUFV2i-fZwAAAEg"]
[Sat Nov 22 01:47:39.589300 2025] [:error] [pid 49642:tid 49896] [client 48.210.83.7:6011] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSClu4OXTPSuQfgUUtWX1gAAAIU"]
[Sat Nov 22 01:47:41.624003 2025] [:error] [pid 49642:tid 49913] [client 48.210.83.7:6068] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gul.php"] [unique_id "aSClvYOXTPSuQfgUUtWX2QAAAJY"]
[Sat Nov 22 01:47:42.699614 2025] [:error] [pid 49642:tid 49895] [client 48.210.83.7:6080] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gul.php"] [unique_id "aSClvoOXTPSuQfgUUtWX3QAAAIQ"]
[Sat Nov 22 01:47:43.381760 2025] [:error] [pid 9180:tid 9195] [client 48.210.83.7:5920] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gul.php"] [unique_id "aSClv7rk9msixUFV2i-fcQAAAE0"]
[Sat Nov 22 01:47:45.118941 2025] [:error] [pid 50057:tid 50079] [client 48.210.83.7:6037] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gul.php"] [unique_id "aSClwVb9j9fTBoI0sRVSjwAAARQ"]
[Sat Nov 22 01:47:46.543161 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:6064] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zil.php"] [unique_id "aSClwpwUojIRHhF_fj-V9gAAAME"]
[Sat Nov 22 01:47:48.067075 2025] [:error] [pid 49642:tid 49906] [client 48.210.83.7:6075] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zil.php"] [unique_id "aSClxIOXTPSuQfgUUtWX5gAAAI8"]
[Sat Nov 22 01:47:49.597193 2025] [:error] [pid 49643:tid 49944] [client 48.210.83.7:6053] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zil.php"] [unique_id "aSClxZwUojIRHhF_fj-V_AAAANg"]
[Sat Nov 22 01:47:50.187004 2025] [:error] [pid 49643:tid 49932] [client 48.210.83.7:5960] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zil.php"] [unique_id "aSClxpwUojIRHhF_fj-V_wAAAMw"]
[Sat Nov 22 01:47:51.245634 2025] [:error] [pid 49641:tid 49825] [client 48.210.83.7:6117] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nope.php"] [unique_id "aSClx1nhuiDak938N_bA_QAAAAI"]
[Sat Nov 22 01:47:52.443823 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:6058] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nope.php"] [unique_id "aSClyFnhuiDak938N_bA_wAAABE"]
[Sat Nov 22 01:47:53.766278 2025] [:error] [pid 9180:tid 9206] [client 48.210.83.7:5967] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nope.php"] [unique_id "aSClybrk9msixUFV2i-figAAAFg"]
[Sat Nov 22 01:47:55.477257 2025] [:error] [pid 9180:tid 9190] [client 48.210.83.7:5864] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nope.php"] [unique_id "aSCly7rk9msixUFV2i-fjwAAAEg"]
[Sat Nov 22 01:47:56.883276 2025] [:error] [pid 49642:tid 49894] [client 48.210.83.7:6021] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/show/asa.php"] [unique_id "aSClzIOXTPSuQfgUUtWX7gAAAIM"]
[Sat Nov 22 01:47:58.079152 2025] [:error] [pid 49642:tid 49892] [client 48.210.83.7:5898] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/show/asa.php"] [unique_id "aSClzoOXTPSuQfgUUtWX8AAAAIE"]
[Sat Nov 22 01:47:58.761428 2025] [:error] [pid 50057:tid 50071] [client 48.210.83.7:6073] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/show/asa.php"] [unique_id "aSClzlb9j9fTBoI0sRVSvAAAAQw"]
[Sat Nov 22 01:47:59.755682 2025] [:error] [pid 49642:tid 49911] [client 48.210.83.7:5955] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/show/asa.php"] [unique_id "aSClz4OXTPSuQfgUUtWX8QAAAJQ"]
[Sat Nov 22 01:48:01.005038 2025] [:error] [pid 49642:tid 49900] [client 48.210.83.7:5962] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nae.php"] [unique_id "aSCl0YOXTPSuQfgUUtWX9AAAAIk"]
[Sat Nov 22 01:48:01.759973 2025] [:error] [pid 49641:tid 49835] [client 48.210.83.7:5909] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nae.php"] [unique_id "aSCl0VnhuiDak938N_bBBQAAAAw"]
[Sat Nov 22 01:48:02.675486 2025] [:error] [pid 9180:tid 9189] [client 48.210.83.7:6059] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nae.php"] [unique_id "aSCl0rrk9msixUFV2i-fngAAAEc"]
[Sat Nov 22 01:48:04.271469 2025] [:error] [pid 49642:tid 49904] [client 48.210.83.7:5914] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/nae.php"] [unique_id "aSCl1IOXTPSuQfgUUtWX9gAAAI0"]
[Sat Nov 22 01:48:05.996992 2025] [:error] [pid 49643:tid 49922] [client 48.210.83.7:5995] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tua.php"] [unique_id "aSCl1ZwUojIRHhF_fj-WGwAAAMM"]
[Sat Nov 22 01:48:07.848917 2025] [:error] [pid 9180:tid 9203] [client 48.210.83.7:6066] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tua.php"] [unique_id "aSCl17rk9msixUFV2i-fpAAAAFU"]
[Sat Nov 22 01:48:08.780398 2025] [:error] [pid 50057:tid 50069] [client 48.210.83.7:5993] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tua.php"] [unique_id "aSCl2Fb9j9fTBoI0sRVSzQAAAQo"]
[Sat Nov 22 01:48:10.716840 2025] [:error] [pid 49642:tid 49901] [client 48.210.83.7:6115] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tua.php"] [unique_id "aSCl2oOXTPSuQfgUUtWYDQAAAIo"]
[Sat Nov 22 01:48:12.061853 2025] [:error] [pid 9180:tid 9206] [client 48.210.83.7:6072] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/exhitrgp.php"] [unique_id "aSCl3Lrk9msixUFV2i-fuAAAAFg"]
[Sat Nov 22 01:48:13.022768 2025] [:error] [pid 49641:tid 49833] [client 48.210.83.7:5988] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/exhitrgp.php"] [unique_id "aSCl3VnhuiDak938N_bBEgAAAAo"]
[Sat Nov 22 01:48:36.084773 2025] [:error] [pid 9180:tid 9196] [client 48.210.83.7:5998] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSCl9Lrk9msixUFV2i-gIgAAAE4"]
[Sat Nov 22 01:48:36.889373 2025] [:error] [pid 49642:tid 49902] [client 48.210.83.7:5987] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSCl9IOXTPSuQfgUUtWYaAAAAIs"]
[Sat Nov 22 01:48:37.794712 2025] [:error] [pid 49641:tid 49836] [client 48.210.83.7:5900] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSCl9VnhuiDak938N_bBbwAAAA0"]
[Sat Nov 22 01:48:38.708129 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:5982] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSCl9rrk9msixUFV2i-gKAAAAEk"]
[Sat Nov 22 01:48:40.084222 2025] [:error] [pid 49641:tid 49829] [client 48.210.83.7:6006] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/suy.php"] [unique_id "aSCl-FnhuiDak938N_bBcgAAAAY"]
[Sat Nov 22 01:48:40.603110 2025] [:error] [pid 49641:tid 49824] [client 48.210.83.7:6060] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/suy.php"] [unique_id "aSCl-FnhuiDak938N_bBdAAAAAE"]
[Sat Nov 22 01:48:41.012090 2025] [:error] [pid 49642:tid 49915] [client 48.210.83.7:5963] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/suy.php"] [unique_id "aSCl-YOXTPSuQfgUUtWYbQAAAJg"]
[Sat Nov 22 01:48:41.388235 2025] [:error] [pid 49641:tid 49845] [client 48.210.83.7:6123] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/suy.php"] [unique_id "aSCl-VnhuiDak938N_bBdgAAABY"]
[Sat Nov 22 01:48:41.924709 2025] [:error] [pid 49641:tid 49836] [client 48.210.83.7:6004] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fe5.php"] [unique_id "aSCl-VnhuiDak938N_bBegAAAA0"]
[Sat Nov 22 01:48:42.876798 2025] [:error] [pid 50057:tid 50060] [client 48.210.83.7:6052] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fe5.php"] [unique_id "aSCl-lb9j9fTBoI0sRVTUwAAAQE"]
[Sat Nov 22 01:48:43.414450 2025] [:error] [pid 50057:tid 50069] [client 48.210.83.7:6062] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fe5.php"] [unique_id "aSCl-1b9j9fTBoI0sRVTVAAAAQo"]
[Sat Nov 22 01:48:43.782397 2025] [:error] [pid 9180:tid 9204] [client 48.210.83.7:5912] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fe5.php"] [unique_id "aSCl-7rk9msixUFV2i-gLQAAAFY"]
[Sat Nov 22 01:48:44.531661 2025] [:error] [pid 50057:tid 50077] [client 48.210.83.7:6003] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/testas.php"] [unique_id "aSCl_Fb9j9fTBoI0sRVTVgAAARI"]
[Sat Nov 22 01:48:45.010033 2025] [:error] [pid 9180:tid 9206] [client 48.210.83.7:5972] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/testas.php"] [unique_id "aSCl_brk9msixUFV2i-gMQAAAFg"]
[Sat Nov 22 01:48:45.968050 2025] [:error] [pid 9180:tid 9189] [client 48.210.83.7:5971] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/testas.php"] [unique_id "aSCl_brk9msixUFV2i-gMwAAAEc"]
[Sat Nov 22 01:48:47.117136 2025] [:error] [pid 9180:tid 9204] [client 48.210.83.7:5979] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/testas.php"] [unique_id "aSCl_7rk9msixUFV2i-gOQAAAFY"]
[Sat Nov 22 01:48:47.784354 2025] [:error] [pid 50057:tid 50081] [client 48.210.83.7:6056] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tech5pr.php"] [unique_id "aSCl_1b9j9fTBoI0sRVTXQAAARY"]
[Sat Nov 22 01:48:48.433600 2025] [:error] [pid 9180:tid 9192] [client 48.210.83.7:5953] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tech5pr.php"] [unique_id "aSCmALrk9msixUFV2i-gPAAAAEo"]
[Sat Nov 22 01:48:49.022920 2025] [:error] [pid 50057:tid 50065] [client 48.210.83.7:5921] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tech5pr.php"] [unique_id "aSCmAVb9j9fTBoI0sRVTXwAAAQY"]
[Sat Nov 22 01:48:49.531103 2025] [:error] [pid 50057:tid 50075] [client 48.210.83.7:5927] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tech5pr.php"] [unique_id "aSCmAVb9j9fTBoI0sRVTYAAAARA"]
[Sat Nov 22 01:48:50.315016 2025] [:error] [pid 49641:tid 49823] [client 48.210.83.7:5894] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ryuk.php"] [unique_id "aSCmAlnhuiDak938N_bBfgAAAAA"]
[Sat Nov 22 01:48:51.117872 2025] [:error] [pid 49642:tid 49909] [client 48.210.83.7:5888] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ryuk.php"] [unique_id "aSCmA4OXTPSuQfgUUtWYcwAAAJI"]
[Sat Nov 22 01:48:51.532054 2025] [:error] [pid 49641:tid 49845] [client 48.210.83.7:5918] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ryuk.php"] [unique_id "aSCmA1nhuiDak938N_bBgQAAABY"]
[Sat Nov 22 01:48:52.089670 2025] [:error] [pid 49642:tid 49892] [client 48.210.83.7:5905] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ryuk.php"] [unique_id "aSCmBIOXTPSuQfgUUtWYdAAAAIE"]
[Sat Nov 22 01:48:52.428737 2025] [:error] [pid 49643:tid 49944] [client 48.210.83.7:6008] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file17.php"] [unique_id "aSCmBJwUojIRHhF_fj-WUQAAANg"]
[Sat Nov 22 01:48:53.287907 2025] [:error] [pid 49642:tid 49900] [client 48.210.83.7:5929] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file17.php"] [unique_id "aSCmBYOXTPSuQfgUUtWYdgAAAIk"]
[Sat Nov 22 01:48:54.582564 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:5997] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file17.php"] [unique_id "aSCmBrrk9msixUFV2i-gRgAAAFI"]
[Sat Nov 22 01:48:56.903006 2025] [:error] [pid 49641:tid 49833] [client 48.210.83.7:6009] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file17.php"] [unique_id "aSCmCFnhuiDak938N_bBhgAAAAo"]
[Sat Nov 22 01:48:57.269000 2025] [:error] [pid 49641:tid 49825] [client 48.210.83.7:5985] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/6erg.php"] [unique_id "aSCmCVnhuiDak938N_bBhwAAAAI"]
[Sat Nov 22 01:48:57.553482 2025] [:error] [pid 50057:tid 50081] [client 48.210.83.7:5908] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/6erg.php"] [unique_id "aSCmCVb9j9fTBoI0sRVTbwAAARY"]
[Sat Nov 22 01:48:58.211068 2025] [:error] [pid 50057:tid 50075] [client 48.210.83.7:6127] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/6erg.php"] [unique_id "aSCmClb9j9fTBoI0sRVTcQAAARA"]
[Sat Nov 22 01:48:58.810145 2025] [:error] [pid 50057:tid 50060] [client 48.210.83.7:5913] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/6erg.php"] [unique_id "aSCmClb9j9fTBoI0sRVTcwAAAQE"]
[Sat Nov 22 01:48:59.530681 2025] [:error] [pid 50057:tid 50074] [client 48.210.83.7:5930] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sty.php"] [unique_id "aSCmC1b9j9fTBoI0sRVTdQAAAQ8"]
[Sat Nov 22 01:49:00.506198 2025] [:error] [pid 49642:tid 49896] [client 48.210.83.7:6048] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sty.php"] [unique_id "aSCmDIOXTPSuQfgUUtWYgQAAAIU"]
[Sat Nov 22 01:49:01.231602 2025] [:error] [pid 50057:tid 50076] [client 48.210.83.7:5922] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sty.php"] [unique_id "aSCmDVb9j9fTBoI0sRVTdgAAARE"]
[Sat Nov 22 01:49:01.527438 2025] [:error] [pid 49642:tid 49892] [client 48.210.83.7:6044] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sty.php"] [unique_id "aSCmDYOXTPSuQfgUUtWYhQAAAIE"]
[Sat Nov 22 01:49:02.019065 2025] [:error] [pid 49641:tid 49834] [client 48.210.83.7:5937] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/89.php"] [unique_id "aSCmDlnhuiDak938N_bBiwAAAAs"]
[Sat Nov 22 01:49:02.751777 2025] [:error] [pid 9180:tid 9204] [client 48.210.83.7:5954] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/89.php"] [unique_id "aSCmDrrk9msixUFV2i-gVQAAAFY"]
[Sat Nov 22 01:49:03.442597 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:5901] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/89.php"] [unique_id "aSCmD7rk9msixUFV2i-gVwAAAFI"]
[Sat Nov 22 01:49:04.049377 2025] [:error] [pid 49643:tid 49937] [client 48.210.83.7:5868] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/89.php"] [unique_id "aSCmEJwUojIRHhF_fj-WVwAAANE"]
[Sat Nov 22 01:49:04.509492 2025] [:error] [pid 49642:tid 49893] [client 48.210.83.7:5916] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aSCmEIOXTPSuQfgUUtWYiAAAAII"]
[Sat Nov 22 01:49:05.020614 2025] [:error] [pid 9180:tid 9190] [client 48.210.83.7:5906] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aSCmEbrk9msixUFV2i-gXAAAAEg"]
[Sat Nov 22 01:49:05.358098 2025] [:error] [pid 9180:tid 9192] [client 48.210.83.7:6005] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aSCmEbrk9msixUFV2i-gXgAAAEo"]
[Sat Nov 22 01:49:05.763996 2025] [:error] [pid 49641:tid 49829] [client 48.210.83.7:6135] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/n3.php"] [unique_id "aSCmEVnhuiDak938N_bBjQAAAAY"]
[Sat Nov 22 01:49:06.453787 2025] [:error] [pid 50057:tid 50066] [client 48.210.83.7:6078] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zeal.php"] [unique_id "aSCmElb9j9fTBoI0sRVTgAAAAQc"]
[Sat Nov 22 01:49:07.184456 2025] [:error] [pid 49643:tid 49943] [client 48.210.83.7:5896] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zeal.php"] [unique_id "aSCmE5wUojIRHhF_fj-WWQAAANc"]
[Sat Nov 22 01:49:07.674409 2025] [:error] [pid 9180:tid 9199] [client 48.210.83.7:6038] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zeal.php"] [unique_id "aSCmE7rk9msixUFV2i-gYAAAAFE"]
[Sat Nov 22 01:49:08.375546 2025] [:error] [pid 49642:tid 49911] [client 48.210.83.7:6090] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zeal.php"] [unique_id "aSCmFIOXTPSuQfgUUtWYjAAAAJQ"]
[Sat Nov 22 01:49:09.123237 2025] [:error] [pid 49641:tid 49836] [client 48.210.83.7:5808] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSCmFVnhuiDak938N_bBlgAAAA0"]
[Sat Nov 22 01:49:09.645611 2025] [:error] [pid 50057:tid 50067] [client 48.210.83.7:6013] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSCmFVb9j9fTBoI0sRVThwAAAQg"]
[Sat Nov 22 01:49:10.490264 2025] [:error] [pid 9180:tid 9197] [client 48.210.83.7:5839] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSCmFrrk9msixUFV2i-gaAAAAE8"]
[Sat Nov 22 01:49:10.990944 2025] [:error] [pid 9180:tid 9201] [client 48.210.83.7:6002] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSCmFrrk9msixUFV2i-gaQAAAFM"]
[Sat Nov 22 01:49:11.864461 2025] [:error] [pid 9180:tid 9192] [client 48.210.83.7:5842] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/berm.php"] [unique_id "aSCmF7rk9msixUFV2i-gawAAAEo"]
[Sat Nov 22 01:49:12.793673 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:5915] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/berm.php"] [unique_id "aSCmGFnhuiDak938N_bBogAAABE"]
[Sat Nov 22 01:49:13.416935 2025] [:error] [pid 49642:tid 49913] [client 48.210.83.7:6126] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/berm.php"] [unique_id "aSCmGYOXTPSuQfgUUtWYkgAAAJY"]
[Sat Nov 22 01:49:14.125707 2025] [:error] [pid 9180:tid 9198] [client 48.210.83.7:5965] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/berm.php"] [unique_id "aSCmGrrk9msixUFV2i-gcgAAAFA"]
[Sat Nov 22 01:49:14.538643 2025] [:error] [pid 49643:tid 49919] [client 48.210.83.7:5986] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aSCmGpwUojIRHhF_fj-WYQAAAMA"]
[Sat Nov 22 01:49:15.179036 2025] [:error] [pid 50057:tid 50073] [client 48.210.83.7:5951] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aSCmG1b9j9fTBoI0sRVTigAAAQ4"]
[Sat Nov 22 01:49:15.623944 2025] [:error] [pid 49641:tid 49834] [client 48.210.83.7:5994] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aSCmG1nhuiDak938N_bBqAAAAAs"]
[Sat Nov 22 01:49:16.040143 2025] [:error] [pid 50057:tid 50068] [client 48.210.83.7:5946] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wan.php"] [unique_id "aSCmHFb9j9fTBoI0sRVTlwAAAQk"]
[Sat Nov 22 01:49:16.422952 2025] [:error] [pid 49643:tid 49940] [client 48.210.83.7:5765] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/has.php"] [unique_id "aSCmHJwUojIRHhF_fj-WaQAAANQ"]
[Sat Nov 22 01:49:16.693105 2025] [:error] [pid 49643:tid 49924] [client 48.210.83.7:5895] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/has.php"] [unique_id "aSCmHJwUojIRHhF_fj-WawAAAMU"]
[Sat Nov 22 01:49:17.233394 2025] [:error] [pid 9180:tid 9184] [client 48.210.83.7:5942] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/has.php"] [unique_id "aSCmHbrk9msixUFV2i-gfAAAAEI"]
[Sat Nov 22 01:49:17.832241 2025] [:error] [pid 49641:tid 49829] [client 48.210.83.7:6010] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/has.php"] [unique_id "aSCmHVnhuiDak938N_bBqwAAAAY"]
[Sat Nov 22 01:49:18.213513 2025] [:error] [pid 9180:tid 9198] [client 48.210.83.7:5923] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ma1.php"] [unique_id "aSCmHrrk9msixUFV2i-gfwAAAFA"]
[Sat Nov 22 01:49:18.747124 2025] [:error] [pid 9180:tid 9205] [client 48.210.83.7:5975] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ma1.php"] [unique_id "aSCmHrrk9msixUFV2i-ggQAAAFc"]
[Sat Nov 22 01:49:19.089084 2025] [:error] [pid 49641:tid 49837] [client 48.210.83.7:5893] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ma1.php"] [unique_id "aSCmH1nhuiDak938N_bBrgAAAA4"]
[Sat Nov 22 01:49:19.476695 2025] [:error] [pid 49642:tid 49909] [client 48.210.83.7:5938] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ma1.php"] [unique_id "aSCmH4OXTPSuQfgUUtWYoAAAAJI"]
[Sat Nov 22 01:49:19.767697 2025] [:error] [pid 49643:tid 49930] [client 48.210.83.7:5903] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wpls.php"] [unique_id "aSCmH5wUojIRHhF_fj-WcwAAAMo"]
[Sat Nov 22 01:49:20.379953 2025] [:error] [pid 50057:tid 50066] [client 48.210.83.7:5968] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wpls.php"] [unique_id "aSCmIFb9j9fTBoI0sRVTqgAAAQc"]
[Sat Nov 22 01:49:20.652724 2025] [:error] [pid 49641:tid 49830] [client 48.210.83.7:5891] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wpls.php"] [unique_id "aSCmIFnhuiDak938N_bBsAAAAAc"]
[Sat Nov 22 01:49:21.065871 2025] [:error] [pid 9180:tid 9195] [client 48.210.83.7:5825] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wpls.php"] [unique_id "aSCmIbrk9msixUFV2i-gigAAAE0"]
[Sat Nov 22 01:49:21.414348 2025] [:error] [pid 49643:tid 49923] [client 48.210.83.7:5947] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/h8h9.php"] [unique_id "aSCmIZwUojIRHhF_fj-WdQAAAMQ"]
[Sat Nov 22 01:49:21.741976 2025] [:error] [pid 49641:tid 49847] [client 48.210.83.7:5773] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/h8h9.php"] [unique_id "aSCmIVnhuiDak938N_bBsQAAABg"]
[Sat Nov 22 01:49:22.242419 2025] [:error] [pid 49643:tid 49938] [client 48.210.83.7:5890] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/h8h9.php"] [unique_id "aSCmIpwUojIRHhF_fj-WeAAAANI"]
[Sat Nov 22 01:49:22.595158 2025] [:error] [pid 9180:tid 9203] [client 48.210.83.7:6109] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/h8h9.php"] [unique_id "aSCmIrrk9msixUFV2i-gjQAAAFU"]
[Sat Nov 22 01:49:22.991296 2025] [:error] [pid 9180:tid 9198] [client 48.210.83.7:5991] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-cliner.php"] [unique_id "aSCmIrrk9msixUFV2i-gjgAAAFA"]
[Sat Nov 22 01:49:23.408775 2025] [:error] [pid 9180:tid 9205] [client 48.210.83.7:6012] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-cliner.php"] [unique_id "aSCmI7rk9msixUFV2i-gjwAAAFc"]
[Sat Nov 22 01:49:23.877667 2025] [:error] [pid 9180:tid 9206] [client 48.210.83.7:5989] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-cliner.php"] [unique_id "aSCmI7rk9msixUFV2i-gkQAAAFg"]
[Sat Nov 22 01:49:24.598168 2025] [:error] [pid 49641:tid 49831] [client 48.210.83.7:5944] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wp-cliner.php"] [unique_id "aSCmJFnhuiDak938N_bBtgAAAAg"]
[Sat Nov 22 01:49:25.469819 2025] [:error] [pid 9180:tid 9197] [client 48.210.83.7:5924] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/racs3.php"] [unique_id "aSCmJbrk9msixUFV2i-glQAAAE8"]
[Sat Nov 22 01:49:26.024738 2025] [:error] [pid 50057:tid 50082] [client 48.210.83.7:5934] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/racs3.php"] [unique_id "aSCmJlb9j9fTBoI0sRVTrwAAARc"]
[Sat Nov 22 01:49:26.374132 2025] [:error] [pid 49643:tid 49940] [client 48.210.83.7:6014] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/racs3.php"] [unique_id "aSCmJpwUojIRHhF_fj-WewAAANQ"]
[Sat Nov 22 01:49:26.846922 2025] [:error] [pid 50057:tid 50067] [client 48.210.83.7:5851] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/racs3.php"] [unique_id "aSCmJlb9j9fTBoI0sRVTsQAAAQg"]
[Sat Nov 22 01:49:27.497104 2025] [:error] [pid 50057:tid 50071] [client 48.210.83.7:5791] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/2index.php"] [unique_id "aSCmJ1b9j9fTBoI0sRVTswAAAQw"]
[Sat Nov 22 01:49:28.246834 2025] [:error] [pid 9180:tid 9203] [client 48.210.83.7:5824] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/2index.php"] [unique_id "aSCmKLrk9msixUFV2i-gmwAAAFU"]
[Sat Nov 22 01:49:28.536804 2025] [:error] [pid 9180:tid 9206] [client 48.210.83.7:5911] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/2index.php"] [unique_id "aSCmKLrk9msixUFV2i-gnAAAAFg"]
[Sat Nov 22 01:49:29.283809 2025] [:error] [pid 49643:tid 49944] [client 48.210.83.7:5792] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/2index.php"] [unique_id "aSCmKZwUojIRHhF_fj-WfQAAANg"]
[Sat Nov 22 01:49:30.106658 2025] [:error] [pid 9180:tid 9196] [client 48.210.83.7:5932] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/rsnu.php"] [unique_id "aSCmKrrk9msixUFV2i-gogAAAE4"]
[Sat Nov 22 01:49:30.600693 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:5867] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/rsnu.php"] [unique_id "aSCmKrrk9msixUFV2i-gowAAAEM"]
[Sat Nov 22 01:49:30.935888 2025] [:error] [pid 49643:tid 49921] [client 48.210.83.7:5935] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/rsnu.php"] [unique_id "aSCmKpwUojIRHhF_fj-WgQAAAMI"]
[Sat Nov 22 01:49:31.572227 2025] [:error] [pid 49642:tid 49897] [client 48.210.83.7:6101] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/rsnu.php"] [unique_id "aSCmK4OXTPSuQfgUUtWYrAAAAIY"]
[Sat Nov 22 01:49:31.973514 2025] [:error] [pid 9180:tid 9183] [client 48.210.83.7:5830] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mtvcrew.php"] [unique_id "aSCmK7rk9msixUFV2i-gqAAAAEE"]
[Sat Nov 22 01:49:32.200753 2025] [:error] [pid 49643:tid 49927] [client 48.210.83.7:5943] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mtvcrew.php"] [unique_id "aSCmLJwUojIRHhF_fj-WhQAAAMg"]
[Sat Nov 22 01:49:32.723786 2025] [:error] [pid 49641:tid 49834] [client 48.210.83.7:5886] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mtvcrew.php"] [unique_id "aSCmLFnhuiDak938N_bBxQAAAAs"]
[Sat Nov 22 01:49:33.142228 2025] [:error] [pid 49643:tid 49938] [client 48.210.83.7:5797] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mtvcrew.php"] [unique_id "aSCmLZwUojIRHhF_fj-WiAAAANI"]
[Sat Nov 22 01:49:33.934337 2025] [:error] [pid 9180:tid 9184] [client 48.210.83.7:5767] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/agdew.php"] [unique_id "aSCmLbrk9msixUFV2i-grgAAAEI"]
[Sat Nov 22 01:49:55.174962 2025] [:error] [pid 50057:tid 50075] [client 48.210.83.7:5939] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/7f8c8.php"] [unique_id "aSCmQ1b9j9fTBoI0sRVT1gAAARA"]
[Sat Nov 22 01:49:56.051636 2025] [:error] [pid 49641:tid 49828] [client 48.210.83.7:5840] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/7f8c8.php"] [unique_id "aSCmRFnhuiDak938N_bB4AAAAAU"]
[Sat Nov 22 01:49:56.563689 2025] [:error] [pid 50057:tid 50076] [client 48.210.83.7:5875] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/7f8c8.php"] [unique_id "aSCmRFb9j9fTBoI0sRVT2QAAARE"]
[Sat Nov 22 01:49:56.957579 2025] [:error] [pid 49643:tid 49936] [client 48.210.83.7:6129] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/7f8c8.php"] [unique_id "aSCmRJwUojIRHhF_fj-WoQAAANA"]
[Sat Nov 22 01:49:57.303914 2025] [:error] [pid 50057:tid 50063] [client 48.210.83.7:5847] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wle.php"] [unique_id "aSCmRVb9j9fTBoI0sRVT3QAAAQQ"]
[Sat Nov 22 01:49:57.761989 2025] [:error] [pid 49643:tid 49943] [client 48.210.83.7:5919] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wle.php"] [unique_id "aSCmRZwUojIRHhF_fj-WowAAANc"]
[Sat Nov 22 01:49:58.997044 2025] [:error] [pid 49643:tid 49933] [client 48.210.83.7:5899] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wle.php"] [unique_id "aSCmRpwUojIRHhF_fj-WpQAAAM0"]
[Sat Nov 22 01:49:59.388717 2025] [:error] [pid 9180:tid 9195] [client 48.210.83.7:5841] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wle.php"] [unique_id "aSCmR7rk9msixUFV2i-g1AAAAE0"]
[Sat Nov 22 01:50:00.405640 2025] [:error] [pid 49643:tid 49937] [client 48.210.83.7:5848] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/144.php"] [unique_id "aSCmSJwUojIRHhF_fj-WpgAAANE"]
[Sat Nov 22 01:50:01.039493 2025] [:error] [pid 9180:tid 9196] [client 48.210.83.7:5871] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/144.php"] [unique_id "aSCmSbrk9msixUFV2i-g2gAAAE4"]
[Sat Nov 22 01:50:01.356036 2025] [:error] [pid 49643:tid 49927] [client 48.210.83.7:5865] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/144.php"] [unique_id "aSCmSZwUojIRHhF_fj-WqAAAAMg"]
[Sat Nov 22 01:50:02.016288 2025] [:error] [pid 9180:tid 9192] [client 48.210.83.7:6138] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/144.php"] [unique_id "aSCmSrrk9msixUFV2i-g3QAAAEo"]
[Sat Nov 22 01:50:02.776157 2025] [:error] [pid 49641:tid 49825] [client 48.210.83.7:5902] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tarc.php"] [unique_id "aSCmSlnhuiDak938N_bB5QAAAAI"]
[Sat Nov 22 01:50:03.432503 2025] [:error] [pid 9180:tid 9190] [client 48.210.83.7:5836] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tarc.php"] [unique_id "aSCmS7rk9msixUFV2i-g4QAAAEg"]
[Sat Nov 22 01:50:03.874144 2025] [:error] [pid 50057:tid 50071] [client 48.210.83.7:6051] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tarc.php"] [unique_id "aSCmS1b9j9fTBoI0sRVT5wAAAQw"]
[Sat Nov 22 01:50:04.547222 2025] [:error] [pid 50057:tid 50067] [client 48.210.83.7:5940] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/tarc.php"] [unique_id "aSCmTFb9j9fTBoI0sRVT6wAAAQg"]
[Sat Nov 22 01:50:05.084277 2025] [:error] [pid 49643:tid 49940] [client 48.210.83.7:5834] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mo.php"] [unique_id "aSCmTZwUojIRHhF_fj-WrQAAANQ"]
[Sat Nov 22 01:50:05.795053 2025] [:error] [pid 49643:tid 49943] [client 48.210.83.7:6028] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mo.php"] [unique_id "aSCmTZwUojIRHhF_fj-WsgAAANc"]
[Sat Nov 22 01:50:06.081913 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:5828] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mo.php"] [unique_id "aSCmTrrk9msixUFV2i-g5QAAAFI"]
[Sat Nov 22 01:50:06.771402 2025] [:error] [pid 9180:tid 9193] [client 48.210.83.7:5950] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/mo.php"] [unique_id "aSCmTrrk9msixUFV2i-g6AAAAEs"]
[Sat Nov 22 01:50:07.158660 2025] [:error] [pid 50057:tid 50079] [client 48.210.83.7:5877] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xtp.php"] [unique_id "aSCmT1b9j9fTBoI0sRVT7QAAARQ"]
[Sat Nov 22 01:50:07.745773 2025] [:error] [pid 50057:tid 50065] [client 48.210.83.7:5837] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xtp.php"] [unique_id "aSCmT1b9j9fTBoI0sRVT7gAAAQY"]
[Sat Nov 22 01:50:08.075815 2025] [:error] [pid 49643:tid 49921] [client 48.210.83.7:5889] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xtp.php"] [unique_id "aSCmUJwUojIRHhF_fj-WtgAAAMI"]
[Sat Nov 22 01:50:08.889199 2025] [:error] [pid 49641:tid 49828] [client 48.210.83.7:5910] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xtp.php"] [unique_id "aSCmUFnhuiDak938N_bB7QAAAAU"]
[Sat Nov 22 01:50:09.217344 2025] [:error] [pid 9180:tid 9198] [client 48.210.83.7:5849] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ad24f.php"] [unique_id "aSCmUbrk9msixUFV2i-g8AAAAFA"]
[Sat Nov 22 01:50:09.875187 2025] [:error] [pid 50057:tid 50080] [client 48.210.83.7:5827] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ad24f.php"] [unique_id "aSCmUVb9j9fTBoI0sRVT9QAAARU"]
[Sat Nov 22 01:50:10.347193 2025] [:error] [pid 9180:tid 9194] [client 48.210.83.7:5926] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ad24f.php"] [unique_id "aSCmUrrk9msixUFV2i-g8gAAAEw"]
[Sat Nov 22 01:50:10.696657 2025] [:error] [pid 9180:tid 9193] [client 48.210.83.7:5941] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ad24f.php"] [unique_id "aSCmUrrk9msixUFV2i-g9AAAAEs"]
[Sat Nov 22 01:50:11.093519 2025] [:error] [pid 49643:tid 49924] [client 48.210.83.7:6025] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wrt.php"] [unique_id "aSCmU5wUojIRHhF_fj-WuQAAAMU"]
[Sat Nov 22 01:50:11.553976 2025] [:error] [pid 49643:tid 49932] [client 48.210.83.7:5983] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wrt.php"] [unique_id "aSCmU5wUojIRHhF_fj-WugAAAMw"]
[Sat Nov 22 01:50:11.897818 2025] [:error] [pid 9180:tid 9188] [client 48.210.83.7:5907] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wrt.php"] [unique_id "aSCmU7rk9msixUFV2i-g-AAAAEY"]
[Sat Nov 22 01:50:12.255646 2025] [:error] [pid 50057:tid 50070] [client 48.210.83.7:5897] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wrt.php"] [unique_id "aSCmVFb9j9fTBoI0sRVT9wAAAQs"]
[Sat Nov 22 01:50:12.736529 2025] [:error] [pid 9180:tid 9202] [client 48.210.83.7:5850] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/orm.php"] [unique_id "aSCmVLrk9msixUFV2i-g-wAAAFQ"]
[Sat Nov 22 01:50:13.359901 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:5887] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/orm.php"] [unique_id "aSCmVbrk9msixUFV2i-g_gAAAFI"]
[Sat Nov 22 01:50:13.630669 2025] [:error] [pid 9180:tid 9192] [client 48.210.83.7:5873] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/orm.php"] [unique_id "aSCmVbrk9msixUFV2i-hAQAAAEo"]
[Sat Nov 22 01:50:13.937836 2025] [:error] [pid 9180:tid 9204] [client 48.210.83.7:5769] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/orm.php"] [unique_id "aSCmVbrk9msixUFV2i-hAwAAAFY"]
[Sat Nov 22 01:50:14.206776 2025] [:error] [pid 50057:tid 50076] [client 48.210.83.7:5869] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.an5.php"] [unique_id "aSCmVlb9j9fTBoI0sRVT-QAAARE"]
[Sat Nov 22 01:50:14.620061 2025] [:error] [pid 50057:tid 50059] [client 48.210.83.7:5833] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.an5.php"] [unique_id "aSCmVlb9j9fTBoI0sRVT-wAAAQA"]
[Sat Nov 22 01:50:14.923162 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:5774] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.an5.php"] [unique_id "aSCmVpwUojIRHhF_fj-WvgAAAME"]
[Sat Nov 22 01:50:15.323601 2025] [:error] [pid 49643:tid 49921] [client 48.210.83.7:5925] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.an5.php"] [unique_id "aSCmV5wUojIRHhF_fj-WwQAAAMI"]
[Sat Nov 22 01:50:15.619855 2025] [:error] [pid 49643:tid 49944] [client 48.210.83.7:6113] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/waff.php"] [unique_id "aSCmV5wUojIRHhF_fj-WwwAAANg"]
[Sat Nov 22 01:50:16.146174 2025] [:error] [pid 49643:tid 49931] [client 48.210.83.7:6035] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/waff.php"] [unique_id "aSCmWJwUojIRHhF_fj-WxAAAAMs"]
[Sat Nov 22 01:50:16.579022 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:6107] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/waff.php"] [unique_id "aSCmWLrk9msixUFV2i-hCgAAAEM"]
[Sat Nov 22 01:50:17.453745 2025] [:error] [pid 50057:tid 50066] [client 48.210.83.7:6026] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/waff.php"] [unique_id "aSCmWVb9j9fTBoI0sRVT_gAAAQc"]
[Sat Nov 22 01:50:17.785890 2025] [:error] [pid 50057:tid 50062] [client 48.210.83.7:6084] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/yep.php"] [unique_id "aSCmWVb9j9fTBoI0sRVUAQAAAQM"]
[Sat Nov 22 01:50:18.371948 2025] [:error] [pid 50057:tid 50061] [client 48.210.83.7:5835] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/yep.php"] [unique_id "aSCmWlb9j9fTBoI0sRVUAgAAAQI"]
[Sat Nov 22 01:50:19.291329 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:6103] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/yep.php"] [unique_id "aSCmW1nhuiDak938N_bB8gAAABE"]
[Sat Nov 22 01:50:20.034716 2025] [:error] [pid 49643:tid 49919] [client 48.210.83.7:6031] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/yep.php"] [unique_id "aSCmXJwUojIRHhF_fj-WygAAAMA"]
[Sat Nov 22 01:50:20.606704 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:6121] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file4.php"] [unique_id "aSCmXLrk9msixUFV2i-hDQAAAEk"]
[Sat Nov 22 01:50:21.001394 2025] [:error] [pid 50057:tid 50076] [client 48.210.83.7:6139] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file4.php"] [unique_id "aSCmXVb9j9fTBoI0sRVUBQAAARE"]
[Sat Nov 22 01:50:21.294947 2025] [:error] [pid 49641:tid 49842] [client 48.210.83.7:6040] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file4.php"] [unique_id "aSCmXVnhuiDak938N_bB9wAAABM"]
[Sat Nov 22 01:50:21.727534 2025] [:error] [pid 49643:tid 49929] [client 48.210.83.7:6018] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file4.php"] [unique_id "aSCmXZwUojIRHhF_fj-WzAAAAMk"]
[Sat Nov 22 01:50:22.402515 2025] [:error] [pid 50057:tid 50082] [client 48.210.83.7:6024] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSCmXlb9j9fTBoI0sRVUBwAAARc"]
[Sat Nov 22 01:50:23.213566 2025] [:error] [pid 50057:tid 50068] [client 48.210.83.7:5829] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSCmX1b9j9fTBoI0sRVUCgAAAQk"]
[Sat Nov 22 01:50:23.565608 2025] [:error] [pid 9180:tid 9196] [client 48.210.83.7:6134] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSCmX7rk9msixUFV2i-hEgAAAE4"]
[Sat Nov 22 01:50:24.452178 2025] [:error] [pid 50057:tid 50078] [client 48.210.83.7:6140] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSCmYFb9j9fTBoI0sRVUDQAAARM"]
[Sat Nov 22 01:50:25.410740 2025] [:error] [pid 50057:tid 50062] [client 48.210.83.7:5904] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/hum.php"] [unique_id "aSCmYVb9j9fTBoI0sRVUDwAAAQM"]
[Sat Nov 22 01:50:27.090006 2025] [:error] [pid 9180:tid 9189] [client 48.210.83.7:6097] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/hum.php"] [unique_id "aSCmY7rk9msixUFV2i-hGAAAAEc"]
[Sat Nov 22 01:50:28.062211 2025] [:error] [pid 49642:tid 49898] [client 48.210.83.7:6050] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/hum.php"] [unique_id "aSCmZIOXTPSuQfgUUtWY4QAAAIc"]
[Sat Nov 22 01:50:30.116769 2025] [:error] [pid 49641:tid 49844] [client 48.210.83.7:5771] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/hum.php"] [unique_id "aSCmZlnhuiDak938N_bB_gAAABU"]
[Sat Nov 22 01:50:31.495166 2025] [:error] [pid 49642:tid 49902] [client 48.210.83.7:5845] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/law.php"] [unique_id "aSCmZ4OXTPSuQfgUUtWY5wAAAIs"]
[Sat Nov 22 01:50:32.754153 2025] [:error] [pid 49641:tid 49832] [client 48.210.83.7:6136] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/law.php"] [unique_id "aSCmaFnhuiDak938N_bB_wAAAAk"]
[Sat Nov 22 01:50:33.447248 2025] [:error] [pid 49643:tid 49935] [client 48.210.83.7:5862] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/law.php"] [unique_id "aSCmaZwUojIRHhF_fj-W1AAAAM8"]
[Sat Nov 22 01:50:33.902531 2025] [:error] [pid 49642:tid 49914] [client 48.210.83.7:6031] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/law.php"] [unique_id "aSCmaYOXTPSuQfgUUtWY6QAAAJc"]
[Sat Nov 22 01:50:34.346114 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:6033] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xxx.php"] [unique_id "aSCmalnhuiDak938N_bCAgAAABE"]
[Sat Nov 22 01:50:34.699217 2025] [:error] [pid 49641:tid 49827] [client 48.210.83.7:5958] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xxx.php"] [unique_id "aSCmalnhuiDak938N_bCAwAAAAQ"]
[Sat Nov 22 01:50:34.952660 2025] [:error] [pid 49641:tid 49833] [client 48.210.83.7:6071] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xxx.php"] [unique_id "aSCmalnhuiDak938N_bCBAAAAAo"]
[Sat Nov 22 01:50:35.280630 2025] [:error] [pid 9180:tid 9188] [client 48.210.83.7:6116] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xxx.php"] [unique_id "aSCma7rk9msixUFV2i-hLgAAAEY"]
[Sat Nov 22 01:50:35.667904 2025] [:error] [pid 49642:tid 49903] [client 48.210.83.7:5782] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/card.php"] [unique_id "aSCma4OXTPSuQfgUUtWY6wAAAIw"]
[Sat Nov 22 01:50:36.434664 2025] [:error] [pid 49642:tid 49897] [client 48.210.83.7:6061] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/card.php"] [unique_id "aSCmbIOXTPSuQfgUUtWY7AAAAIY"]
[Sat Nov 22 01:50:36.820515 2025] [:error] [pid 50057:tid 50059] [client 48.210.83.7:5878] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/card.php"] [unique_id "aSCmbFb9j9fTBoI0sRVUFwAAAQA"]
[Sat Nov 22 01:50:37.182729 2025] [:error] [pid 49643:tid 49925] [client 48.210.83.7:6063] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/card.php"] [unique_id "aSCmbZwUojIRHhF_fj-W2wAAAMY"]
[Sat Nov 22 01:50:37.747473 2025] [:error] [pid 49643:tid 49919] [client 48.210.83.7:5880] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/des.php"] [unique_id "aSCmbZwUojIRHhF_fj-W3QAAAMA"]
[Sat Nov 22 01:50:38.241171 2025] [:error] [pid 49642:tid 49908] [client 48.210.83.7:5992] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/des.php"] [unique_id "aSCmboOXTPSuQfgUUtWY7gAAAJE"]
[Sat Nov 22 01:50:39.003134 2025] [:error] [pid 9180:tid 9195] [client 48.210.83.7:6027] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/des.php"] [unique_id "aSCmb7rk9msixUFV2i-hOAAAAE0"]
[Sat Nov 22 01:50:39.868575 2025] [:error] [pid 49641:tid 49847] [client 48.210.83.7:5775] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/des.php"] [unique_id "aSCmb1nhuiDak938N_bCCwAAABg"]
[Sat Nov 22 01:50:40.790702 2025] [:error] [pid 50057:tid 50069] [client 48.210.83.7:6118] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class20.php"] [unique_id "aSCmcFb9j9fTBoI0sRVUHQAAAQo"]
[Sat Nov 22 01:50:41.350445 2025] [:error] [pid 49641:tid 49834] [client 48.210.83.7:6131] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class20.php"] [unique_id "aSCmcVnhuiDak938N_bCDQAAAAs"]
[Sat Nov 22 01:50:41.717146 2025] [:error] [pid 49643:tid 49926] [client 48.210.83.7:6130] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class20.php"] [unique_id "aSCmcZwUojIRHhF_fj-W4gAAAMc"]
[Sat Nov 22 01:50:42.545085 2025] [:error] [pid 50057:tid 50070] [client 48.210.83.7:6085] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/class20.php"] [unique_id "aSCmclb9j9fTBoI0sRVUHgAAAQs"]
[Sat Nov 22 01:50:42.831009 2025] [:error] [pid 49642:tid 49901] [client 48.210.83.7:5931] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aSCmcoOXTPSuQfgUUtWY-AAAAIo"]
[Sat Nov 22 01:50:43.099581 2025] [:error] [pid 49643:tid 49938] [client 48.210.83.7:5826] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aSCmc5wUojIRHhF_fj-W5AAAANI"]
[Sat Nov 22 01:50:43.613045 2025] [:error] [pid 50057:tid 50076] [client 48.210.83.7:5870] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aSCmc1b9j9fTBoI0sRVUIQAAARE"]
[Sat Nov 22 01:50:44.033683 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:5866] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/new4.php"] [unique_id "aSCmdJwUojIRHhF_fj-W5QAAAME"]
[Sat Nov 22 01:50:44.490888 2025] [:error] [pid 49641:tid 49832] [client 48.210.83.7:6069] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/1a.php"] [unique_id "aSCmdFnhuiDak938N_bCEAAAAAk"]
[Sat Nov 22 01:50:44.855395 2025] [:error] [pid 9180:tid 9203] [client 48.210.83.7:6049] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/1a.php"] [unique_id "aSCmdLrk9msixUFV2i-hRAAAAFU"]
[Sat Nov 22 01:50:45.303980 2025] [:error] [pid 49641:tid 49829] [client 48.210.83.7:5805] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/1a.php"] [unique_id "aSCmdVnhuiDak938N_bCEgAAAAY"]
[Sat Nov 22 01:50:46.529894 2025] [:error] [pid 49641:tid 49825] [client 48.210.83.7:5788] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/1a.php"] [unique_id "aSCmdlnhuiDak938N_bCGAAAAAI"]
[Sat Nov 22 01:50:47.140383 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:6089] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zasd.php"] [unique_id "aSCmd7rk9msixUFV2i-hRgAAAFI"]
[Sat Nov 22 01:50:47.595214 2025] [:error] [pid 49641:tid 49847] [client 48.210.83.7:6111] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zasd.php"] [unique_id "aSCmd1nhuiDak938N_bCGwAAABg"]
[Sat Nov 22 01:50:48.370242 2025] [:error] [pid 49642:tid 49904] [client 48.210.83.7:5945] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zasd.php"] [unique_id "aSCmeIOXTPSuQfgUUtWY_AAAAI0"]
[Sat Nov 22 01:50:48.719782 2025] [:error] [pid 49641:tid 49831] [client 48.210.83.7:5843] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zasd.php"] [unique_id "aSCmeFnhuiDak938N_bCHQAAAAg"]
[Sat Nov 22 01:50:49.120002 2025] [:error] [pid 49641:tid 49844] [client 48.210.83.7:6022] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/skk.php"] [unique_id "aSCmeVnhuiDak938N_bCHgAAABU"]
[Sat Nov 22 01:50:49.645095 2025] [:error] [pid 49642:tid 49907] [client 48.210.83.7:6098] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/skk.php"] [unique_id "aSCmeYOXTPSuQfgUUtWZAAAAAJA"]
[Sat Nov 22 01:50:50.184559 2025] [:error] [pid 9180:tid 9196] [client 48.210.83.7:6110] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/skk.php"] [unique_id "aSCmerrk9msixUFV2i-hSgAAAE4"]
[Sat Nov 22 01:50:50.746919 2025] [:error] [pid 49643:tid 49943] [client 48.210.83.7:6086] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/skk.php"] [unique_id "aSCmepwUojIRHhF_fj-W8QAAANc"]
[Sat Nov 22 01:50:51.304225 2025] [:error] [pid 49643:tid 49936] [client 48.210.83.7:6102] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/haf.php"] [unique_id "aSCme5wUojIRHhF_fj-W8wAAANA"]
[Sat Nov 22 01:50:52.591931 2025] [:error] [pid 9180:tid 9182] [client 48.210.83.7:6070] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/haf.php"] [unique_id "aSCmfLrk9msixUFV2i-hTQAAAEA"]
[Sat Nov 22 01:51:13.745614 2025] [:error] [pid 9180:tid 9189] [client 48.210.83.7:6045] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/eru.php"] [unique_id "aSCmkbrk9msixUFV2i-howAAAEc"]
[Sat Nov 22 01:51:14.502617 2025] [:error] [pid 49643:tid 49927] [client 48.210.83.7:6132] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/eru.php"] [unique_id "aSCmkpwUojIRHhF_fj-XIQAAAMg"]
[Sat Nov 22 01:51:15.534957 2025] [:error] [pid 49643:tid 49942] [client 48.210.83.7:6122] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/eru.php"] [unique_id "aSCmk5wUojIRHhF_fj-XIgAAANY"]
[Sat Nov 22 01:51:16.729544 2025] [:error] [pid 9180:tid 9194] [client 48.210.83.7:6092] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/eru.php"] [unique_id "aSCmlLrk9msixUFV2i-hqgAAAEw"]
[Sat Nov 22 01:51:17.798591 2025] [:error] [pid 50057:tid 50060] [client 48.210.83.7:5949] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/twso.php"] [unique_id "aSCmlVb9j9fTBoI0sRVUPwAAAQE"]
[Sat Nov 22 01:51:18.388834 2025] [:error] [pid 9180:tid 9201] [client 48.210.83.7:6125] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/twso.php"] [unique_id "aSCmlrrk9msixUFV2i-hrgAAAFM"]
[Sat Nov 22 01:51:19.317275 2025] [:error] [pid 49642:tid 49904] [client 48.210.83.7:6106] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/twso.php"] [unique_id "aSCml4OXTPSuQfgUUtWZMAAAAI0"]
[Sat Nov 22 01:51:19.835115 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:6124] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/twso.php"] [unique_id "aSCml5wUojIRHhF_fj-XJQAAAME"]
[Sat Nov 22 01:51:20.852628 2025] [:error] [pid 9180:tid 9190] [client 48.210.83.7:6105] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ink.php"] [unique_id "aSCmmLrk9msixUFV2i-htQAAAEg"]
[Sat Nov 22 01:51:21.962071 2025] [:error] [pid 50057:tid 50074] [client 48.210.83.7:6017] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ink.php"] [unique_id "aSCmmVb9j9fTBoI0sRVUTwAAAQ8"]
[Sat Nov 22 01:51:22.828893 2025] [:error] [pid 9180:tid 9189] [client 48.210.83.7:5970] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ink.php"] [unique_id "aSCmmrrk9msixUFV2i-hxAAAAEc"]
[Sat Nov 22 01:51:23.184500 2025] [:error] [pid 49642:tid 49903] [client 48.210.83.7:6020] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ink.php"] [unique_id "aSCmm4OXTPSuQfgUUtWZOQAAAIw"]
[Sat Nov 22 01:51:24.372140 2025] [:error] [pid 49641:tid 49841] [client 48.210.83.7:5638] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z58.php"] [unique_id "aSCmnFnhuiDak938N_bCWgAAABI"]
[Sat Nov 22 01:51:25.060595 2025] [:error] [pid 50057:tid 50073] [client 48.210.83.7:5959] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z58.php"] [unique_id "aSCmnVb9j9fTBoI0sRVUWAAAAQ4"]
[Sat Nov 22 01:51:26.071557 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:5853] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z58.php"] [unique_id "aSCmnrrk9msixUFV2i-hzgAAAEM"]
[Sat Nov 22 01:51:26.979117 2025] [:error] [pid 49642:tid 49906] [client 48.210.83.7:5647] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z58.php"] [unique_id "aSCmnoOXTPSuQfgUUtWZQgAAAI8"]
[Sat Nov 22 01:51:28.584077 2025] [:error] [pid 49643:tid 49924] [client 48.210.83.7:5799] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/led.php"] [unique_id "aSCmoJwUojIRHhF_fj-XOgAAAMU"]
[Sat Nov 22 01:51:31.047504 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:6095] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/led.php"] [unique_id "aSCmo7rk9msixUFV2i-h6AAAAEk"]
[Sat Nov 22 01:51:31.870731 2025] [:error] [pid 50057:tid 50063] [client 48.210.83.7:6067] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/led.php"] [unique_id "aSCmo1b9j9fTBoI0sRVUfAAAAQQ"]
[Sat Nov 22 01:51:32.883712 2025] [:error] [pid 9180:tid 9194] [client 48.210.83.7:6030] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/led.php"] [unique_id "aSCmpLrk9msixUFV2i-h7QAAAEw"]
[Sat Nov 22 01:51:34.004000 2025] [:error] [pid 50057:tid 50068] [client 48.210.83.7:5996] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/klwc.php"] [unique_id "aSCmplb9j9fTBoI0sRVUhAAAAQk"]
[Sat Nov 22 01:51:35.197947 2025] [:error] [pid 9180:tid 9191] [client 48.210.83.7:6083] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/klwc.php"] [unique_id "aSCmp7rk9msixUFV2i-h9gAAAEk"]
[Sat Nov 22 01:51:36.476592 2025] [:error] [pid 49642:tid 49898] [client 48.210.83.7:5961] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/klwc.php"] [unique_id "aSCmqIOXTPSuQfgUUtWZTAAAAIc"]
[Sat Nov 22 01:51:37.397292 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:6046] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/klwc.php"] [unique_id "aSCmqbrk9msixUFV2i-h_QAAAEM"]
[Sat Nov 22 01:51:38.799392 2025] [:error] [pid 49642:tid 49897] [client 48.210.83.7:5857] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fresh3.php"] [unique_id "aSCmqoOXTPSuQfgUUtWZTwAAAIY"]
[Sat Nov 22 01:51:40.126610 2025] [:error] [pid 9180:tid 9197] [client 48.210.83.7:6036] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fresh3.php"] [unique_id "aSCmrLrk9msixUFV2i-iBwAAAE8"]
[Sat Nov 22 01:51:41.366494 2025] [:error] [pid 49641:tid 49846] [client 48.210.83.7:6108] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fresh3.php"] [unique_id "aSCmrVnhuiDak938N_bCogAAABc"]
[Sat Nov 22 01:51:42.725085 2025] [:error] [pid 50057:tid 50079] [client 48.210.83.7:6007] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/fresh3.php"] [unique_id "aSCmrlb9j9fTBoI0sRVUlQAAARQ"]
[Sat Nov 22 01:51:43.342062 2025] [:error] [pid 49643:tid 49921] [client 48.210.83.7:5978] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ula.php"] [unique_id "aSCmr5wUojIRHhF_fj-XQgAAAMI"]
[Sat Nov 22 01:51:44.361910 2025] [:error] [pid 49642:tid 49895] [client 48.210.83.7:6087] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ula.php"] [unique_id "aSCmsIOXTPSuQfgUUtWZUQAAAIQ"]
[Sat Nov 22 01:51:44.799593 2025] [:error] [pid 50057:tid 50070] [client 48.210.83.7:5879] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ula.php"] [unique_id "aSCmsFb9j9fTBoI0sRVUmAAAAQs"]
[Sat Nov 22 01:51:45.322142 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:5658] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ula.php"] [unique_id "aSCmsVnhuiDak938N_bCqgAAABE"]
[Sat Nov 22 01:51:45.795464 2025] [:error] [pid 49643:tid 49934] [client 48.210.83.7:6100] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/thoms.php"] [unique_id "aSCmsZwUojIRHhF_fj-XSwAAAM4"]
[Sat Nov 22 01:51:46.518949 2025] [:error] [pid 49643:tid 49940] [client 48.210.83.7:5928] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/thoms.php"] [unique_id "aSCmspwUojIRHhF_fj-XUwAAANQ"]
[Sat Nov 22 01:51:47.426680 2025] [:error] [pid 9180:tid 9195] [client 48.210.83.7:6077] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/thoms.php"] [unique_id "aSCms7rk9msixUFV2i-iJQAAAE0"]
[Sat Nov 22 01:51:47.860454 2025] [:error] [pid 49641:tid 49831] [client 48.210.83.7:5969] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/thoms.php"] [unique_id "aSCms1nhuiDak938N_bCugAAAAg"]
[Sat Nov 22 01:51:49.449790 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:5810] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wolv2.php"] [unique_id "aSCmtbrk9msixUFV2i-iLQAAAEM"]
[Sat Nov 22 01:51:51.772045 2025] [:error] [pid 50057:tid 50068] [client 48.210.83.7:6093] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wolv2.php"] [unique_id "aSCmt1b9j9fTBoI0sRVUnwAAAQk"]
[Sat Nov 22 01:51:52.935452 2025] [:error] [pid 49643:tid 49926] [client 48.210.83.7:5776] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wolv2.php"] [unique_id "aSCmuJwUojIRHhF_fj-XZgAAAMc"]
[Sat Nov 22 01:51:54.196816 2025] [:error] [pid 9180:tid 9199] [client 48.210.83.7:6042] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wolv2.php"] [unique_id "aSCmurrk9msixUFV2i-iNQAAAFE"]
[Sat Nov 22 01:51:54.930410 2025] [:error] [pid 9180:tid 9200] [client 48.210.83.7:5973] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xex.php"] [unique_id "aSCmurrk9msixUFV2i-iOAAAAFI"]
[Sat Nov 22 01:51:55.433031 2025] [:error] [pid 49641:tid 49845] [client 48.210.83.7:6019] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xex.php"] [unique_id "aSCmu1nhuiDak938N_bCxQAAABY"]
[Sat Nov 22 01:51:55.982131 2025] [:error] [pid 49642:tid 49891] [client 48.210.83.7:6081] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xex.php"] [unique_id "aSCmu4OXTPSuQfgUUtWZXQAAAIA"]
[Sat Nov 22 01:51:56.401910 2025] [:error] [pid 49641:tid 49843] [client 48.210.83.7:5860] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/xex.php"] [unique_id "aSCmvFnhuiDak938N_bCxgAAABQ"]
[Sat Nov 22 01:51:56.786451 2025] [:error] [pid 9180:tid 9185] [client 48.210.83.7:6029] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wto.php"] [unique_id "aSCmvLrk9msixUFV2i-iOwAAAEM"]
[Sat Nov 22 01:51:57.348980 2025] [:error] [pid 49642:tid 49893] [client 48.210.83.7:6080] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wto.php"] [unique_id "aSCmvYOXTPSuQfgUUtWZYgAAAII"]
[Sat Nov 22 01:51:57.713685 2025] [:error] [pid 49641:tid 49830] [client 48.210.83.7:5814] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wto.php"] [unique_id "aSCmvVnhuiDak938N_bCygAAAAc"]
[Sat Nov 22 01:51:58.606501 2025] [:error] [pid 9180:tid 9193] [client 48.210.83.7:5781] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/wto.php"] [unique_id "aSCmvrrk9msixUFV2i-iPQAAAEs"]
[Sat Nov 22 01:51:59.698772 2025] [:error] [pid 49643:tid 49924] [client 48.210.83.7:6143] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/G6.php"] [unique_id "aSCmv5wUojIRHhF_fj-XagAAAMU"]
[Sat Nov 22 01:52:00.396630 2025] [:error] [pid 50057:tid 50083] [client 48.210.83.7:5952] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/G6.php"] [unique_id "aSCmwFb9j9fTBoI0sRVUrgAAARg"]
[Sat Nov 22 01:52:00.762661 2025] [:error] [pid 49643:tid 49920] [client 48.210.83.7:5956] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/G6.php"] [unique_id "aSCmwJwUojIRHhF_fj-XbAAAAME"]
[Sat Nov 22 01:52:01.582451 2025] [:error] [pid 49643:tid 49925] [client 48.210.83.7:5858] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/G6.php"] [unique_id "aSCmwZwUojIRHhF_fj-XbQAAAMY"]
[Sat Nov 22 01:52:02.410346 2025] [:error] [pid 9180:tid 9204] [client 48.210.83.7:5974] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z57.php"] [unique_id "aSCmwrrk9msixUFV2i-iRAAAAFY"]
[Sat Nov 22 01:52:02.898519 2025] [:error] [pid 49642:tid 49896] [client 48.210.83.7:5966] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z57.php"] [unique_id "aSCmwoOXTPSuQfgUUtWZZgAAAIU"]
[Sat Nov 22 01:52:03.260310 2025] [:error] [pid 49643:tid 49931] [client 48.210.83.7:6075] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z57.php"] [unique_id "aSCmw5wUojIRHhF_fj-XbwAAAMs"]
[Sat Nov 22 01:52:03.542893 2025] [:error] [pid 9180:tid 9198] [client 48.210.83.7:6032] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/z57.php"] [unique_id "aSCmw7rk9msixUFV2i-iRgAAAFA"]
[Sat Nov 22 01:52:03.828982 2025] [:error] [pid 49641:tid 49832] [client 48.210.83.7:5800] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/JPG.php"] [unique_id "aSCmw1nhuiDak938N_bC0AAAAAk"]
[Sat Nov 22 01:52:04.194203 2025] [:error] [pid 49643:tid 49940] [client 48.210.83.7:6039] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/JPG.php"] [unique_id "aSCmxJwUojIRHhF_fj-XcQAAANQ"]
[Sat Nov 22 01:52:04.530106 2025] [:error] [pid 49642:tid 49907] [client 48.210.83.7:6054] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/JPG.php"] [unique_id "aSCmxIOXTPSuQfgUUtWZaAAAAJA"]
[Sat Nov 22 01:52:04.811455 2025] [:error] [pid 50057:tid 50059] [client 48.210.83.7:5980] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/JPG.php"] [unique_id "aSCmxFb9j9fTBoI0sRVUuAAAAQA"]
[Sat Nov 22 01:52:05.165509 2025] [:error] [pid 50057:tid 50068] [client 48.210.83.7:6091] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/09fa6.php"] [unique_id "aSCmxVb9j9fTBoI0sRVUuQAAAQk"]
[Sat Nov 22 01:52:05.567261 2025] [:error] [pid 49642:tid 49892] [client 48.210.83.7:6057] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/09fa6.php"] [unique_id "aSCmxYOXTPSuQfgUUtWZaQAAAIE"]
[Sat Nov 22 01:52:06.166594 2025] [:error] [pid 49643:tid 49927] [client 48.210.83.7:5763] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/09fa6.php"] [unique_id "aSCmxpwUojIRHhF_fj-XdAAAAMg"]
[Sat Nov 22 01:52:06.698129 2025] [:error] [pid 49643:tid 49919] [client 48.210.83.7:6128] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/09fa6.php"] [unique_id "aSCmxpwUojIRHhF_fj-XdgAAAMA"]
[Sat Nov 22 01:52:07.041037 2025] [:error] [pid 49641:tid 49829] [client 48.210.83.7:5844] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file30.php"] [unique_id "aSCmx1nhuiDak938N_bC2QAAAAY"]
[Sat Nov 22 01:52:07.965722 2025] [:error] [pid 49641:tid 49840] [client 48.210.83.7:6137] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file30.php"] [unique_id "aSCmx1nhuiDak938N_bC2wAAABE"]
[Sat Nov 22 01:52:08.652034 2025] [:error] [pid 9180:tid 9190] [client 48.210.83.7:5960] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file30.php"] [unique_id "aSCmyLrk9msixUFV2i-iWgAAAEg"]
[Sat Nov 22 01:52:09.306106 2025] [:error] [pid 49643:tid 49922] [client 48.210.83.7:6016] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/file30.php"] [unique_id "aSCmyZwUojIRHhF_fj-XewAAAMM"]
[Sat Nov 22 01:52:09.792313 2025] [:error] [pid 49642:tid 49912] [client 48.210.83.7:5803] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zuk.php"] [unique_id "aSCmyYOXTPSuQfgUUtWZbgAAAJU"]
[Sat Nov 22 01:52:10.088927 2025] [:error] [pid 49643:tid 49935] [client 48.210.83.7:5832] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zuk.php"] [unique_id "aSCmypwUojIRHhF_fj-XfgAAAM8"]
[Sat Nov 22 01:52:10.630971 2025] [:error] [pid 49642:tid 49903] [client 48.210.83.7:5777] [client 48.210.83.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/zuk.php"] [unique_id "aSCmyoOXTPSuQfgUUtWZcQAAAIw"]
[Sat Nov 22 04:21:28.199141 2025] [:error] [pid 53477:tid 53504] [client 64.225.4.240:33550] [client 64.225.4.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSDJyH7Lu30Ku9O40aKscwAAABc"]
[Sat Nov 22 08:38:48.214391 2025] [:error] [pid 9547:tid 9569] [client 64.225.24.70:43962] [client 64.225.24.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSEGGNClOR5qk7DoMeHdOAAAAVA"]
[Sat Nov 22 10:50:53.468118 2025] [:error] [pid 53478:tid 53515] [client 115.246.120.162:57854] [client 115.246.120.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.120.162, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSElDQhUYdXBbQswAdSDsQAAAEY"]
[Sat Nov 22 10:58:10.014453 2025] [:error] [pid 53477:tid 53504] [client 115.246.120.162:63181] [client 115.246.120.162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSEmwn7Lu30Ku9O40aJI8QAAABc"]
[Sat Nov 22 10:59:54.727070 2025] [:error] [pid 25856:tid 25873] [client 115.246.120.162:64534] [client 115.246.120.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.120.162, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEnKhsTP0wy94zKUvE8vQAAAQ8"]
[Sat Nov 22 11:02:13.015226 2025] [:error] [pid 25856:tid 25873] [client 115.246.120.162:49470] [client 115.246.120.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.120.162, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEntRsTP0wy94zKUvE9QAAAAQ8"]
[Sat Nov 22 11:03:55.324563 2025] [:error] [pid 53478:tid 53526] [client 115.246.120.162:50793] [client 115.246.120.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.120.162, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEoGwhUYdXBbQswAdSGuwAAAFE"]
[Sat Nov 22 11:05:27.441648 2025] [:error] [pid 9547:tid 9557] [client 115.246.120.162:51949] [client 115.246.120.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.246.120.162, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEod9ClOR5qk7DoMeEcrwAAAUQ"]
[Sat Nov 22 12:17:45.735827 2025] [:error] [pid 53479:tid 53556] [client 64.225.24.70:52992] [client 64.225.24.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSE5aW6cicFF3Aas-oT-JAAAAJQ"]
[Sat Nov 22 16:23:30.037407 2025] [:error] [pid 53479:tid 53547] [client 143.244.168.161:52598] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSFzAm6cicFF3Aas-oRe-QAAAIs"]
[Sat Nov 22 16:23:30.704340 2025] [:error] [pid 9547:tid 9561] [client 143.244.168.161:52606] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/server"] [unique_id "aSFzAtClOR5qk7DoMeGA4AAAAUg"]
[Sat Nov 22 16:23:31.327197 2025] [:error] [pid 9547:tid 9564] [client 143.244.168.161:52610] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSFzA9ClOR5qk7DoMeGA4QAAAUs"]
[Sat Nov 22 16:23:31.947219 2025] [:error] [pid 25856:tid 25880] [client 143.244.168.161:52624] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/about"] [unique_id "aSFzAxsTP0wy94zKUvGRSwAAARY"]
[Sat Nov 22 16:23:32.569751 2025] [:error] [pid 53479:tid 53557] [client 143.244.168.161:52630] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/debug/default/view"] [unique_id "aSFzBG6cicFF3Aas-oRfAQAAAJU"]
[Sat Nov 22 16:23:33.189274 2025] [:error] [pid 53477:tid 53496] [client 143.244.168.161:52634] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/v2/_catalog"] [unique_id "aSFzBX7Lu30Ku9O40aKTeAAAAA8"]
[Sat Nov 22 16:23:33.823864 2025] [:error] [pid 9547:tid 9553] [client 143.244.168.161:52640] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSFzBdClOR5qk7DoMeGA5gAAAUA"]
[Sat Nov 22 16:23:34.563064 2025] [:error] [pid 53479:tid 53552] [client 143.244.168.161:52654] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/server-status"] [unique_id "aSFzBm6cicFF3Aas-oRfAwAAAJA"]
[Sat Nov 22 16:23:35.244141 2025] [:error] [pid 25856:tid 25858] [client 143.244.168.161:52668] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/login.action"] [unique_id "aSFzBxsTP0wy94zKUvGRTwAAAQA"]
[Sat Nov 22 16:23:35.870835 2025] [:error] [pid 25856:tid 25882] [client 143.244.168.161:44688] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/_all_dbs"] [unique_id "aSFzBxsTP0wy94zKUvGRVAAAARg"]
[Sat Nov 22 16:23:36.491651 2025] [:error] [pid 53479:tid 53543] [client 143.244.168.161:44696] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aSFzCG6cicFF3Aas-oRfBQAAAIc"]
[Sat Nov 22 16:23:37.124464 2025] [:error] [pid 53478:tid 53526] [client 143.244.168.161:44700] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.env"] [unique_id "aSFzCQhUYdXBbQswAdTSywAAAFE"]
[Sat Nov 22 16:23:37.747746 2025] [:error] [pid 9547:tid 9557] [client 143.244.168.161:44714] [client 143.244.168.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSFzCdClOR5qk7DoMeGA6wAAAUQ"]
[Sat Nov 22 16:23:38.376469 2025] [:error] [pid 25856:tid 25874] [client 143.244.168.161:44726] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSFzChsTP0wy94zKUvGRXAAAARA"]
[Sat Nov 22 16:23:39.006398 2025] [:error] [pid 53477:tid 53489] [client 143.244.168.161:44730] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/config.json"] [unique_id "aSFzC37Lu30Ku9O40aKTewAAAAg"]
[Sat Nov 22 16:23:39.647851 2025] [:error] [pid 53478:tid 53516] [client 143.244.168.161:44736] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aSFzCwhUYdXBbQswAdTSzgAAAEc"]
[Sat Nov 22 16:23:40.281873 2025] [:error] [pid 53566:tid 53588] [client 143.244.168.161:44752] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/info.php"] [unique_id "aSFzDMbSHDBkRbwMbd4HOAAAANQ"]
[Sat Nov 22 16:23:40.900561 2025] [:error] [pid 53478:tid 53532] [client 143.244.168.161:44760] [client 143.244.168.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.funnyemuart.com.au"] [uri "/"] [unique_id "aSFzDAhUYdXBbQswAdTS0gAAAFc"]
[Sun Nov 23 00:05:48.617932 2025] [:error] [pid 53479:tid 53557] [client 94.102.55.18:58388] [client 94.102.55.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSHfXG6cicFF3Aas-oT1wgAAAJU"]
[Sun Nov 23 00:05:49.194443 2025] [:error] [pid 53477:tid 53495] [client 94.102.55.18:57252] [client 94.102.55.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSHfXX7Lu30Ku9O40aITTAAAAA4"]
[Sun Nov 23 03:09:08.029866 2025] [:error] [pid 8816:tid 8884] [client 216.126.225.91:52870] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSIKVJb4RIAN-_BXnHmUWAAAAIA"]
[Sun Nov 23 06:22:49.805430 2025] [proxy_fcgi:error] [pid 38824:tid 38844] [client 13.67.129.215:6231] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 06:22:50.412294 2025] [:error] [pid 38824:tid 38842] [client 13.67.129.215:6231] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSI3uk8WZjXLvbHTHPfVUQAAAM8"], referer: https://www.google.co.uk/
[Sun Nov 23 06:22:52.425625 2025] [:error] [pid 44652:tid 44713] [client 13.67.129.215:4303] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSI3vNiQFwsyXQDhwyDW9QAAAQc"], referer: https://www.yahoo.com/
[Sun Nov 23 06:23:01.723118 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 13.67.129.215:1420] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Sun Nov 23 06:23:10.310948 2025] [:error] [pid 38739:tid 38778] [client 13.67.129.215:1420] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSI3zgdvEgJm2n2cDmoTdwAAAEk"], referer: https://www.google.fr/
[Sun Nov 23 06:23:22.603853 2025] [proxy_fcgi:error] [pid 38740:tid 38806] [client 13.67.129.215:7360] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Sun Nov 23 06:23:36.958789 2025] [:error] [pid 44652:tid 44713] [client 13.67.129.215:3923] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSI36NiQFwsyXQDhwyDXFwAAAQc"], referer: https://www.google.fr/
[Sun Nov 23 06:23:50.965354 2025] [proxy_fcgi:error] [pid 44652:tid 44718] [client 13.67.129.215:2096] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Sun Nov 23 06:23:58.342080 2025] [:error] [pid 44652:tid 44721] [client 13.67.129.215:2096] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSI3_tiQFwsyXQDhwyDXNAAAAQ8"], referer: https://duckduckgo.com/
[Sun Nov 23 06:24:07.406125 2025] [:error] [pid 38738:tid 38743] [client 13.67.129.215:5035] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSI4Bwytc6TL9XavPmPZywAAAAE"], referer: https://www.google.fr/
[Sun Nov 23 06:24:22.408501 2025] [:error] [pid 38739:tid 38793] [client 13.67.129.215:4489] [client 13.67.129.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSI4FgdvEgJm2n2cDmoT8QAAAFg"], referer: https://www.google.co.uk/
[Sun Nov 23 06:24:51.073884 2025] [autoindex:error] [pid 38738:tid 38765] [client 13.67.129.215:5926] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Sun Nov 23 06:25:10.580257 2025] [:error] [pid 38738:tid 38759] [client 13.67.129.215:5926] [client 13.67.129.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.67.129.215, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSI4Rgytc6TL9XavPmPaqwAAABE"], referer: https://www.google.de/
[Sun Nov 23 16:23:13.856043 2025] [autoindex:error] [pid 38739:tid 38774] [client 13.70.85.214:55036] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:23:17.142380 2025] [proxy_fcgi:error] [pid 38739:tid 38772] [client 13.70.85.214:55036] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:23:17.163646 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:55036] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSLEdQdvEgJm2n2cDmr4iAAAAFU"]
[Sun Nov 23 16:23:23.835432 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:54981] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aSLEew13QPZSi6O8umVhzgAAAIU"]
[Sun Nov 23 16:23:29.079827 2025] [:error] [pid 38740:tid 38810] [client 13.70.85.214:55035] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSLEgQ13QPZSi6O8umVh2QAAAI4"]
[Sun Nov 23 16:23:29.906949 2025] [:error] [pid 38740:tid 38820] [client 13.70.85.214:54984] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSLEgQ13QPZSi6O8umVh2wAAAJg"]
[Sun Nov 23 16:23:31.500769 2025] [:error] [pid 44652:tid 44726] [client 13.70.85.214:55033] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSLEg9iQFwsyXQDhwyB_RAAAARQ"]
[Sun Nov 23 16:23:32.652871 2025] [:error] [pid 38740:tid 38813] [client 13.70.85.214:55017] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sko.php"] [unique_id "aSLEhA13QPZSi6O8umVh4AAAAJE"]
[Sun Nov 23 16:23:32.786054 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:55013] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/tx1.php"] [unique_id "aSLEhA13QPZSi6O8umVh4QAAAIc"]
[Sun Nov 23 16:23:33.147031 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:55022] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/tx1.php"] [unique_id "aSLEhQdvEgJm2n2cDmr4kAAAAEU"]
[Sun Nov 23 16:23:33.630201 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:55009] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/tx1.php"] [unique_id "aSLEhU8WZjXLvbHTHPeErAAAAM0"]
[Sun Nov 23 16:23:34.524676 2025] [:error] [pid 38739:tid 38781] [client 13.70.85.214:55015] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/tx1.php"] [unique_id "aSLEhgdvEgJm2n2cDmr4kgAAAEw"]
[Sun Nov 23 16:23:35.359757 2025] [:error] [pid 38739:tid 38779] [client 13.70.85.214:54994] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xv.php"] [unique_id "aSLEhwdvEgJm2n2cDmr4lAAAAEo"]
[Sun Nov 23 16:23:36.042991 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:54486] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xv.php"] [unique_id "aSLEiAytc6TL9XavPmPDpgAAAAE"]
[Sun Nov 23 16:23:36.795248 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:54490] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xv.php"] [unique_id "aSLEiAdvEgJm2n2cDmr4lwAAAFY"]
[Sun Nov 23 16:23:37.631489 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:55039] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/xv.php"] [unique_id "aSLEiQdvEgJm2n2cDmr4mgAAAEc"]
[Sun Nov 23 16:23:38.439316 2025] [:error] [pid 38739:tid 38777] [client 13.70.85.214:54526] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x56.php"] [unique_id "aSLEigdvEgJm2n2cDmr4mwAAAEg"]
[Sun Nov 23 16:23:40.744172 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:55006] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x56.php"] [unique_id "aSLEjAytc6TL9XavPmPDqgAAAAw"]
[Sun Nov 23 16:23:41.622841 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:54980] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x56.php"] [unique_id "aSLEjQ13QPZSi6O8umVh5gAAAJc"]
[Sun Nov 23 16:23:43.167069 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:55032] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x56.php"] [unique_id "aSLEj9iQFwsyXQDhwyB_UAAAARU"]
[Sun Nov 23 16:23:44.876041 2025] [:error] [pid 38738:tid 38760] [client 13.70.85.214:55002] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSLEkAytc6TL9XavPmPDsAAAABI"]
[Sun Nov 23 16:23:45.562360 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:54492] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSLEkQytc6TL9XavPmPDtwAAAAw"]
[Sun Nov 23 16:23:45.753192 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:55029] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSLEkU8WZjXLvbHTHPeEtgAAAME"]
[Sun Nov 23 16:23:45.936566 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:54472] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSLEkQ13QPZSi6O8umVh6gAAAII"]
[Sun Nov 23 16:23:46.069156 2025] [:error] [pid 38740:tid 38816] [client 13.70.85.214:54481] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSLEkg13QPZSi6O8umVh6wAAAJQ"]
[Sun Nov 23 16:23:47.533376 2025] [:error] [pid 38740:tid 38806] [client 13.70.85.214:54978] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSLEkw13QPZSi6O8umVh7AAAAIo"]
[Sun Nov 23 16:23:48.588730 2025] [:error] [pid 38740:tid 38800] [client 13.70.85.214:55001] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSLElA13QPZSi6O8umVh7QAAAIQ"]
[Sun Nov 23 16:23:49.613157 2025] [:error] [pid 44652:tid 44708] [client 13.70.85.214:54976] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSLEldiQFwsyXQDhwyB_VAAAAQI"]
[Sun Nov 23 16:23:50.213611 2025] [:error] [pid 38740:tid 38811] [client 13.70.85.214:54468] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSLElg13QPZSi6O8umVh8AAAAI8"]
[Sun Nov 23 16:23:51.604074 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:54986] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSLEl08WZjXLvbHTHPeEvAAAAMI"]
[Sun Nov 23 16:23:52.378696 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:54491] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSLEmNiQFwsyXQDhwyB_VwAAAQk"]
[Sun Nov 23 16:23:54.520540 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:54990] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSLEmgytc6TL9XavPmPDxgAAAA0"]
[Sun Nov 23 16:23:55.373424 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:54484] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSLEmwytc6TL9XavPmPDyAAAAAg"]
[Sun Nov 23 16:23:58.226160 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:54993] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSLEngytc6TL9XavPmPD0wAAAAg"]
[Sun Nov 23 16:24:00.671648 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:55014] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSLEoAytc6TL9XavPmPD3QAAABE"]
[Sun Nov 23 16:24:01.512306 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:54466] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSLEoU8WZjXLvbHTHPeE0AAAAMo"]
[Sun Nov 23 16:24:02.508645 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:54495] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x50.php"] [unique_id "aSLEok8WZjXLvbHTHPeE1AAAANI"]
[Sun Nov 23 16:24:03.087130 2025] [:error] [pid 38824:tid 38836] [client 13.70.85.214:54485] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x50.php"] [unique_id "aSLEo08WZjXLvbHTHPeE1gAAAMk"]
[Sun Nov 23 16:24:04.204693 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:54517] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x50.php"] [unique_id "aSLEpAytc6TL9XavPmPD6wAAAAo"]
[Sun Nov 23 16:24:04.534241 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:54487] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/x50.php"] [unique_id "aSLEpE8WZjXLvbHTHPeE2QAAAMY"]
[Sun Nov 23 16:24:06.613773 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:55021] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fh26.php"] [unique_id "aSLEptiQFwsyXQDhwyB_XwAAARM"]
[Sun Nov 23 16:24:07.069842 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:55019] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fh26.php"] [unique_id "aSLEpwytc6TL9XavPmPD7gAAABQ"]
[Sun Nov 23 16:24:08.626112 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:55030] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fh26.php"] [unique_id "aSLEqA13QPZSi6O8umViAQAAAJI"]
[Sun Nov 23 16:24:10.867589 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:55010] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fh26.php"] [unique_id "aSLEqgdvEgJm2n2cDmr4pgAAAEs"]
[Sun Nov 23 16:24:12.063936 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:54479] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ot.php"] [unique_id "aSLErAdvEgJm2n2cDmr4qwAAAFE"]
[Sun Nov 23 16:24:13.534259 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:54527] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ot.php"] [unique_id "aSLErQdvEgJm2n2cDmr4rgAAAFg"]
[Sun Nov 23 16:24:14.048354 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:54489] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ot.php"] [unique_id "aSLErtiQFwsyXQDhwyB_ZgAAAQ0"]
[Sun Nov 23 16:24:15.417324 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:55038] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ot.php"] [unique_id "aSLErwdvEgJm2n2cDmr4sAAAAFU"]
[Sun Nov 23 16:24:15.817649 2025] [:error] [pid 38739:tid 38772] [client 13.70.85.214:55034] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSLErwdvEgJm2n2cDmr4sQAAAEM"]
[Sun Nov 23 16:24:16.419246 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:11219] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSLEsAytc6TL9XavPmPD-QAAAAg"]
[Sun Nov 23 16:24:17.867411 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:54977] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSLEsdiQFwsyXQDhwyB_ZwAAAQc"]
[Sun Nov 23 16:24:18.937917 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:55031] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSLEsg13QPZSi6O8umViBwAAAIs"]
[Sun Nov 23 16:24:19.930367 2025] [:error] [pid 38824:tid 38838] [client 13.70.85.214:55025] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSLEs08WZjXLvbHTHPeE5AAAAMs"]
[Sun Nov 23 16:24:20.624415 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:55016] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSLEtE8WZjXLvbHTHPeE5QAAAMA"]
[Sun Nov 23 16:24:21.551513 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:54475] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSLEtQdvEgJm2n2cDmr4tgAAAFc"]
[Sun Nov 23 16:24:23.555204 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:54465] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSLEtwdvEgJm2n2cDmr4uQAAAE8"]
[Sun Nov 23 16:24:25.536431 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:11206] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lx.php"] [unique_id "aSLEuU8WZjXLvbHTHPeE8wAAAMw"]
[Sun Nov 23 16:24:26.707454 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:54504] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lx.php"] [unique_id "aSLEug13QPZSi6O8umViEAAAAIE"]
[Sun Nov 23 16:24:46.865920 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:11211] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSLEzg13QPZSi6O8umViQQAAAIA"]
[Sun Nov 23 16:24:48.645890 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:54469] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSLE0E8WZjXLvbHTHPeFGwAAAMw"]
[Sun Nov 23 16:24:49.335765 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:54488] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSLE0QdvEgJm2n2cDmr42wAAAFA"]
[Sun Nov 23 16:24:51.234256 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:54473] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSLE0wdvEgJm2n2cDmr43wAAAEA"]
[Sun Nov 23 16:24:51.971790 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:54480] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLE0wytc6TL9XavPmPEIwAAAA8"]
[Sun Nov 23 16:24:52.689819 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:54474] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLE1AdvEgJm2n2cDmr44wAAAFE"]
[Sun Nov 23 16:24:53.094288 2025] [:error] [pid 38739:tid 38781] [client 13.70.85.214:55018] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLE1QdvEgJm2n2cDmr45AAAAEw"]
[Sun Nov 23 16:24:54.824670 2025] [:error] [pid 38739:tid 38787] [client 13.70.85.214:54483] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLE1gdvEgJm2n2cDmr45wAAAFI"]
[Sun Nov 23 16:24:55.438934 2025] [:error] [pid 38739:tid 38779] [client 13.70.85.214:54523] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLE1wdvEgJm2n2cDmr46AAAAEo"]
[Sun Nov 23 16:24:55.891398 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:54988] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLE108WZjXLvbHTHPeFIQAAAM0"]
[Sun Nov 23 16:24:57.132312 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:11204] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLE2QdvEgJm2n2cDmr4_gAAAFA"]
[Sun Nov 23 16:24:59.053940 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:55004] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLE2wytc6TL9XavPmPEQAAAAAg"]
[Sun Nov 23 16:25:00.103252 2025] [:error] [pid 38740:tid 38811] [client 13.70.85.214:55005] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLE3A13QPZSi6O8umViUQAAAI8"]
[Sun Nov 23 16:25:00.702925 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:54506] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLE3Aytc6TL9XavPmPESwAAAAQ"]
[Sun Nov 23 16:25:01.522665 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:11213] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLE3QdvEgJm2n2cDmr5EQAAAEA"]
[Sun Nov 23 16:25:02.040188 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:54502] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLE3gdvEgJm2n2cDmr5EwAAAEc"]
[Sun Nov 23 16:25:02.346862 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:54518] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/click.php"] [unique_id "aSLE3gdvEgJm2n2cDmr5FQAAAE8"]
[Sun Nov 23 16:25:02.975815 2025] [:error] [pid 38824:tid 38838] [client 13.70.85.214:11214] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/click.php"] [unique_id "aSLE3k8WZjXLvbHTHPeFUwAAAMs"]
[Sun Nov 23 16:25:04.743264 2025] [:error] [pid 38738:tid 38756] [client 13.70.85.214:11207] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/click.php"] [unique_id "aSLE4Aytc6TL9XavPmPEUQAAAA4"]
[Sun Nov 23 16:25:05.486079 2025] [:error] [pid 38738:tid 38751] [client 13.70.85.214:54991] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/click.php"] [unique_id "aSLE4Qytc6TL9XavPmPEUwAAAAk"]
[Sun Nov 23 16:25:06.790647 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:54507] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aSLE4g13QPZSi6O8umViagAAAIE"]
[Sun Nov 23 16:25:07.637331 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:54520] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aSLE4wytc6TL9XavPmPEXQAAAAE"]
[Sun Nov 23 16:25:08.686914 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:54510] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aSLE5Aytc6TL9XavPmPEYgAAABg"]
[Sun Nov 23 16:25:09.309394 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:11231] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/install.php"] [unique_id "aSLE5diQFwsyXQDhwyB_pgAAARE"]
[Sun Nov 23 16:25:10.246829 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:54997] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lv.php"] [unique_id "aSLE5g13QPZSi6O8umVicwAAAIY"]
[Sun Nov 23 16:25:10.724692 2025] [:error] [pid 38824:tid 38846] [client 13.70.85.214:54511] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lv.php"] [unique_id "aSLE5k8WZjXLvbHTHPeFWAAAANM"]
[Sun Nov 23 16:25:11.478083 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:11236] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lv.php"] [unique_id "aSLE5w13QPZSi6O8umVieAAAAJI"]
[Sun Nov 23 16:25:12.732407 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:54482] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lv.php"] [unique_id "aSLE6Aytc6TL9XavPmPEZwAAAAs"]
[Sun Nov 23 16:25:13.658783 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:11223] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/simple.php"] [unique_id "aSLE6diQFwsyXQDhwyB_sQAAAQ0"]
[Sun Nov 23 16:25:14.008185 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:55026] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/simple.php"] [unique_id "aSLE6g13QPZSi6O8umVifgAAAII"]
[Sun Nov 23 16:25:14.524422 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:11249] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/simple.php"] [unique_id "aSLE6gytc6TL9XavPmPEbwAAABg"]
[Sun Nov 23 16:25:15.683495 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:54477] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/simple.php"] [unique_id "aSLE6wdvEgJm2n2cDmr5NgAAAFY"]
[Sun Nov 23 16:25:18.097390 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:11217] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/13k.php"] [unique_id "aSLE7gytc6TL9XavPmPEdAAAAAs"]
[Sun Nov 23 16:25:18.620423 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:55020] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/13k.php"] [unique_id "aSLE7k8WZjXLvbHTHPeFcwAAANU"]
[Sun Nov 23 16:25:19.530780 2025] [:error] [pid 44652:tid 44726] [client 13.70.85.214:55008] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/13k.php"] [unique_id "aSLE79iQFwsyXQDhwyB_tQAAARQ"]
[Sun Nov 23 16:25:21.464296 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:11228] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/13k.php"] [unique_id "aSLE8diQFwsyXQDhwyB_tgAAAQE"]
[Sun Nov 23 16:25:22.715599 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:11245] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSLE8gdvEgJm2n2cDmr5OwAAAE4"]
[Sun Nov 23 16:25:23.295523 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:11156] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSLE8w13QPZSi6O8umViiAAAAIk"]
[Sun Nov 23 16:25:24.523008 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:11248] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSLE9NiQFwsyXQDhwyB_uAAAAQg"]
[Sun Nov 23 16:25:24.716037 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:55037] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSLE9NiQFwsyXQDhwyB_ugAAAQk"]
[Sun Nov 23 16:25:24.824641 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:55024] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yellow.php"] [unique_id "aSLE9E8WZjXLvbHTHPeFeAAAAM0"]
[Sun Nov 23 16:25:24.950334 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:11205] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yellow.php"] [unique_id "aSLE9AdvEgJm2n2cDmr5PgAAAEQ"]
[Sun Nov 23 16:25:25.487345 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:11216] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yellow.php"] [unique_id "aSLE9U8WZjXLvbHTHPeFegAAAMY"]
[Sun Nov 23 16:25:26.817793 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:11227] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/yellow.php"] [unique_id "aSLE9gytc6TL9XavPmPEfwAAABE"]
[Sun Nov 23 16:25:27.549628 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:11225] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSLE9wytc6TL9XavPmPEgQAAABQ"]
[Sun Nov 23 16:25:29.490241 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:54999] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSLE-QdvEgJm2n2cDmr5QgAAAEs"]
[Sun Nov 23 16:25:30.103943 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:54476] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSLE-gdvEgJm2n2cDmr5QwAAAFg"]
[Sun Nov 23 16:25:31.588500 2025] [:error] [pid 44652:tid 44710] [client 13.70.85.214:11144] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSLE-9iQFwsyXQDhwyB_vQAAAQQ"]
[Sun Nov 23 16:25:32.212439 2025] [:error] [pid 38738:tid 38756] [client 13.70.85.214:54499] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fw.php"] [unique_id "aSLE_Aytc6TL9XavPmPEiAAAAA4"]
[Sun Nov 23 16:25:33.079318 2025] [:error] [pid 38740:tid 38820] [client 13.70.85.214:54524] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fw.php"] [unique_id "aSLE_Q13QPZSi6O8umVijQAAAJg"]
[Sun Nov 23 16:25:33.626955 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:55012] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fw.php"] [unique_id "aSLE_QdvEgJm2n2cDmr5SAAAAFA"]
[Sun Nov 23 16:25:34.869012 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:54514] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fw.php"] [unique_id "aSLE_g13QPZSi6O8umVijwAAAIc"]
[Sun Nov 23 16:25:35.710084 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:11139] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSLE_wytc6TL9XavPmPEkAAAABc"]
[Sun Nov 23 16:25:36.658921 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:54497] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSLFAAdvEgJm2n2cDmr5SgAAAEQ"]
[Sun Nov 23 16:25:37.667072 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:54494] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSLFAQdvEgJm2n2cDmr5SwAAAFY"]
[Sun Nov 23 16:25:37.754018 2025] [:error] [pid 38740:tid 38817] [client 13.70.85.214:11256] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSLFAQ13QPZSi6O8umVikwAAAJU"]
[Sun Nov 23 16:25:37.981257 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:11095] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLFAQdvEgJm2n2cDmr5TAAAAEc"]
[Sun Nov 23 16:25:39.879326 2025] [:error] [pid 38739:tid 38781] [client 13.70.85.214:11235] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSLFAwdvEgJm2n2cDmr5TgAAAEw"]
[Sun Nov 23 16:25:40.475417 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:55011] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSLFBAdvEgJm2n2cDmr5TwAAAFg"]
[Sun Nov 23 16:25:41.753487 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:11224] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSLFBQ13QPZSi6O8umVimwAAAIc"]
[Sun Nov 23 16:25:42.999337 2025] [:error] [pid 38824:tid 38832] [client 13.70.85.214:54478] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSLFBk8WZjXLvbHTHPeFggAAAMU"]
[Sun Nov 23 16:25:43.675873 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:11247] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSLFB08WZjXLvbHTHPeFhAAAAMo"]
[Sun Nov 23 16:25:44.397490 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:11200] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSLFCNiQFwsyXQDhwyB_xAAAAQg"]
[Sun Nov 23 16:26:03.663528 2025] [:error] [pid 38740:tid 38818] [client 13.70.85.214:54470] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLFGw13QPZSi6O8umVitAAAAJY"]
[Sun Nov 23 16:26:07.547372 2025] [:error] [pid 44652:tid 44721] [client 13.70.85.214:11158] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLFH9iQFwsyXQDhwyB_1gAAAQ8"]
[Sun Nov 23 16:26:08.563967 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:11209] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLFIAdvEgJm2n2cDmr5YwAAAFY"]
[Sun Nov 23 16:26:09.535321 2025] [:error] [pid 38824:tid 38831] [client 13.70.85.214:11226] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLFIU8WZjXLvbHTHPeFlAAAAMQ"]
[Sun Nov 23 16:26:10.483208 2025] [:error] [pid 38739:tid 38782] [client 13.70.85.214:11151] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFIgdvEgJm2n2cDmr5ZwAAAE0"]
[Sun Nov 23 16:26:10.984629 2025] [:error] [pid 38740:tid 38806] [client 13.70.85.214:11212] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFIg13QPZSi6O8umVivAAAAIo"]
[Sun Nov 23 16:26:11.925499 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:11261] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFIwdvEgJm2n2cDmr5aAAAAFE"]
[Sun Nov 23 16:26:13.001972 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:55028] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFJQytc6TL9XavPmPEuwAAABM"]
[Sun Nov 23 16:26:13.441472 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:11230] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSLFJQ13QPZSi6O8umVivQAAAII"]
[Sun Nov 23 16:26:13.931454 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:11145] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSLFJQdvEgJm2n2cDmr5aQAAAEU"]
[Sun Nov 23 16:26:15.370331 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:11148] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSLFJ9iQFwsyXQDhwyB_2QAAARI"]
[Sun Nov 23 16:26:15.793829 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:11201] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/admin.php"] [unique_id "aSLFJ08WZjXLvbHTHPeFmwAAANI"]
[Sun Nov 23 16:26:16.579239 2025] [:error] [pid 38739:tid 38778] [client 13.70.85.214:11258] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLFKAdvEgJm2n2cDmr5bwAAAEk"]
[Sun Nov 23 16:26:18.111237 2025] [:error] [pid 38824:tid 38836] [client 13.70.85.214:11244] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLFKk8WZjXLvbHTHPeFngAAAMk"]
[Sun Nov 23 16:26:19.969913 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:54464] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLFKw13QPZSi6O8umViwgAAAIM"]
[Sun Nov 23 16:26:20.598219 2025] [:error] [pid 38740:tid 38812] [client 13.70.85.214:54513] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLFLA13QPZSi6O8umVixgAAAJA"]
[Sun Nov 23 16:26:22.203389 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:11202] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLFLgytc6TL9XavPmPEwwAAAA0"]
[Sun Nov 23 16:26:23.404990 2025] [:error] [pid 38739:tid 38789] [client 13.70.85.214:54471] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLFLwdvEgJm2n2cDmr5cwAAAFQ"]
[Sun Nov 23 16:26:23.983123 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:11072] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLFLwdvEgJm2n2cDmr5dAAAAFE"]
[Sun Nov 23 16:26:24.975888 2025] [:error] [pid 38738:tid 38745] [client 13.70.85.214:11252] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLFMAytc6TL9XavPmPExAAAAAM"]
[Sun Nov 23 16:26:26.831226 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:55034] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/abcd.php"] [unique_id "aSLFMk8WZjXLvbHTHPeFrQAAAMc"]
[Sun Nov 23 16:26:28.629611 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:54989] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/abcd.php"] [unique_id "aSLFNAdvEgJm2n2cDmr5kAAAAEc"]
[Sun Nov 23 16:26:29.940262 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:54501] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/abcd.php"] [unique_id "aSLFNQytc6TL9XavPmPEzgAAABE"]
[Sun Nov 23 16:26:30.666968 2025] [:error] [pid 38738:tid 38748] [client 13.70.85.214:11210] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/abcd.php"] [unique_id "aSLFNgytc6TL9XavPmPE1AAAAAY"]
[Sun Nov 23 16:26:32.122103 2025] [:error] [pid 44652:tid 44716] [client 13.70.85.214:11218] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/dropdown.php"] [unique_id "aSLFONiQFwsyXQDhwyB_7gAAAQo"]
[Sun Nov 23 16:26:32.947517 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:11150] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/dropdown.php"] [unique_id "aSLFOAdvEgJm2n2cDmr5nQAAAEA"]
[Sun Nov 23 16:26:34.379204 2025] [:error] [pid 38739:tid 38788] [client 13.70.85.214:11254] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/dropdown.php"] [unique_id "aSLFOgdvEgJm2n2cDmr5oQAAAFM"]
[Sun Nov 23 16:26:36.250050 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:11239] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/dropdown.php"] [unique_id "aSLFPAytc6TL9XavPmPE6wAAABM"]
[Sun Nov 23 16:26:36.629202 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:54509] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFPAytc6TL9XavPmPE7gAAAAo"]
[Sun Nov 23 16:26:37.357460 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:54498] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFPQytc6TL9XavPmPE8AAAABE"]
[Sun Nov 23 16:26:38.164041 2025] [:error] [pid 44652:tid 44721] [client 13.70.85.214:54519] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFPtiQFwsyXQDhwyB__QAAAQ8"]
[Sun Nov 23 16:26:39.177761 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:54508] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFPwytc6TL9XavPmPE9QAAABg"]
[Sun Nov 23 16:26:40.614417 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:55023] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSLFQAytc6TL9XavPmPE-QAAAAw"]
[Sun Nov 23 16:26:41.565588 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:11142] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSLFQQytc6TL9XavPmPE-wAAAAI"]
[Sun Nov 23 16:26:42.570204 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:11170] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSLFQgytc6TL9XavPmPE_QAAABQ"]
[Sun Nov 23 16:26:43.473579 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:54522] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSLFQwdvEgJm2n2cDmr5rwAAAFg"]
[Sun Nov 23 16:26:43.668236 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:54500] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFQwdvEgJm2n2cDmr5sAAAAE8"]
[Sun Nov 23 16:26:44.506171 2025] [:error] [pid 38739:tid 38777] [client 13.70.85.214:11140] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFRAdvEgJm2n2cDmr5sQAAAEg"]
[Sun Nov 23 16:26:44.899896 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:11222] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFRE8WZjXLvbHTHPeFxAAAAMc"]
[Sun Nov 23 16:26:45.809056 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:11203] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/moon.php"] [unique_id "aSLFRdiQFwsyXQDhwyCABQAAARU"]
[Sun Nov 23 16:26:46.718164 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:11253] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSLFRtiQFwsyXQDhwyCABgAAAQc"]
[Sun Nov 23 16:26:47.581117 2025] [:error] [pid 44652:tid 44721] [client 13.70.85.214:54987] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSLFR9iQFwsyXQDhwyCACQAAAQ8"]
[Sun Nov 23 16:26:48.652085 2025] [:error] [pid 38740:tid 38809] [client 13.70.85.214:11146] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSLFSA13QPZSi6O8umVi4wAAAI0"]
[Sun Nov 23 16:26:49.519574 2025] [:error] [pid 38739:tid 38779] [client 13.70.85.214:54516] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSLFSQdvEgJm2n2cDmr5twAAAEo"]
[Sun Nov 23 16:26:50.039349 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:54493] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/inputs.php"] [unique_id "aSLFSgdvEgJm2n2cDmr5uAAAAFY"]
[Sun Nov 23 16:26:50.735668 2025] [:error] [pid 38740:tid 38816] [client 13.70.85.214:11215] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/inputs.php"] [unique_id "aSLFSg13QPZSi6O8umVi5AAAAJQ"]
[Sun Nov 23 16:26:51.372325 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:55027] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/inputs.php"] [unique_id "aSLFSwytc6TL9XavPmPE_wAAABA"]
[Sun Nov 23 16:26:52.341317 2025] [:error] [pid 38739:tid 38778] [client 13.70.85.214:11262] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/inputs.php"] [unique_id "aSLFTAdvEgJm2n2cDmr5vgAAAEk"]
[Sun Nov 23 16:26:52.852176 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:11257] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSLFTA13QPZSi6O8umVi5QAAAIE"]
[Sun Nov 23 16:26:53.186474 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:11153] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSLFTU8WZjXLvbHTHPeFywAAAME"]
[Sun Nov 23 16:26:54.505245 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:55000] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSLFTg13QPZSi6O8umVi6AAAAIA"]
[Sun Nov 23 16:26:55.606830 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:11186] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSLFTwdvEgJm2n2cDmr5wgAAAEA"]
[Sun Nov 23 16:26:56.565111 2025] [:error] [pid 38740:tid 38810] [client 13.70.85.214:11220] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSLFUA13QPZSi6O8umVi7AAAAI4"]
[Sun Nov 23 16:26:58.219167 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:11173] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSLFUgdvEgJm2n2cDmr5xQAAAEU"]
[Sun Nov 23 16:26:58.699130 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:11263] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSLFUg13QPZSi6O8umVi9AAAAJc"]
[Sun Nov 23 16:26:59.941143 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:11234] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSLFUw13QPZSi6O8umVi9gAAAIc"]
[Sun Nov 23 16:27:00.561095 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:11116] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aSLFVE8WZjXLvbHTHPeF0gAAAMw"]
[Sun Nov 23 16:27:26.810866 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:11157] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSLFbtiQFwsyXQDhwyCAOwAAARY"]
[Sun Nov 23 16:27:27.328645 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:54505] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSLFb08WZjXLvbHTHPeF6wAAAMw"]
[Sun Nov 23 16:27:27.739380 2025] [:error] [pid 38824:tid 38831] [client 13.70.85.214:54525] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSLFb08WZjXLvbHTHPeF7QAAAMQ"]
[Sun Nov 23 16:27:28.369586 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:11251] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSLFcAytc6TL9XavPmPFOQAAAAg"]
[Sun Nov 23 16:27:29.636184 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:11183] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSLFcQytc6TL9XavPmPFQAAAABQ"]
[Sun Nov 23 16:27:31.643477 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:54496] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSLFc08WZjXLvbHTHPeF9QAAANI"]
[Sun Nov 23 16:27:32.357620 2025] [:error] [pid 44652:tid 44718] [client 13.70.85.214:11192] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSLFdNiQFwsyXQDhwyCAQAAAAQw"]
[Sun Nov 23 16:27:33.620341 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:54503] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSLFdQ13QPZSi6O8umVjGgAAAJI"]
[Sun Nov 23 16:27:34.223663 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:11164] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLFdg13QPZSi6O8umVjGwAAAIA"]
[Sun Nov 23 16:27:35.719877 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:11176] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLFdwytc6TL9XavPmPFUgAAABY"]
[Sun Nov 23 16:27:35.956390 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:55003] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLFdwdvEgJm2n2cDmr5-AAAAFU"]
[Sun Nov 23 16:27:37.642003 2025] [:error] [pid 44652:tid 44721] [client 13.70.85.214:54985] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLFediQFwsyXQDhwyCAQgAAAQ8"]
[Sun Nov 23 16:27:38.582491 2025] [:error] [pid 44652:tid 44712] [client 13.70.85.214:11165] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sx.php"] [unique_id "aSLFetiQFwsyXQDhwyCARQAAAQY"]
[Sun Nov 23 16:27:39.428723 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:11174] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sx.php"] [unique_id "aSLFewytc6TL9XavPmPFVAAAABU"]
[Sun Nov 23 16:27:39.801769 2025] [:error] [pid 38740:tid 38816] [client 13.70.85.214:11255] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sx.php"] [unique_id "aSLFew13QPZSi6O8umVjIQAAAJQ"]
[Sun Nov 23 16:27:39.983038 2025] [:error] [pid 38738:tid 38749] [client 13.70.85.214:11238] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/sx.php"] [unique_id "aSLFewytc6TL9XavPmPFVQAAAAc"]
[Sun Nov 23 16:27:40.732652 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:11240] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLFfE8WZjXLvbHTHPeF_QAAANI"]
[Sun Nov 23 16:27:41.460519 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:11138] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLFfQ13QPZSi6O8umVjJAAAAIs"]
[Sun Nov 23 16:27:42.169254 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:11250] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLFftiQFwsyXQDhwyCARgAAAQ0"]
[Sun Nov 23 16:27:43.249194 2025] [:error] [pid 44652:tid 44726] [client 13.70.85.214:11141] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLFf9iQFwsyXQDhwyCASwAAARQ"]
[Sun Nov 23 16:27:44.551766 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:11084] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aSLFgA13QPZSi6O8umVjJwAAAJI"]
[Sun Nov 23 16:27:45.551087 2025] [:error] [pid 44652:tid 44718] [client 13.70.85.214:11152] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aSLFgdiQFwsyXQDhwyCATQAAAQw"]
[Sun Nov 23 16:27:46.180361 2025] [:error] [pid 38738:tid 38747] [client 13.70.85.214:54983] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aSLFggytc6TL9XavPmPFXwAAAAU"]
[Sun Nov 23 16:27:46.799147 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:11232] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/article.php"] [unique_id "aSLFgg13QPZSi6O8umVjKQAAAIA"]
[Sun Nov 23 16:27:47.684264 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:11260] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSLFgwytc6TL9XavPmPFYQAAABQ"]
[Sun Nov 23 16:27:48.527138 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:11128] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSLFhAytc6TL9XavPmPFYwAAABU"]
[Sun Nov 23 16:27:50.054945 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:11097] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSLFhtiQFwsyXQDhwyCAUQAAARI"]
[Sun Nov 23 16:27:50.714464 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:11177] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSLFhgytc6TL9XavPmPFawAAAAI"]
[Sun Nov 23 16:27:51.574091 2025] [:error] [pid 38739:tid 38771] [client 13.70.85.214:11160] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFhwdvEgJm2n2cDmr6CwAAAEI"]
[Sun Nov 23 16:27:51.754647 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:11229] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFhwdvEgJm2n2cDmr6DAAAAFg"]
[Sun Nov 23 16:27:52.567064 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:11018] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFiNiQFwsyXQDhwyCAWAAAAQU"]
[Sun Nov 23 16:27:53.186381 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:54512] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/1.php"] [unique_id "aSLFiQytc6TL9XavPmPFcQAAABg"]
[Sun Nov 23 16:27:54.464198 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:11062] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSLFigytc6TL9XavPmPFdgAAAAQ"]
[Sun Nov 23 16:27:55.447844 2025] [:error] [pid 38738:tid 38747] [client 13.70.85.214:11193] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSLFiwytc6TL9XavPmPFegAAAAU"]
[Sun Nov 23 16:27:55.985404 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:11155] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSLFiwytc6TL9XavPmPFfAAAAA8"]
[Sun Nov 23 16:27:57.391078 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:11246] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSLFjQdvEgJm2n2cDmr6EwAAAFA"]
[Sun Nov 23 16:27:58.105167 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:55033] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSLFjk8WZjXLvbHTHPeGCgAAAMI"]
[Sun Nov 23 16:27:58.596962 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:54467] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSLFjgdvEgJm2n2cDmr6FgAAAEs"]
[Sun Nov 23 16:27:59.292634 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:54998] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSLFjw13QPZSi6O8umVjNQAAAIk"]
[Sun Nov 23 16:28:00.509415 2025] [:error] [pid 38740:tid 38800] [client 13.70.85.214:11016] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/link.php"] [unique_id "aSLFkA13QPZSi6O8umVjOgAAAIQ"]
[Sun Nov 23 16:28:01.197986 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:11022] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp.php"] [unique_id "aSLFkdiQFwsyXQDhwyCAXwAAARE"]
[Sun Nov 23 16:28:02.034954 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:11073] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp.php"] [unique_id "aSLFkgytc6TL9XavPmPFhgAAAA8"]
[Sun Nov 23 16:28:03.064611 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:11188] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp.php"] [unique_id "aSLFk08WZjXLvbHTHPeGEAAAANU"]
[Sun Nov 23 16:28:04.643422 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:11233] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/byp.php"] [unique_id "aSLFlE8WZjXLvbHTHPeGEQAAAMY"]
[Sun Nov 23 16:28:07.029399 2025] [:error] [pid 44652:tid 44720] [client 13.70.85.214:54990] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ws.php"] [unique_id "aSLFl9iQFwsyXQDhwyCAZgAAAQ4"]
[Sun Nov 23 16:28:08.341516 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:54490] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ws.php"] [unique_id "aSLFmNiQFwsyXQDhwyCAZwAAARI"]
[Sun Nov 23 16:28:09.531567 2025] [:error] [pid 38740:tid 38811] [client 13.70.85.214:11089] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ws.php"] [unique_id "aSLFmQ13QPZSi6O8umVjQwAAAI8"]
[Sun Nov 23 16:28:10.591633 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:54995] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ws.php"] [unique_id "aSLFmk8WZjXLvbHTHPeGGAAAAMo"]
[Sun Nov 23 16:28:10.972564 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:11237] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-trackback.php"] [unique_id "aSLFmgytc6TL9XavPmPFjwAAAAI"]
[Sun Nov 23 16:28:11.280774 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:11079] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-trackback.php"] [unique_id "aSLFmwytc6TL9XavPmPFlgAAAAE"]
[Sun Nov 23 16:28:11.653823 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:54996] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-trackback.php"] [unique_id "aSLFm9iQFwsyXQDhwyCAbQAAARY"]
[Sun Nov 23 16:28:12.028045 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:11198] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-trackback.php"] [unique_id "aSLFnE8WZjXLvbHTHPeGHQAAAMA"]
[Sun Nov 23 16:28:14.136791 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:54978] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSLFnk8WZjXLvbHTHPeGHwAAANU"]
[Sun Nov 23 16:28:15.335743 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:11103] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSLFnwytc6TL9XavPmPFswAAAAo"]
[Sun Nov 23 16:28:16.120833 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:11098] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSLFoA13QPZSi6O8umVjRwAAAIM"]
[Sun Nov 23 16:28:17.945047 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:54510] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSLFoQdvEgJm2n2cDmr6HQAAAE8"]
[Sun Nov 23 16:28:19.390271 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:11147] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSLFo9iQFwsyXQDhwyCAgAAAAQg"]
[Sun Nov 23 16:28:20.112871 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:54521] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSLFpAytc6TL9XavPmPFvwAAABg"]
[Sun Nov 23 16:28:20.750621 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:54981] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSLFpE8WZjXLvbHTHPeGKQAAANU"]
[Sun Nov 23 16:28:21.437148 2025] [:error] [pid 38740:tid 38806] [client 13.70.85.214:54487] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSLFpQ13QPZSi6O8umVjUAAAAIo"]
[Sun Nov 23 16:28:22.608041 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:11181] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSLFpk8WZjXLvbHTHPeGLwAAAMI"]
[Sun Nov 23 16:28:22.978694 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:54491] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLFpg13QPZSi6O8umVjVAAAAIA"]
[Sun Nov 23 16:28:23.605147 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:11171] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLFpwytc6TL9XavPmPFxwAAABU"]
[Sun Nov 23 16:28:24.816186 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:54492] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSLFqA13QPZSi6O8umVjVwAAAIY"]
[Sun Nov 23 16:28:37.231845 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:54976] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLFtU8WZjXLvbHTHPeGUAAAAMw"]
[Sun Nov 23 16:28:44.140037 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:55014] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSLFvAytc6TL9XavPmPF_QAAAAI"]
[Sun Nov 23 16:28:50.012263 2025] [autoindex:error] [pid 38738:tid 38749] [client 13.70.85.214:54468] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:28:50.096617 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:54468] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSLFwgytc6TL9XavPmPGCAAAAA8"]
[Sun Nov 23 16:28:51.540195 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:54485] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSLFwwdvEgJm2n2cDmr6PgAAAE4"]
[Sun Nov 23 16:28:55.731401 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:11136] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aSLFxwdvEgJm2n2cDmr6RQAAAEs"]
[Sun Nov 23 16:28:56.516402 2025] [:error] [pid 38739:tid 38778] [client 13.70.85.214:54475] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSLFyAdvEgJm2n2cDmr6RwAAAEk"]
[Sun Nov 23 16:29:01.800110 2025] [:error] [pid 38740:tid 38817] [client 13.70.85.214:11242] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSLFzQ13QPZSi6O8umVjkwAAAJU"]
[Sun Nov 23 16:29:04.814656 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:54489] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSLF0AdvEgJm2n2cDmr6TgAAAFc"]
[Sun Nov 23 16:29:06.080902 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:11010] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSLF0tiQFwsyXQDhwyCAygAAARI"]
[Sun Nov 23 16:29:06.915620 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:54473] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSLF0g13QPZSi6O8umVjmgAAAIk"]
[Sun Nov 23 16:29:08.570904 2025] [:error] [pid 38740:tid 38806] [client 13.70.85.214:55038] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSLF1A13QPZSi6O8umVjnQAAAIo"]
[Sun Nov 23 16:29:10.050819 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:54994] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSLF1tiQFwsyXQDhwyCA3gAAARY"]
[Sun Nov 23 16:29:11.530876 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:11190] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSLF1w13QPZSi6O8umVjngAAAJc"]
[Sun Nov 23 16:29:12.496210 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:54474] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSLF2Aytc6TL9XavPmPGNAAAAAI"]
[Sun Nov 23 16:29:13.383772 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:55039] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSLF2U8WZjXLvbHTHPeGlAAAAMY"]
[Sun Nov 23 16:29:14.080416 2025] [:error] [pid 38740:tid 38817] [client 13.70.85.214:55001] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSLF2g13QPZSi6O8umVjoAAAAJU"]
[Sun Nov 23 16:29:15.466872 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:54526] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSLF2w13QPZSi6O8umVjoQAAAIA"]
[Sun Nov 23 16:29:17.389006 2025] [:error] [pid 38740:tid 38818] [client 13.70.85.214:55030] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSLF3Q13QPZSi6O8umVjpQAAAJY"]
[Sun Nov 23 16:29:18.792277 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:54488] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSLF3gdvEgJm2n2cDmr6YwAAAFE"]
[Sun Nov 23 16:29:20.141633 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:11110] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSLF4Aytc6TL9XavPmPGQgAAABM"]
[Sun Nov 23 16:29:21.589060 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:55025] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSLF4QdvEgJm2n2cDmr6ZwAAAE4"]
[Sun Nov 23 16:29:22.704720 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:11182] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSLF4g13QPZSi6O8umVjsQAAAIU"]
[Sun Nov 23 16:29:23.310156 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:55002] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSLF4wytc6TL9XavPmPGWQAAAAg"]
[Sun Nov 23 16:29:24.120165 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:55035] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSLF5E8WZjXLvbHTHPeGoQAAAMY"]
[Sun Nov 23 16:29:25.596929 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:11086] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSLF5U8WZjXLvbHTHPeGowAAAMc"]
[Sun Nov 23 16:29:26.847797 2025] [:error] [pid 38824:tid 38847] [client 13.70.85.214:55022] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSLF5k8WZjXLvbHTHPeGqAAAANQ"]
[Sun Nov 23 16:29:27.517792 2025] [:error] [pid 38740:tid 38817] [client 13.70.85.214:11191] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSLF5w13QPZSi6O8umVjvQAAAJU"]
[Sun Nov 23 16:29:28.093034 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:55021] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSLF6AdvEgJm2n2cDmr6dwAAAE4"]
[Sun Nov 23 16:29:28.741687 2025] [:error] [pid 38739:tid 38770] [client 13.70.85.214:11223] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSLF6AdvEgJm2n2cDmr6eAAAAEE"]
[Sun Nov 23 16:29:29.627927 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:54506] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSLF6Qytc6TL9XavPmPGZwAAABA"]
[Sun Nov 23 16:29:30.646487 2025] [:error] [pid 38739:tid 38789] [client 13.70.85.214:11207] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSLF6gdvEgJm2n2cDmr6ewAAAFQ"]
[Sun Nov 23 16:29:31.431658 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:54469] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSLF6wdvEgJm2n2cDmr6fAAAAFc"]
[Sun Nov 23 16:29:33.514827 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:11204] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSLF7Q13QPZSi6O8umVjwwAAAJc"]
[Sun Nov 23 16:29:34.036169 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:11208] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSLF7k8WZjXLvbHTHPeGrAAAAME"]
[Sun Nov 23 16:29:35.450897 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:54982] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSLF7wytc6TL9XavPmPGcQAAAA0"]
[Sun Nov 23 16:29:36.282632 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:54518] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLF8NiQFwsyXQDhwyCBIQAAAQc"]
[Sun Nov 23 16:29:37.396536 2025] [:error] [pid 44652:tid 44720] [client 13.70.85.214:54504] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSLF8diQFwsyXQDhwyCBIgAAAQ4"]
[Sun Nov 23 16:29:38.283270 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:11185] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSLF8gytc6TL9XavPmPGeAAAABQ"]
[Sun Nov 23 16:29:38.732158 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:11214] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSLF8gytc6TL9XavPmPGegAAAA0"]
[Sun Nov 23 16:29:39.533830 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:54495] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSLF808WZjXLvbHTHPeGyQAAAM0"]
[Sun Nov 23 16:29:40.098412 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:11213] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLF9Aytc6TL9XavPmPGfQAAAAA"]
[Sun Nov 23 16:29:40.866613 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:54483] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLF9Aytc6TL9XavPmPGfwAAABg"]
[Sun Nov 23 16:29:42.263361 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:11040] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLF9gytc6TL9XavPmPGgQAAABY"]
[Sun Nov 23 16:29:43.856732 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:55019] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLF9wytc6TL9XavPmPGhQAAAAI"]
[Sun Nov 23 16:29:44.706092 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:55018] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLF-NiQFwsyXQDhwyCBJwAAAQ0"]
[Sun Nov 23 16:29:45.075735 2025] [:error] [pid 44652:tid 44706] [client 13.70.85.214:11076] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLF-diQFwsyXQDhwyCBKAAAAQA"]
[Sun Nov 23 16:29:45.842910 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:11189] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLF-Qytc6TL9XavPmPGhwAAABU"]
[Sun Nov 23 16:29:46.679892 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:54476] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLF-g13QPZSi6O8umVj2QAAAIw"]
[Sun Nov 23 16:29:48.084752 2025] [:error] [pid 38740:tid 38815] [client 13.70.85.214:54980] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLF_A13QPZSi6O8umVj3AAAAJM"]
[Sun Nov 23 16:29:48.980646 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:11259] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLF_AdvEgJm2n2cDmr6jAAAAFY"]
[Sun Nov 23 16:29:49.543048 2025] [:error] [pid 38740:tid 38810] [client 13.70.85.214:11128] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLF_Q13QPZSi6O8umVj3wAAAI4"]
[Sun Nov 23 16:29:50.594528 2025] [:error] [pid 38740:tid 38806] [client 13.70.85.214:54986] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLF_g13QPZSi6O8umVj4AAAAIo"]
[Sun Nov 23 16:29:51.007929 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:11243] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLF_w13QPZSi6O8umVj4QAAAIA"]
[Sun Nov 23 16:29:51.658049 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:54465] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLF_w13QPZSi6O8umVj5QAAAIk"]
[Sun Nov 23 16:29:52.196947 2025] [:error] [pid 38740:tid 38810] [client 13.70.85.214:54527] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLGAA13QPZSi6O8umVj5gAAAI4"]
[Sun Nov 23 16:29:52.877762 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:11236] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLGAAdvEgJm2n2cDmr6jwAAAEs"]
[Sun Nov 23 16:29:53.589779 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:54997] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLGAQytc6TL9XavPmPGlAAAABM"]
[Sun Nov 23 16:29:54.166331 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:11256] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLGAg13QPZSi6O8umVj6AAAAIE"]
[Sun Nov 23 16:29:55.951212 2025] [:error] [pid 38824:tid 38830] [client 13.70.85.214:54499] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLGA08WZjXLvbHTHPeG0gAAAMM"]
[Sun Nov 23 16:29:56.372394 2025] [:error] [pid 38739:tid 38771] [client 13.70.85.214:11093] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLGBAdvEgJm2n2cDmr6kwAAAEI"]
[Sun Nov 23 16:29:57.067874 2025] [:error] [pid 38738:tid 38760] [client 13.70.85.214:11109] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLGBQytc6TL9XavPmPGmwAAABI"]
[Sun Nov 23 16:29:57.570135 2025] [:error] [pid 44652:tid 44706] [client 13.70.85.214:11217] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLGBdiQFwsyXQDhwyCBMgAAAQA"]
[Sun Nov 23 16:29:58.120098 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:11156] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLGBgytc6TL9XavPmPGngAAABg"]
[Sun Nov 23 16:29:59.056497 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:55024] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLGBwytc6TL9XavPmPGoQAAABU"]
[Sun Nov 23 16:30:00.647524 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:11074] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLGCAytc6TL9XavPmPGpAAAAAQ"]
[Sun Nov 23 16:30:01.305224 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:11149] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLGCdiQFwsyXQDhwyCBNQAAARM"]
[Sun Nov 23 16:30:02.487017 2025] [:error] [pid 38740:tid 38810] [client 13.70.85.214:11200] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLGCg13QPZSi6O8umVj8QAAAI4"]
[Sun Nov 23 16:30:08.683462 2025] [:error] [pid 38738:tid 38745] [client 13.70.85.214:55026] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLGEAytc6TL9XavPmPGvAAAAAM"]
[Sun Nov 23 16:30:08.782257 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:54472] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSLGEAdvEgJm2n2cDmr6mgAAAEU"]
[Sun Nov 23 16:35:42.472307 2025] [:error] [pid 44652:tid 44728] [client 172.70.240.164:12795] [client 172.70.240.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSLHXtiQFwsyXQDhwyCK7wAAARY"]
[Sun Nov 23 21:13:36.826051 2025] [proxy_fcgi:error] [pid 38740:tid 38810] [client 128.24.86.41:39921] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 21:13:37.038496 2025] [:error] [pid 38740:tid 38799] [client 128.24.86.41:39921] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSMIgQ13QPZSi6O8umXzmgAAAIM"], referer: https://www.bing.com/
[Sun Nov 23 21:13:37.484867 2025] [:error] [pid 16066:tid 16087] [client 128.24.86.41:39825] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSMIgfq-c47Q5mW5E9HJCgAAAZI"], referer: https://www.google.com/
[Sun Nov 23 21:13:44.092510 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 128.24.86.41:39874] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Sun Nov 23 21:13:51.524689 2025] [:error] [pid 38739:tid 38775] [client 128.24.86.41:39874] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSMIjwdvEgJm2n2cDmp5eAAAAEY"], referer: https://www.google.com/
[Sun Nov 23 21:14:01.703648 2025] [proxy_fcgi:error] [pid 14602:tid 14621] [client 128.24.86.41:39745] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Sun Nov 23 21:14:09.535924 2025] [:error] [pid 14602:tid 14644] [client 128.24.86.41:39745] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSMIoR-I77jdD81pU-nsOwAAAVc"], referer: https://duckduckgo.com/
[Sun Nov 23 21:14:20.687902 2025] [proxy_fcgi:error] [pid 38738:tid 38762] [client 128.24.86.41:39684] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Sun Nov 23 21:14:29.831427 2025] [:error] [pid 38738:tid 38744] [client 128.24.86.41:39684] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/bala.php"] [unique_id "aSMItQytc6TL9XavPmNQ0wAAAAI"], referer: https://www.google.de/
[Sun Nov 23 21:14:38.172506 2025] [:error] [pid 44652:tid 44713] [client 128.24.86.41:39924] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSMIvtiQFwsyXQDhwyAexwAAAQc"], referer: https://www.google.com/
[Sun Nov 23 21:14:51.646517 2025] [:error] [pid 16066:tid 16090] [client 128.24.86.41:39918] [client 128.24.86.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSMIy_q-c47Q5mW5E9HJRgAAAZU"], referer: https://www.yahoo.com/
[Sun Nov 23 21:15:18.413208 2025] [autoindex:error] [pid 8036:tid 8047] [client 128.24.86.41:39842] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Sun Nov 23 21:15:52.659755 2025] [:error] [pid 8036:tid 8065] [client 128.24.86.41:39842] [client 128.24.86.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 128.24.86.41, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSMJCNBT69EcgFwgTmpxhAAAAhI"], referer: https://duckduckgo.com/
[Sun Nov 23 22:36:34.677026 2025] [:error] [pid 38739:tid 38783] [client 172.70.248.198:10474] [client 172.70.248.198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSMb8gdvEgJm2n2cDmqD1AAAAE4"]
[Mon Nov 24 03:16:05.449357 2025] [:error] [pid 8337:tid 8354] [client 193.37.33.91:60923] [client 193.37.33.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.91, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSNddeSmps4S2j95D5isjwAAAA8"]
[Mon Nov 24 05:17:38.660642 2025] [:error] [pid 12912:tid 12971] [client 193.37.33.65:62165] [client 193.37.33.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.65, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSN58pMj_Lgt36UonYK3nwAAAII"]
[Mon Nov 24 05:17:38.661044 2025] [:error] [pid 53508:tid 53520] [client 193.37.33.58:29759] [client 193.37.33.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.58, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSN58m639qxbKCcL09yvSQAAAQo"]
[Mon Nov 24 05:30:30.651683 2025] [:error] [pid 12912:tid 12970] [client 176.65.132.18:43828] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSN89pMj_Lgt36UonYK7cAAAAIE"]
[Mon Nov 24 05:32:02.186461 2025] [:error] [pid 12911:tid 12965] [client 193.37.33.98:33143] [client 193.37.33.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.98, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSN9UkDMbk9464jnIl7npAAAAFc"]
[Mon Nov 24 05:32:02.186759 2025] [:error] [pid 12912:tid 12977] [client 193.37.33.105:34253] [client 193.37.33.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.105, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSN9UpMj_Lgt36UonYK79gAAAIg"]
[Mon Nov 24 06:01:47.030128 2025] [autoindex:error] [pid 12912:tid 12969] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:01:47.247667 2025] [autoindex:error] [pid 12912:tid 12988] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:01:47.480529 2025] [autoindex:error] [pid 12912:tid 12976] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:01:47.686190 2025] [autoindex:error] [pid 12912:tid 12989] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:01:47.926250 2025] [autoindex:error] [pid 12912:tid 12992] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:01:48.137119 2025] [autoindex:error] [pid 12912:tid 12971] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:01:48.368680 2025] [autoindex:error] [pid 12912:tid 12993] [client 13.77.102.24:7576] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 06:02:11.549525 2025] [autoindex:error] [pid 12912:tid 12986] [client 13.77.102.24:5494] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:02:22.173060 2025] [autoindex:error] [pid 12910:tid 12929] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:02:22.630545 2025] [autoindex:error] [pid 12910:tid 12926] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:02:22.847221 2025] [autoindex:error] [pid 12910:tid 12917] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:02:23.077853 2025] [autoindex:error] [pid 12910:tid 12923] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:02:23.300771 2025] [autoindex:error] [pid 12910:tid 12937] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:02:23.515456 2025] [autoindex:error] [pid 12910:tid 12928] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:02:23.734717 2025] [autoindex:error] [pid 12910:tid 12916] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:02:23.955744 2025] [autoindex:error] [pid 12910:tid 12924] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:02:32.428890 2025] [autoindex:error] [pid 12910:tid 12926] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:02:32.899465 2025] [autoindex:error] [pid 12910:tid 12921] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:02:33.122477 2025] [autoindex:error] [pid 12910:tid 12917] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:02:33.338255 2025] [autoindex:error] [pid 12910:tid 12923] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:02:33.556507 2025] [autoindex:error] [pid 12910:tid 12937] [client 13.77.102.24:4206] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 06:02:40.167701 2025] [autoindex:error] [pid 12910:tid 12916] [client 13.77.102.24:4206] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:03:49.381157 2025] [autoindex:error] [pid 12912:tid 12977] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 06:03:49.596578 2025] [autoindex:error] [pid 12912:tid 12978] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:03:49.840099 2025] [autoindex:error] [pid 12912:tid 12971] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:03:50.113966 2025] [autoindex:error] [pid 12912:tid 12989] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:03:50.380485 2025] [autoindex:error] [pid 12912:tid 12981] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:03:57.147077 2025] [autoindex:error] [pid 12912:tid 12982] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:03:57.376930 2025] [autoindex:error] [pid 12912:tid 12969] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:04:09.682632 2025] [autoindex:error] [pid 12912:tid 12989] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Mon Nov 24 06:04:12.549473 2025] [autoindex:error] [pid 12912:tid 12985] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:04:12.817517 2025] [autoindex:error] [pid 12912:tid 12991] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 06:04:13.032623 2025] [autoindex:error] [pid 12912:tid 12983] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:04:13.248958 2025] [autoindex:error] [pid 12912:tid 12974] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:04:15.457204 2025] [autoindex:error] [pid 12912:tid 12978] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 06:04:19.998299 2025] [autoindex:error] [pid 12912:tid 12974] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:04:20.224951 2025] [autoindex:error] [pid 12912:tid 12987] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:04:22.343284 2025] [autoindex:error] [pid 12912:tid 12970] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 06:04:23.291187 2025] [autoindex:error] [pid 12912:tid 12989] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:04:23.505797 2025] [autoindex:error] [pid 12912:tid 12983] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:04:25.906036 2025] [autoindex:error] [pid 12912:tid 12973] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 06:04:26.127999 2025] [autoindex:error] [pid 12912:tid 12989] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 06:04:26.341394 2025] [autoindex:error] [pid 12912:tid 12990] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:04:26.555798 2025] [autoindex:error] [pid 12912:tid 12980] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 06:04:26.773746 2025] [autoindex:error] [pid 12912:tid 12977] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 06:04:27.029360 2025] [autoindex:error] [pid 12912:tid 12993] [client 13.77.102.24:2973] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 07:45:19.203483 2025] [:error] [pid 12912:tid 12980] [client 103.159.35.121:45022] [client 103.159.35.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.35.121, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOcj5Mj_Lgt36UonYLsMQAAAIs"]
[Mon Nov 24 08:18:02.253105 2025] [:error] [pid 48688:tid 48713] [client 103.65.237.124:59433] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkOhm2q1FkzLam7A0T5AAAAlU"]
[Mon Nov 24 08:18:02.510084 2025] [:error] [pid 48688:tid 48695] [client 103.65.237.124:50155] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOkOhm2q1FkzLam7A0T5QAAAkM"]
[Mon Nov 24 21:45:37.564957 2025] [:error] [pid 48601:tid 48665] [client 193.32.126.212:53422] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aSRhgYMM4MaVTk74-Abm5gAAAgg"]
[Mon Nov 24 21:45:38.060150 2025] [:error] [pid 48601:tid 48669] [client 193.32.126.212:54184] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aSRhgoMM4MaVTk74-Abm8wAAAgw"]
[Mon Nov 24 21:45:38.555332 2025] [:error] [pid 48599:tid 48627] [client 193.32.126.212:54665] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgpzvu6PDJiRKE3JQMAAAAZg"]
[Tue Nov 25 02:50:27.047074 2025] [:error] [pid 16516:tid 16538] [client 147.185.41.135:35386] [client 147.185.41.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSSo8_qZbniwaNwL8Xk3xQAAARM"]
[Tue Nov 25 03:33:07.679760 2025] [:error] [pid 33474:tid 33494] [client 189.37.72.79:17441] [client 189.37.72.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.72.79, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSy87RfYt5X3GZs3zaeHAAAARE"]
[Tue Nov 25 14:44:27.806222 2025] [:error] [pid 28836:tid 28986] [client 54.173.250.15:51108] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSVQS5wNRsoxcLQGkTd9ugAAAs8"]
[Tue Nov 25 15:39:03.594514 2025] [:error] [pid 28739:tid 28769] [client 213.21.239.4:39698] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/application/.git/config"] [unique_id "aSVdFxxGpKmlkG4FexRHnQAAAgc"]
[Tue Nov 25 15:39:03.596275 2025] [:error] [pid 14077:tid 14125] [client 213.21.239.4:39820] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/static../.git/config"] [unique_id "aSVdFxG9n7UHEkwDTygrCQAAAE8"]
[Tue Nov 25 15:39:03.597726 2025] [:error] [pid 28739:tid 28776] [client 213.21.239.4:39842] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/css../.git/config"] [unique_id "aSVdFxxGpKmlkG4FexRHnwAAAg4"]
[Tue Nov 25 15:39:03.600847 2025] [:error] [pid 28739:tid 28774] [client 213.21.239.4:39846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/;/.git/config"] [unique_id "aSVdFxxGpKmlkG4FexRHoAAAAgw"]
[Tue Nov 25 15:39:03.601706 2025] [:error] [pid 28739:tid 28775] [client 213.21.239.4:39710] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/common/.git/config"] [unique_id "aSVdFxxGpKmlkG4FexRHoQAAAg0"]
[Tue Nov 25 15:39:03.603253 2025] [:error] [pid 28609:tid 28628] [client 213.21.239.4:39732] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/developer/.git/config"] [unique_id "aSVdFyGGdT-nZJVs3x2RowAAAYo"]
[Tue Nov 25 15:39:03.603842 2025] [:error] [pid 28740:tid 28807] [client 213.21.239.4:39738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/database/.git/config"] [unique_id "aSVdF1ppQCoYxWW6V0U6SwAAAlA"]
[Tue Nov 25 15:39:03.605744 2025] [:error] [pid 28740:tid 28801] [client 213.21.239.4:39806] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/assets../.git/config"] [unique_id "aSVdF1ppQCoYxWW6V0U6TAAAAko"]
[Tue Nov 25 15:39:03.606025 2025] [:error] [pid 28740:tid 28804] [client 213.21.239.4:39792] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/.git/config"] [unique_id "aSVdF1ppQCoYxWW6V0U6TQAAAk0"]
[Tue Nov 25 15:39:03.608111 2025] [:error] [pid 14076:tid 14105] [client 213.21.239.4:39808] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/app/.git/config"] [unique_id "aSVdF3sB4Gz6Qw-pvBvcZgAAABg"]
[Tue Nov 25 15:39:03.608538 2025] [:error] [pid 28739:tid 28780] [client 213.21.239.4:39848] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/.git/config;.."] [unique_id "aSVdFxxGpKmlkG4FexRHogAAAhI"]
[Tue Nov 25 15:39:03.610616 2025] [:error] [pid 28739:tid 28781] [client 213.21.239.4:39854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/.git/config;"] [unique_id "aSVdFxxGpKmlkG4FexRHowAAAhM"]
[Tue Nov 25 15:39:03.612301 2025] [:error] [pid 14076:tid 14086] [client 213.21.239.4:39688] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/..;/.git/config"] [unique_id "aSVdF3sB4Gz6Qw-pvBvcZwAAAAU"]
[Tue Nov 25 15:39:03.612615 2025] [:error] [pid 2987:tid 2990] [client 213.21.239.4:39694] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart/.git/%0Aconfig"] [unique_id "aSVdF8-djEt-pTzPxnxixQAAAUE"]
[Tue Nov 25 15:39:03.614716 2025] [:error] [pid 2987:tid 2996] [client 213.21.239.4:39756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/content../.git/config"] [unique_id "aSVdF8-djEt-pTzPxnxixgAAAUc"]
[Tue Nov 25 15:39:03.615982 2025] [:error] [pid 28609:tid 28630] [client 213.21.239.4:39758] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/api/.git/config"] [unique_id "aSVdFyGGdT-nZJVs3x2RpAAAAYw"]
[Tue Nov 25 15:39:03.619568 2025] [:error] [pid 28740:tid 28792] [client 213.21.239.4:39726] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart../.git/config"] [unique_id "aSVdF1ppQCoYxWW6V0U6TgAAAkE"]
[Tue Nov 25 15:39:03.620971 2025] [:error] [pid 14076:tid 14094] [client 213.21.239.4:39744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/admin/.git/config"] [unique_id "aSVdF3sB4Gz6Qw-pvBvcaAAAAA0"]
[Tue Nov 25 15:39:03.621761 2025] [:error] [pid 28739:tid 28762] [client 213.21.239.4:39790] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/backup/.git/config"] [unique_id "aSVdFxxGpKmlkG4FexRHpAAAAgA"]
[Tue Nov 25 15:39:03.623714 2025] [:error] [pid 14076:tid 14100] [client 213.21.239.4:39838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/dev/.git/config"] [unique_id "aSVdF3sB4Gz6Qw-pvBvcaQAAABM"]
[Tue Nov 25 15:39:07.252030 2025] [:error] [pid 14078:tid 14150] [client 213.21.239.4:39880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/;/.git/config"] [unique_id "aSVdG9VXYbb0ii_rVoIFTgAAAI0"]
[Tue Nov 25 15:39:07.252498 2025] [:error] [pid 28739:tid 28775] [client 213.21.239.4:39904] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/static../.git/config"] [unique_id "aSVdGxxGpKmlkG4FexRHqAAAAg0"]
[Tue Nov 25 15:39:07.258574 2025] [:error] [pid 28842:tid 28993] [client 213.21.239.4:39910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/..;/.git/config"] [unique_id "aSVdG9NmoaPf6T4-6C1DBAAAA0M"]
[Tue Nov 25 15:39:07.260788 2025] [:error] [pid 28609:tid 28633] [client 213.21.239.4:39968] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/config;"] [unique_id "aSVdGyGGdT-nZJVs3x2RrAAAAY8"]
[Tue Nov 25 15:39:07.261300 2025] [:error] [pid 28609:tid 28621] [client 213.21.239.4:39872] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/..;/.git/config"] [unique_id "aSVdGyGGdT-nZJVs3x2RrQAAAYM"]
[Tue Nov 25 15:39:07.262198 2025] [:error] [pid 28739:tid 28780] [client 213.21.239.4:39938] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/git/.git/config"] [unique_id "aSVdGxxGpKmlkG4FexRHqQAAAhI"]
[Tue Nov 25 15:39:07.264203 2025] [:error] [pid 28739:tid 28781] [client 213.21.239.4:39928] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/config"] [unique_id "aSVdGxxGpKmlkG4FexRHqgAAAhM"]
[Tue Nov 25 15:39:07.264896 2025] [:error] [pid 28739:tid 28778] [client 213.21.239.4:39954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/images../.git/config"] [unique_id "aSVdGxxGpKmlkG4FexRHqwAAAhA"]
[Tue Nov 25 15:39:07.267084 2025] [:error] [pid 28842:tid 29020] [client 213.21.239.4:40010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config;.."] [unique_id "aSVdG9NmoaPf6T4-6C1DBQAAA1I"]
[Tue Nov 25 15:39:07.267173 2025] [:error] [pid 14077:tid 14112] [client 213.21.239.4:40038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/img../.git/config"] [unique_id "aSVdGxG9n7UHEkwDTygrDAAAAEI"]
[Tue Nov 25 15:39:07.270308 2025] [:error] [pid 28842:tid 28995] [client 213.21.239.4:40000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config;"] [unique_id "aSVdG9NmoaPf6T4-6C1DBgAAA0U"]
[Tue Nov 25 15:39:07.271050 2025] [:error] [pid 28739:tid 28762] [client 213.21.239.4:39896] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/config;.."] [unique_id "aSVdGxxGpKmlkG4FexRHrAAAAgA"]
[Tue Nov 25 15:39:07.271088 2025] [:error] [pid 14168:tid 14175] [client 213.21.239.4:39924] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/;/.git/config"] [unique_id "aSVdG_R-ZDU0QEgAIIs0tQAAAMQ"]
[Tue Nov 25 15:39:07.273284 2025] [:error] [pid 28842:tid 28997] [client 213.21.239.4:39902] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au../.git/config"] [unique_id "aSVdG9NmoaPf6T4-6C1DBwAAA0c"]
[Tue Nov 25 15:39:07.275169 2025] [:error] [pid 28842:tid 29005] [client 213.21.239.4:39990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSVdG9NmoaPf6T4-6C1DCAAAA08"]
[Tue Nov 25 15:39:07.275223 2025] [:error] [pid 2987:tid 3011] [client 213.21.239.4:39920] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSVdG8-djEt-pTzPxnxi0AAAAVY"]
[Tue Nov 25 15:39:07.278005 2025] [:error] [pid 28842:tid 29004] [client 213.21.239.4:40030] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/%0Aconfig"] [unique_id "aSVdG9NmoaPf6T4-6C1DCQAAA04"]
[Tue Nov 25 15:39:09.247398 2025] [:error] [pid 14168:tid 14180] [client 213.21.239.4:40042] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/live/.git/config"] [unique_id "aSVdHfR-ZDU0QEgAIIs0tgAAAMk"]
[Tue Nov 25 15:39:09.256431 2025] [:error] [pid 28739:tid 28767] [client 213.21.239.4:40052] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/lib../.git/config"] [unique_id "aSVdHRxGpKmlkG4FexRHrwAAAgU"]
[Tue Nov 25 15:39:09.259345 2025] [:error] [pid 2987:tid 2999] [client 213.21.239.4:40062] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/js../.git/config"] [unique_id "aSVdHc-djEt-pTzPxnxi0QAAAUo"]
[Tue Nov 25 15:39:09.263514 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:40064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/message-api/.git/config"] [unique_id "aSVdHdVXYbb0ii_rVoIFVAAAAIc"]
[Tue Nov 25 15:39:10.233701 2025] [:error] [pid 14078:tid 14143] [client 213.21.239.4:40120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/config"] [unique_id "aSVdHtVXYbb0ii_rVoIFVwAAAIY"]
[Tue Nov 25 15:39:10.234391 2025] [:error] [pid 28740:tid 28810] [client 213.21.239.4:40126] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/config;.."] [unique_id "aSVdHlppQCoYxWW6V0U6VwAAAlM"]
[Tue Nov 25 15:39:10.235232 2025] [:error] [pid 28740:tid 28791] [client 213.21.239.4:40148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/new/.git/config"] [unique_id "aSVdHlppQCoYxWW6V0U6WQAAAkA"]
[Tue Nov 25 15:39:10.235639 2025] [:error] [pid 2987:tid 2991] [client 213.21.239.4:40150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au../.git/config"] [unique_id "aSVdHs-djEt-pTzPxnxi0wAAAUI"]
[Tue Nov 25 15:39:10.237920 2025] [:error] [pid 14078:tid 14137] [client 213.21.239.4:40220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/config;"] [unique_id "aSVdHtVXYbb0ii_rVoIFWAAAAIA"]
[Tue Nov 25 15:39:10.243231 2025] [:error] [pid 14078:tid 14145] [client 213.21.239.4:40182] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/public/.git/config"] [unique_id "aSVdHtVXYbb0ii_rVoIFWQAAAIg"]
[Tue Nov 25 15:39:10.243309 2025] [:error] [pid 28740:tid 28800] [client 213.21.239.4:40096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/.git/%0Aconfig"] [unique_id "aSVdHlppQCoYxWW6V0U6WgAAAkk"]
[Tue Nov 25 15:39:10.244597 2025] [:error] [pid 2987:tid 3009] [client 213.21.239.4:40140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/m/.git/config"] [unique_id "aSVdHs-djEt-pTzPxnxi1AAAAVQ"]
[Tue Nov 25 15:39:10.246577 2025] [:error] [pid 28740:tid 28799] [client 213.21.239.4:40166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/prod/.git/config"] [unique_id "aSVdHlppQCoYxWW6V0U6WwAAAkg"]
[Tue Nov 25 15:39:10.247733 2025] [:error] [pid 28740:tid 28796] [client 213.21.239.4:40212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/static../.git/config"] [unique_id "aSVdHlppQCoYxWW6V0U6XQAAAkU"]
[Tue Nov 25 15:39:10.251231 2025] [core:error] [pid 28740:tid 28808] [client 213.21.239.4:40234] AH10244: invalid URI path (/../config)
[Tue Nov 25 15:39:10.251766 2025] [:error] [pid 28740:tid 28814] [client 213.21.239.4:40198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/qa/.git/config"] [unique_id "aSVdHlppQCoYxWW6V0U6YAAAAlc"]
[Tue Nov 25 15:39:10.252223 2025] [:error] [pid 28609:tid 28641] [client 213.21.239.4:40104] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/..;/.git/config"] [unique_id "aSVdHiGGdT-nZJVs3x2RsQAAAZc"]
[Tue Nov 25 15:39:10.254916 2025] [:error] [pid 28740:tid 28809] [client 213.21.239.4:40204] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/funnyemuart.com.au/;/.git/config"] [unique_id "aSVdHlppQCoYxWW6V0U6YQAAAlI"]
[Tue Nov 25 15:39:12.244226 2025] [:error] [pid 2987:tid 2996] [client 213.21.239.4:43686] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config;.."] [unique_id "aSVdIM-djEt-pTzPxnxi1gAAAUc"]
[Tue Nov 25 15:39:12.556901 2025] [:error] [pid 28739:tid 28765] [client 213.21.239.4:43722] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSVdIBxGpKmlkG4FexRHtAAAAgM"]
[Tue Nov 25 15:39:12.560708 2025] [:error] [pid 14076:tid 14094] [client 213.21.239.4:43718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/..;/.git/config"] [unique_id "aSVdIHsB4Gz6Qw-pvBvccAAAAA0"]
[Tue Nov 25 15:39:12.561798 2025] [:error] [pid 2987:tid 3000] [client 213.21.239.4:43708] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/../.git/config"] [unique_id "aSVdIM-djEt-pTzPxnxi2QAAAUs"]
[Tue Nov 25 15:39:12.562781 2025] [:error] [pid 28836:tid 28957] [client 213.21.239.4:43738] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config;"] [unique_id "aSVdIJwNRsoxcLQGkTeMHgAAAsI"]
[Tue Nov 25 15:39:12.563655 2025] [:error] [pid 28836:tid 29014] [client 213.21.239.4:43698] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSVdIJwNRsoxcLQGkTeMHwAAAtg"]
[Tue Nov 25 15:39:13.249335 2025] [:error] [pid 28842:tid 28993] [client 213.21.239.4:43746] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/;/.git/config"] [unique_id "aSVdIdNmoaPf6T4-6C1DDQAAA0M"]
[Tue Nov 25 15:39:13.259247 2025] [:error] [pid 14076:tid 14093] [client 213.21.239.4:43786] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/web/.git/config"] [unique_id "aSVdIXsB4Gz6Qw-pvBvccwAAAAw"]
[Tue Nov 25 15:39:13.260331 2025] [:error] [pid 28609:tid 28637] [client 213.21.239.4:43788] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSVdISGGdT-nZJVs3x2RtgAAAZM"]
[Tue Nov 25 15:39:13.261198 2025] [:error] [pid 28609:tid 28627] [client 213.21.239.4:43756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/static../.git/config"] [unique_id "aSVdISGGdT-nZJVs3x2RtwAAAYk"]
[Tue Nov 25 15:39:13.262097 2025] [:error] [pid 14078:tid 14149] [client 213.21.239.4:43770] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/uat/.git/config"] [unique_id "aSVdIdVXYbb0ii_rVoIFXQAAAIw"]
[Tue Nov 25 15:39:13.264192 2025] [:error] [pid 2987:tid 2999] [client 213.21.239.4:43810] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSVdIc-djEt-pTzPxnxi2gAAAUo"]
[Tue Nov 25 15:39:13.264310 2025] [:error] [pid 14076:tid 14101] [client 213.21.239.4:43740] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/staging/.git/config"] [unique_id "aSVdIXsB4Gz6Qw-pvBvcdAAAABQ"]
[Tue Nov 25 15:39:13.266396 2025] [:error] [pid 14077:tid 14119] [client 213.21.239.4:43766] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/static../.git/config"] [unique_id "aSVdIRG9n7UHEkwDTygrEAAAAEk"]
[Tue Nov 25 15:39:13.272134 2025] [:error] [pid 14076:tid 14097] [client 213.21.239.4:43798] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSVdIXsB4Gz6Qw-pvBvcdQAAABA"]
[Tue Nov 25 16:42:53.240612 2025] [:error] [pid 14168:tid 14179] [client 65.111.10.199:47239] [client 65.111.10.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/HEAD"] [unique_id "aSVsDfR-ZDU0QEgAIItBJgAAAMg"]
[Tue Nov 25 16:42:56.430076 2025] [:error] [pid 28842:tid 29000] [client 65.111.23.0:37957] [client 65.111.23.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aSVsENNmoaPf6T4-6C1X7gAAA0o"]
[Tue Nov 25 16:42:57.821251 2025] [:error] [pid 14077:tid 14113] [client 65.111.28.4:39371] [client 65.111.28.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.svn/wc.db"] [unique_id "aSVsERG9n7UHEkwDTyhGEQAAAEM"]
[Tue Nov 25 16:43:42.945214 2025] [:error] [pid 28842:tid 28992] [client 159.203.44.72:60663] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSVsPtNmoaPf6T4-6C1YWQAAA0I"]
[Tue Nov 25 16:43:45.820458 2025] [:error] [pid 28842:tid 29005] [client 159.203.44.72:63606] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSVsQdNmoaPf6T4-6C1YYwAAA08"]
[Tue Nov 25 17:11:12.620805 2025] [:error] [pid 14077:tid 14119] [client 159.203.44.72:52206] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSVysBG9n7UHEkwDTyhQggAAAEk"]
[Tue Nov 25 20:01:39.528033 2025] [:error] [pid 28842:tid 29003] [client 35.93.38.224:47332] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aSWao9NmoaPf6T4-6C2c8wAAA00"]
[Tue Nov 25 20:01:40.285279 2025] [:error] [pid 28842:tid 29022] [client 35.93.38.224:45326] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.local"] [unique_id "aSWapNNmoaPf6T4-6C2c9AAAA1Q"]
[Tue Nov 25 20:01:41.017971 2025] [:error] [pid 14077:tid 14124] [client 35.93.38.224:45342] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.dev"] [unique_id "aSWapRG9n7UHEkwDTyifKgAAAE4"]
[Tue Nov 25 20:01:41.759723 2025] [:error] [pid 14076:tid 14100] [client 35.93.38.224:45352] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.prod"] [unique_id "aSWapXsB4Gz6Qw-pvBsdVQAAABM"]
[Tue Nov 25 20:01:42.503085 2025] [:error] [pid 2987:tid 3009] [client 35.93.38.224:45366] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.staging"] [unique_id "aSWaps-djEt-pTzPxnypewAAAVQ"]
[Tue Nov 25 20:01:43.237419 2025] [:error] [pid 28842:tid 28993] [client 35.93.38.224:45374] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.development"] [unique_id "aSWap9NmoaPf6T4-6C2dAgAAA0M"]
[Tue Nov 25 20:01:43.974626 2025] [:error] [pid 2987:tid 2991] [client 35.93.38.224:45388] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.production"] [unique_id "aSWap8-djEt-pTzPxnypfgAAAUI"]
[Tue Nov 25 20:01:44.701496 2025] [:error] [pid 28842:tid 28994] [client 35.93.38.224:45402] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.test"] [unique_id "aSWaqNNmoaPf6T4-6C2dCgAAA0Q"]
[Tue Nov 25 20:01:45.457010 2025] [:error] [pid 28740:tid 28807] [client 35.93.38.224:45416] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.backup"] [unique_id "aSWaqVppQCoYxWW6V0WLGAAAAlA"]
[Tue Nov 25 20:01:46.192809 2025] [:error] [pid 28842:tid 29004] [client 35.93.38.224:45424] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env~"] [unique_id "aSWaqtNmoaPf6T4-6C2dDQAAA04"]
[Tue Nov 25 20:01:46.926449 2025] [:error] [pid 14077:tid 14134] [client 35.93.38.224:45430] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.sample"] [unique_id "aSWaqhG9n7UHEkwDTyifMwAAAFg"]
[Tue Nov 25 20:01:47.668979 2025] [:error] [pid 2987:tid 2997] [client 35.93.38.224:45438] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.old"] [unique_id "aSWaq8-djEt-pTzPxnypgQAAAUg"]
[Tue Nov 25 20:01:48.403070 2025] [:error] [pid 28842:tid 28993] [client 35.93.38.224:45446] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.bak"] [unique_id "aSWarNNmoaPf6T4-6C2dEAAAA0M"]
[Tue Nov 25 20:01:49.142407 2025] [:error] [pid 28740:tid 28805] [client 35.93.38.224:45462] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.save"] [unique_id "aSWarVppQCoYxWW6V0WLHQAAAk4"]
[Tue Nov 25 20:01:49.872280 2025] [:error] [pid 14168:tid 14185] [client 35.93.38.224:32796] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.orig"] [unique_id "aSWarfR-ZDU0QEgAIIts_AAAAM4"]
[Tue Nov 25 20:01:50.609307 2025] [:error] [pid 14078:tid 14150] [client 35.93.38.224:32810] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.swp"] [unique_id "aSWartVXYbb0ii_rVoJNVgAAAI0"]
[Tue Nov 25 20:01:51.346595 2025] [:error] [pid 14077:tid 14129] [client 35.93.38.224:32822] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.tmp"] [unique_id "aSWarxG9n7UHEkwDTyifPAAAAFM"]
[Tue Nov 25 20:01:52.088685 2025] [:error] [pid 28842:tid 29026] [client 35.93.38.224:32828] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env.dist"] [unique_id "aSWasNNmoaPf6T4-6C2dFAAAA1g"]
[Tue Nov 25 20:01:52.851381 2025] [:error] [pid 28609:tid 28623] [client 35.93.38.224:32830] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/admin/.env"] [unique_id "aSWasCGGdT-nZJVs3x3KLQAAAYU"]
[Tue Nov 25 20:01:53.585994 2025] [:error] [pid 14168:tid 14179] [client 35.93.38.224:32844] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/admin/.env.save"] [unique_id "aSWasfR-ZDU0QEgAIIts_gAAAMg"]
[Tue Nov 25 20:01:54.325231 2025] [:error] [pid 28842:tid 28996] [client 35.93.38.224:32854] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/admin/.env.bak"] [unique_id "aSWastNmoaPf6T4-6C2dFwAAA0Y"]
[Tue Nov 25 20:01:55.053906 2025] [:error] [pid 28740:tid 28802] [client 35.93.38.224:32868] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/admin/.env.old"] [unique_id "aSWas1ppQCoYxWW6V0WLJAAAAks"]
[Tue Nov 25 20:01:55.786448 2025] [:error] [pid 14077:tid 14126] [client 35.93.38.224:32880] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/api/.env"] [unique_id "aSWasxG9n7UHEkwDTyifRQAAAFA"]
[Tue Nov 25 20:01:56.526449 2025] [:error] [pid 14077:tid 14112] [client 35.93.38.224:32886] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/api/.env.save"] [unique_id "aSWatBG9n7UHEkwDTyifSAAAAEI"]
[Tue Nov 25 20:01:57.272915 2025] [:error] [pid 28609:tid 28618] [client 35.93.38.224:32888] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/api/.env.bak"] [unique_id "aSWatSGGdT-nZJVs3x3KMwAAAYA"]
[Tue Nov 25 20:01:58.021442 2025] [:error] [pid 14078:tid 14138] [client 35.93.38.224:32890] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/api/.env.old"] [unique_id "aSWattVXYbb0ii_rVoJNXgAAAIE"]
[Tue Nov 25 20:01:58.772008 2025] [:error] [pid 14077:tid 14123] [client 35.93.38.224:32906] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/app/.env"] [unique_id "aSWathG9n7UHEkwDTyifSgAAAE0"]
[Tue Nov 25 20:01:59.523894 2025] [:error] [pid 2987:tid 3001] [client 35.93.38.224:32920] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/app/.env.save"] [unique_id "aSWat8-djEt-pTzPxnypiQAAAUw"]
[Tue Nov 25 20:02:00.269168 2025] [:error] [pid 14168:tid 14195] [client 35.93.38.224:53128] [client 35.93.38.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/app/.env.bak"] [unique_id "aSWauPR-ZDU0QEgAIIttBQAAANg"]
[Tue Nov 25 23:17:47.159861 2025] [autoindex:error] [pid 14078:tid 14137] [client 4.189.97.65:9750] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:17:50.652252 2025] [proxy_fcgi:error] [pid 14078:tid 14147] [client 4.189.97.65:9750] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:17:52.520567 2025] [:error] [pid 14078:tid 14159] [client 4.189.97.65:9750] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSXIoNVXYbb0ii_rVoKuTgAAAJY"]
[Tue Nov 25 23:17:56.591121 2025] [:error] [pid 28609:tid 28639] [client 4.189.97.65:58214] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aSXIpCGGdT-nZJVs3x0MTQAAAZU"]
[Tue Nov 25 23:17:58.928274 2025] [:error] [pid 28836:tid 28956] [client 4.189.97.65:9737] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSXIppwNRsoxcLQGkTcEawAAAsE"]
[Tue Nov 25 23:17:59.307439 2025] [:error] [pid 28836:tid 28986] [client 4.189.97.65:9774] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSXIp5wNRsoxcLQGkTcEbQAAAs8"]
[Tue Nov 25 23:18:00.120443 2025] [:error] [pid 28739:tid 28768] [client 4.189.97.65:9748] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSXIqBxGpKmlkG4FexTQZwAAAgY"]
[Tue Nov 25 23:18:00.463580 2025] [:error] [pid 14076:tid 14102] [client 4.189.97.65:9775] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/m.php"] [unique_id "aSXIqHsB4Gz6Qw-pvBtiaQAAABU"]
[Tue Nov 25 23:18:00.759320 2025] [:error] [pid 14077:tid 14131] [client 4.189.97.65:9768] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aSXIqBG9n7UHEkwDTyjpXwAAAFU"]
[Tue Nov 25 23:18:01.245757 2025] [:error] [pid 14076:tid 14094] [client 4.189.97.65:9779] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jagoan.php"] [unique_id "aSXIqXsB4Gz6Qw-pvBtiagAAAA0"]
[Tue Nov 25 23:18:01.934504 2025] [:error] [pid 14168:tid 14190] [client 4.189.97.65:58196] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jagoan.php"] [unique_id "aSXIqfR-ZDU0QEgAIIunVAAAANM"]
[Tue Nov 25 23:18:02.362393 2025] [:error] [pid 43981:tid 43995] [client 4.189.97.65:58224] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jagoan.php"] [unique_id "aSXIqggZn97m_qh_RaGDDAAAAww"]
[Tue Nov 25 23:18:03.096309 2025] [:error] [pid 14077:tid 14111] [client 4.189.97.65:58218] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/jagoan.php"] [unique_id "aSXIqxG9n7UHEkwDTyjpYgAAAEE"]
[Tue Nov 25 23:18:03.465464 2025] [:error] [pid 14078:tid 14161] [client 4.189.97.65:9791] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/g3.php"] [unique_id "aSXIq9VXYbb0ii_rVoKuVgAAAJg"]
[Tue Nov 25 23:18:04.265871 2025] [:error] [pid 43843:tid 43855] [client 4.189.97.65:58209] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/g3.php"] [unique_id "aSXIrBhx4v3NUNdMKDMNVQAAAco"]
[Tue Nov 25 23:18:04.734793 2025] [:error] [pid 28836:tid 28955] [client 4.189.97.65:9766] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/g3.php"] [unique_id "aSXIrJwNRsoxcLQGkTcEhgAAAsA"]
[Tue Nov 25 23:18:05.340526 2025] [:error] [pid 14168:tid 14173] [client 4.189.97.65:58203] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/images/g3.php"] [unique_id "aSXIrfR-ZDU0QEgAIIunVgAAAMI"]
[Tue Nov 25 23:18:05.855580 2025] [:error] [pid 43981:tid 43992] [client 4.189.97.65:9781] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSXIrQgZn97m_qh_RaGDEgAAAwk"]
[Tue Nov 25 23:18:06.227860 2025] [:error] [pid 43981:tid 44004] [client 4.189.97.65:58215] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSXIrggZn97m_qh_RaGDEwAAAxU"]
[Tue Nov 25 23:18:06.665561 2025] [:error] [pid 28609:tid 28625] [client 4.189.97.65:58234] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSXIriGGdT-nZJVs3x0MXQAAAYc"]
[Tue Nov 25 23:18:07.180343 2025] [:error] [pid 14077:tid 14113] [client 4.189.97.65:58232] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSXIrxG9n7UHEkwDTyjpYwAAAEM"]
[Tue Nov 25 23:18:07.656839 2025] [:error] [pid 14168:tid 14188] [client 4.189.97.65:9743] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSXIr_R-ZDU0QEgAIIunWAAAANE"]
[Tue Nov 25 23:18:08.180054 2025] [:error] [pid 14078:tid 14139] [client 4.189.97.65:9740] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSXIsNVXYbb0ii_rVoKuawAAAII"]
[Tue Nov 25 23:18:08.718842 2025] [:error] [pid 28739:tid 28779] [client 4.189.97.65:9760] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSXIsBxGpKmlkG4FexTQrgAAAhE"]
[Tue Nov 25 23:18:09.416189 2025] [:error] [pid 14078:tid 14156] [client 4.189.97.65:9786] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSXIsdVXYbb0ii_rVoKubgAAAJM"]
[Tue Nov 25 23:18:10.426685 2025] [:error] [pid 43981:tid 44006] [client 4.189.97.65:9788] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSXIsggZn97m_qh_RaGDGgAAAxc"]
[Tue Nov 25 23:18:10.930517 2025] [:error] [pid 2987:tid 2996] [client 4.189.97.65:58193] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSXIss-djEt-pTzPxnznIQAAAUc"]
[Tue Nov 25 23:18:11.625763 2025] [:error] [pid 43981:tid 43994] [client 4.189.97.65:9784] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSXIswgZn97m_qh_RaGDHAAAAws"]
[Tue Nov 25 23:18:12.075307 2025] [:error] [pid 14078:tid 14146] [client 4.189.97.65:9759] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/htaccess.php"] [unique_id "aSXItNVXYbb0ii_rVoKucgAAAIk"]
[Tue Nov 25 23:18:12.618984 2025] [:error] [pid 43981:tid 43991] [client 4.189.97.65:58235] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSXItAgZn97m_qh_RaGDHwAAAwg"]
[Tue Nov 25 23:18:13.385666 2025] [:error] [pid 14077:tid 14126] [client 4.189.97.65:58237] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSXItRG9n7UHEkwDTyjpfQAAAFA"]
[Tue Nov 25 23:18:13.822456 2025] [:error] [pid 14076:tid 14081] [client 4.189.97.65:58208] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSXItXsB4Gz6Qw-pvBtigwAAAAA"]
[Tue Nov 25 23:18:14.251727 2025] [:error] [pid 28739:tid 28775] [client 4.189.97.65:58198] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/readme.php"] [unique_id "aSXIthxGpKmlkG4FexTQsgAAAg0"]
[Tue Nov 25 23:18:14.825734 2025] [:error] [pid 14077:tid 14122] [client 4.189.97.65:58238] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSXIthG9n7UHEkwDTyjphgAAAEw"]
[Tue Nov 25 23:18:15.148433 2025] [:error] [pid 28739:tid 28773] [client 4.189.97.65:57585] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSXItxxGpKmlkG4FexTQtAAAAgs"]
[Tue Nov 25 23:18:15.548276 2025] [:error] [pid 14078:tid 14152] [client 4.189.97.65:58211] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSXIt9VXYbb0ii_rVoKugAAAAI8"]
[Tue Nov 25 23:18:16.034074 2025] [:error] [pid 14077:tid 14127] [client 4.189.97.65:58177] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Cok.php"] [unique_id "aSXIuBG9n7UHEkwDTyjpjQAAAFE"]
[Tue Nov 25 23:18:16.627504 2025] [:error] [pid 14077:tid 14125] [client 4.189.97.65:58158] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSXIuBG9n7UHEkwDTyjplgAAAE8"]
[Tue Nov 25 23:18:16.989641 2025] [:error] [pid 14078:tid 14148] [client 4.189.97.65:58219] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSXIuNVXYbb0ii_rVoKukAAAAIs"]
[Tue Nov 25 23:18:17.371917 2025] [:error] [pid 14078:tid 14139] [client 4.189.97.65:9772] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSXIudVXYbb0ii_rVoKukwAAAII"]
[Tue Nov 25 23:18:17.724008 2025] [:error] [pid 14078:tid 14156] [client 4.189.97.65:58183] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/hob.php"] [unique_id "aSXIudVXYbb0ii_rVoKulgAAAJM"]
[Tue Nov 25 23:18:18.168421 2025] [:error] [pid 28739:tid 28762] [client 4.189.97.65:58207] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSXIuhxGpKmlkG4FexTQuAAAAgA"]
[Tue Nov 25 23:18:18.706698 2025] [:error] [pid 14077:tid 14125] [client 4.189.97.65:58185] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSXIuhG9n7UHEkwDTyjpqwAAAE8"]
[Tue Nov 25 23:18:19.103723 2025] [:error] [pid 28739:tid 28786] [client 4.189.97.65:9762] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSXIuxxGpKmlkG4FexTQwQAAAhg"]
[Tue Nov 25 23:18:19.705527 2025] [:error] [pid 14078:tid 14161] [client 4.189.97.65:58227] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kal.php"] [unique_id "aSXIu9VXYbb0ii_rVoKuoQAAAJg"]
[Tue Nov 25 23:18:20.051989 2025] [:error] [pid 14076:tid 14095] [client 4.189.97.65:9753] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSXIvHsB4Gz6Qw-pvBtikgAAAA4"]
[Tue Nov 25 23:18:20.419110 2025] [:error] [pid 14076:tid 14105] [client 4.189.97.65:58116] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSXIvHsB4Gz6Qw-pvBtilAAAABg"]
[Tue Nov 25 23:18:20.708668 2025] [:error] [pid 28609:tid 28636] [client 4.189.97.65:9752] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSXIvCGGdT-nZJVs3x0MbwAAAZI"]
[Tue Nov 25 23:18:21.196438 2025] [:error] [pid 14076:tid 14099] [client 4.189.97.65:58153] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fv.php"] [unique_id "aSXIvXsB4Gz6Qw-pvBtilgAAABI"]
[Tue Nov 25 23:18:21.670297 2025] [:error] [pid 14168:tid 14179] [client 4.189.97.65:9776] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lx.php"] [unique_id "aSXIvfR-ZDU0QEgAIIunbgAAAMg"]
[Tue Nov 25 23:18:22.034334 2025] [:error] [pid 14078:tid 14137] [client 4.189.97.65:58113] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lx.php"] [unique_id "aSXIvtVXYbb0ii_rVoKupwAAAIA"]
[Tue Nov 25 23:18:22.821193 2025] [:error] [pid 28836:tid 28960] [client 4.189.97.65:58212] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lx.php"] [unique_id "aSXIvpwNRsoxcLQGkTcEkQAAAsU"]
[Tue Nov 25 23:18:23.559642 2025] [:error] [pid 28609:tid 28628] [client 4.189.97.65:9731] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lx.php"] [unique_id "aSXIvyGGdT-nZJVs3x0MfQAAAYo"]
[Tue Nov 25 23:18:23.994577 2025] [:error] [pid 28739:tid 28764] [client 4.189.97.65:58220] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w1w.php"] [unique_id "aSXIvxxGpKmlkG4FexTQ8wAAAgI"]
[Tue Nov 25 23:18:24.581389 2025] [:error] [pid 14078:tid 14149] [client 4.189.97.65:58213] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w1w.php"] [unique_id "aSXIwNVXYbb0ii_rVoKurwAAAIw"]
[Tue Nov 25 23:18:26.434478 2025] [:error] [pid 28609:tid 28642] [client 4.189.97.65:58200] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w1w.php"] [unique_id "aSXIwiGGdT-nZJVs3x0MgwAAAZg"]
[Tue Nov 25 23:18:26.973266 2025] [:error] [pid 14168:tid 14190] [client 4.189.97.65:58169] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w1w.php"] [unique_id "aSXIwvR-ZDU0QEgAIIuncAAAANM"]
[Tue Nov 25 23:18:27.399616 2025] [:error] [pid 14077:tid 14118] [client 4.189.97.65:57587] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Contrller.php"] [unique_id "aSXIwxG9n7UHEkwDTyjptwAAAEg"]
[Tue Nov 25 23:18:27.806102 2025] [:error] [pid 14077:tid 14122] [client 4.189.97.65:9745] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Contrller.php"] [unique_id "aSXIwxG9n7UHEkwDTyjpuAAAAEw"]
[Tue Nov 25 23:18:28.077840 2025] [:error] [pid 28836:tid 28966] [client 4.189.97.65:58202] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Contrller.php"] [unique_id "aSXIxJwNRsoxcLQGkTcElQAAAss"]
[Tue Nov 25 23:18:28.595761 2025] [:error] [pid 28609:tid 28638] [client 4.189.97.65:57549] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/Contrller.php"] [unique_id "aSXIxCGGdT-nZJVs3x0MhQAAAZQ"]
[Tue Nov 25 23:18:29.534547 2025] [:error] [pid 2987:tid 3010] [client 4.189.97.65:57565] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cafe.php"] [unique_id "aSXIxc-djEt-pTzPxnznKAAAAVU"]
[Tue Nov 25 23:18:30.010439 2025] [:error] [pid 14077:tid 14117] [client 4.189.97.65:9782] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cafe.php"] [unique_id "aSXIxhG9n7UHEkwDTyjpuwAAAEc"]
[Tue Nov 25 23:18:30.544867 2025] [:error] [pid 14168:tid 14182] [client 4.189.97.65:58194] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cafe.php"] [unique_id "aSXIxvR-ZDU0QEgAIIundQAAAMs"]
[Tue Nov 25 23:18:31.181597 2025] [:error] [pid 43981:tid 43983] [client 4.189.97.65:58195] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cafe.php"] [unique_id "aSXIxwgZn97m_qh_RaGDKAAAAwA"]
[Tue Nov 25 23:18:31.864896 2025] [:error] [pid 14076:tid 14099] [client 4.189.97.65:57571] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww2.php"] [unique_id "aSXIx3sB4Gz6Qw-pvBtinwAAABI"]
[Tue Nov 25 23:18:32.654488 2025] [:error] [pid 14077:tid 14131] [client 4.189.97.65:58230] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww2.php"] [unique_id "aSXIyBG9n7UHEkwDTyjpvwAAAFU"]
[Tue Nov 25 23:18:33.136784 2025] [:error] [pid 28836:tid 28986] [client 4.189.97.65:58155] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww2.php"] [unique_id "aSXIyZwNRsoxcLQGkTcEnAAAAs8"]
[Tue Nov 25 23:18:33.548750 2025] [:error] [pid 43843:tid 43866] [client 4.189.97.65:58187] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww2.php"] [unique_id "aSXIyRhx4v3NUNdMKDMNbwAAAdU"]
[Tue Nov 25 23:18:33.945797 2025] [:error] [pid 2987:tid 2999] [client 4.189.97.65:58206] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww3.php"] [unique_id "aSXIyc-djEt-pTzPxnznLAAAAUo"]
[Tue Nov 25 23:18:34.863256 2025] [:error] [pid 28739:tid 28767] [client 4.189.97.65:58222] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww3.php"] [unique_id "aSXIyhxGpKmlkG4FexTRBgAAAgU"]
[Tue Nov 25 23:18:35.582419 2025] [:error] [pid 14077:tid 14133] [client 4.189.97.65:58186] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww3.php"] [unique_id "aSXIyxG9n7UHEkwDTyjpwwAAAFc"]
[Tue Nov 25 23:18:36.066520 2025] [:error] [pid 28836:tid 28955] [client 4.189.97.65:57532] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww3.php"] [unique_id "aSXIzJwNRsoxcLQGkTcEngAAAsA"]
[Tue Nov 25 23:18:36.450874 2025] [:error] [pid 14078:tid 14140] [client 4.189.97.65:9756] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww4.php"] [unique_id "aSXIzNVXYbb0ii_rVoKuwQAAAIM"]
[Tue Nov 25 23:18:36.826979 2025] [:error] [pid 14077:tid 14119] [client 4.189.97.65:58167] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww4.php"] [unique_id "aSXIzBG9n7UHEkwDTyjpxAAAAEk"]
[Tue Nov 25 23:18:37.275732 2025] [:error] [pid 14168:tid 14177] [client 4.189.97.65:58180] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww4.php"] [unique_id "aSXIzfR-ZDU0QEgAIIunfgAAAMY"]
[Tue Nov 25 23:18:37.771387 2025] [:error] [pid 28739:tid 28786] [client 4.189.97.65:58131] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww4.php"] [unique_id "aSXIzRxGpKmlkG4FexTRCgAAAhg"]
[Tue Nov 25 23:18:38.363640 2025] [:error] [pid 14077:tid 14122] [client 4.189.97.65:58190] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/as.php"] [unique_id "aSXIzhG9n7UHEkwDTyjpyQAAAEw"]
[Tue Nov 25 23:18:38.925446 2025] [:error] [pid 14077:tid 14112] [client 4.189.97.65:58128] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/as.php"] [unique_id "aSXIzhG9n7UHEkwDTyjpygAAAEI"]
[Tue Nov 25 23:18:39.734179 2025] [:error] [pid 2987:tid 3005] [client 4.189.97.65:57503] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/as.php"] [unique_id "aSXIz8-djEt-pTzPxnznLQAAAVA"]
[Tue Nov 25 23:18:40.116518 2025] [:error] [pid 2987:tid 3013] [client 4.189.97.65:58217] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/as.php"] [unique_id "aSXI0M-djEt-pTzPxnznLgAAAVg"]
[Tue Nov 25 23:18:40.567766 2025] [:error] [pid 43843:tid 43869] [client 4.189.97.65:9754] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wsd.php"] [unique_id "aSXI0Bhx4v3NUNdMKDMNdgAAAdg"]
[Tue Nov 25 23:18:41.228949 2025] [:error] [pid 14076:tid 14099] [client 4.189.97.65:58156] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wsd.php"] [unique_id "aSXI0XsB4Gz6Qw-pvBtiqwAAABI"]
[Tue Nov 25 23:18:41.759869 2025] [:error] [pid 28836:tid 29010] [client 4.189.97.65:58228] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wsd.php"] [unique_id "aSXI0ZwNRsoxcLQGkTcEogAAAtQ"]
[Tue Nov 25 23:18:42.172406 2025] [:error] [pid 14076:tid 14094] [client 4.189.97.65:58160] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wsd.php"] [unique_id "aSXI0nsB4Gz6Qw-pvBtirQAAAA0"]
[Tue Nov 25 23:18:42.644208 2025] [:error] [pid 14076:tid 14082] [client 4.189.97.65:9730] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSXI0nsB4Gz6Qw-pvBtisAAAAAE"]
[Tue Nov 25 23:18:43.075351 2025] [:error] [pid 28609:tid 28639] [client 4.189.97.65:58223] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSXI0yGGdT-nZJVs3x0MkAAAAZU"]
[Tue Nov 25 23:18:43.570767 2025] [:error] [pid 14078:tid 14157] [client 4.189.97.65:58112] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSXI09VXYbb0ii_rVoKuxQAAAJQ"]
[Tue Nov 25 23:18:44.127295 2025] [:error] [pid 43843:tid 43851] [client 4.189.97.65:9761] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/403.php"] [unique_id "aSXI1Bhx4v3NUNdMKDMNeQAAAcY"]
[Tue Nov 25 23:18:44.678771 2025] [:error] [pid 2987:tid 2998] [client 4.189.97.65:58229] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/max.php"] [unique_id "aSXI1M-djEt-pTzPxnznMwAAAUk"]
[Tue Nov 25 23:18:45.009122 2025] [:error] [pid 43843:tid 43863] [client 4.189.97.65:58231] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/max.php"] [unique_id "aSXI1Rhx4v3NUNdMKDMNewAAAdI"]
[Tue Nov 25 23:18:45.460244 2025] [:error] [pid 14076:tid 14085] [client 4.189.97.65:9777] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/max.php"] [unique_id "aSXI1XsB4Gz6Qw-pvBtitAAAAAQ"]
[Tue Nov 25 23:18:45.961784 2025] [:error] [pid 14078:tid 14137] [client 4.189.97.65:58221] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/max.php"] [unique_id "aSXI1dVXYbb0ii_rVoKuygAAAIA"]
[Tue Nov 25 23:18:46.294047 2025] [:error] [pid 28739:tid 28763] [client 4.189.97.65:58147] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSXI1hxGpKmlkG4FexTREQAAAgE"]
[Tue Nov 25 23:18:46.918891 2025] [:error] [pid 14076:tid 14104] [client 4.189.97.65:58216] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSXI1nsB4Gz6Qw-pvBtitgAAABc"]
[Tue Nov 25 23:18:47.371490 2025] [:error] [pid 14076:tid 14091] [client 4.189.97.65:9738] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSXI13sB4Gz6Qw-pvBtitwAAAAo"]
[Tue Nov 25 23:18:47.763594 2025] [:error] [pid 28836:tid 28960] [client 4.189.97.65:57540] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/m.php"] [unique_id "aSXI15wNRsoxcLQGkTcEpAAAAsU"]
[Tue Nov 25 23:18:48.226646 2025] [:error] [pid 14076:tid 14082] [client 4.189.97.65:57537] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/post.php"] [unique_id "aSXI2HsB4Gz6Qw-pvBtiuQAAAAE"]
[Tue Nov 25 23:18:48.770818 2025] [:error] [pid 2987:tid 2995] [client 4.189.97.65:58210] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/post.php"] [unique_id "aSXI2M-djEt-pTzPxnznNQAAAUY"]
[Tue Nov 25 23:18:49.390759 2025] [:error] [pid 28739:tid 28779] [client 4.189.97.65:58115] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/post.php"] [unique_id "aSXI2RxGpKmlkG4FexTRFgAAAhE"]
[Tue Nov 25 23:18:49.807864 2025] [:error] [pid 43843:tid 43852] [client 4.189.97.65:58159] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/post.php"] [unique_id "aSXI2Rhx4v3NUNdMKDMNfwAAAcc"]
[Tue Nov 25 23:18:50.406960 2025] [:error] [pid 28836:tid 29006] [client 4.189.97.65:58226] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSXI2pwNRsoxcLQGkTcEpwAAAtA"]
[Tue Nov 25 23:18:50.876637 2025] [:error] [pid 28609:tid 28623] [client 4.189.97.65:58121] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSXI2iGGdT-nZJVs3x0MmAAAAYU"]
[Tue Nov 25 23:18:51.236568 2025] [:error] [pid 14168:tid 14176] [client 4.189.97.65:58171] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSXI2_R-ZDU0QEgAIIunigAAAMU"]
[Tue Nov 25 23:18:51.701051 2025] [:error] [pid 28739:tid 28783] [client 4.189.97.65:58175] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes.php"] [unique_id "aSXI2xxGpKmlkG4FexTRGwAAAhU"]
[Tue Nov 25 23:18:52.225665 2025] [:error] [pid 14077:tid 14112] [client 4.189.97.65:58164] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSXI3BG9n7UHEkwDTyjp0wAAAEI"]
[Tue Nov 25 23:18:52.586130 2025] [:error] [pid 14077:tid 14110] [client 4.189.97.65:58136] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSXI3BG9n7UHEkwDTyjp1gAAAEA"]
[Tue Nov 25 23:18:53.397397 2025] [:error] [pid 14078:tid 14141] [client 4.189.97.65:58119] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSXI3dVXYbb0ii_rVoKu1QAAAIQ"]
[Tue Nov 25 23:18:53.921162 2025] [:error] [pid 14077:tid 14131] [client 4.189.97.65:57588] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSXI3RG9n7UHEkwDTyjp3AAAAFU"]
[Tue Nov 25 23:18:54.398034 2025] [:error] [pid 2987:tid 2991] [client 4.189.97.65:58114] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSXI3s-djEt-pTzPxnznOQAAAUI"]
[Tue Nov 25 23:18:54.898881 2025] [:error] [pid 28836:tid 28965] [client 4.189.97.65:9729] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSXI3pwNRsoxcLQGkTcEqwAAAso"]
[Tue Nov 25 23:18:55.450134 2025] [:error] [pid 28739:tid 28771] [client 4.189.97.65:57480] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSXI3xxGpKmlkG4FexTRHwAAAgk"]
[Tue Nov 25 23:18:56.128973 2025] [:error] [pid 28739:tid 28765] [client 4.189.97.65:58236] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSXI4BxGpKmlkG4FexTRIAAAAgM"]
[Tue Nov 25 23:18:56.625940 2025] [:error] [pid 14078:tid 14155] [client 4.189.97.65:58135] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXI4NVXYbb0ii_rVoKu2gAAAJI"]
[Tue Nov 25 23:19:18.697688 2025] [:error] [pid 28609:tid 28631] [client 4.189.97.65:58120] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSXI9iGGdT-nZJVs3x0MtAAAAY0"]
[Tue Nov 25 23:19:19.328879 2025] [:error] [pid 43843:tid 43848] [client 4.189.97.65:57594] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSXI9xhx4v3NUNdMKDMNpAAAAcM"]
[Tue Nov 25 23:19:20.156493 2025] [:error] [pid 2987:tid 3009] [client 4.189.97.65:58126] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSXI-M-djEt-pTzPxnznVwAAAVQ"]
[Tue Nov 25 23:19:20.893684 2025] [:error] [pid 28609:tid 28622] [client 4.189.97.65:9746] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bs1.php"] [unique_id "aSXI-CGGdT-nZJVs3x0MtwAAAYQ"]
[Tue Nov 25 23:19:22.089017 2025] [:error] [pid 14076:tid 14081] [client 4.189.97.65:58117] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSXI-nsB4Gz6Qw-pvBti9AAAAAA"]
[Tue Nov 25 23:19:23.144636 2025] [:error] [pid 2987:tid 2994] [client 4.189.97.65:58204] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSXI-8-djEt-pTzPxnznWQAAAUU"]
[Tue Nov 25 23:19:23.945733 2025] [:error] [pid 14076:tid 14090] [client 4.189.97.65:58148] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSXI-3sB4Gz6Qw-pvBti9QAAAAk"]
[Tue Nov 25 23:19:24.593499 2025] [:error] [pid 28836:tid 29008] [client 4.189.97.65:58137] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSXI_JwNRsoxcLQGkTcExQAAAtI"]
[Tue Nov 25 23:19:25.561319 2025] [:error] [pid 14077:tid 14120] [client 4.189.97.65:58205] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/termps.php"] [unique_id "aSXI_RG9n7UHEkwDTyjqEQAAAEo"]
[Tue Nov 25 23:19:26.154132 2025] [:error] [pid 14077:tid 14117] [client 4.189.97.65:9780] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSXI_hG9n7UHEkwDTyjqFAAAAEc"]
[Tue Nov 25 23:19:27.231683 2025] [:error] [pid 14168:tid 14191] [client 4.189.97.65:58233] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSXI__R-ZDU0QEgAIIunmgAAANQ"]
[Tue Nov 25 23:19:28.176853 2025] [:error] [pid 28609:tid 28642] [client 4.189.97.65:57557] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSXJACGGdT-nZJVs3x0MuwAAAZg"]
[Tue Nov 25 23:19:28.994291 2025] [:error] [pid 28739:tid 28762] [client 4.189.97.65:57484] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/co.php"] [unique_id "aSXJABxGpKmlkG4FexTRSwAAAgA"]
[Tue Nov 25 23:19:29.493322 2025] [:error] [pid 28739:tid 28768] [client 4.189.97.65:58188] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSXJARxGpKmlkG4FexTRTAAAAgY"]
[Tue Nov 25 23:19:30.103136 2025] [:error] [pid 14076:tid 14098] [client 4.189.97.65:58225] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSXJAnsB4Gz6Qw-pvBti-wAAABE"]
[Tue Nov 25 23:19:31.238337 2025] [:error] [pid 28609:tid 28627] [client 4.189.97.65:57489] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSXJAyGGdT-nZJVs3x0MwAAAAYk"]
[Tue Nov 25 23:19:31.748175 2025] [:error] [pid 28609:tid 28621] [client 4.189.97.65:58140] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/cong.php"] [unique_id "aSXJAyGGdT-nZJVs3x0MwQAAAYM"]
[Tue Nov 25 23:19:32.589625 2025] [:error] [pid 14077:tid 14111] [client 4.189.97.65:57574] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aSXJBBG9n7UHEkwDTyjqFwAAAEE"]
[Tue Nov 25 23:19:33.044419 2025] [:error] [pid 14077:tid 14125] [client 4.189.97.65:57516] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aSXJBRG9n7UHEkwDTyjqGgAAAE8"]
[Tue Nov 25 23:19:33.990603 2025] [:error] [pid 14077:tid 14117] [client 4.189.97.65:58197] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aSXJBRG9n7UHEkwDTyjqIAAAAEc"]
[Tue Nov 25 23:19:35.010503 2025] [:error] [pid 2987:tid 3001] [client 4.189.97.65:58192] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/atomlib.php"] [unique_id "aSXJB8-djEt-pTzPxnznXwAAAUw"]
[Tue Nov 25 23:19:35.467503 2025] [:error] [pid 43843:tid 43865] [client 4.189.97.65:9739] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w.php"] [unique_id "aSXJBxhx4v3NUNdMKDMNqwAAAdQ"]
[Tue Nov 25 23:19:36.028906 2025] [:error] [pid 28609:tid 28632] [client 4.189.97.65:58141] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w.php"] [unique_id "aSXJCCGGdT-nZJVs3x0MyQAAAY4"]
[Tue Nov 25 23:19:36.546693 2025] [:error] [pid 2987:tid 3006] [client 4.189.97.65:57538] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w.php"] [unique_id "aSXJCM-djEt-pTzPxnznZAAAAVE"]
[Tue Nov 25 23:19:38.558625 2025] [:error] [pid 14078:tid 14143] [client 4.189.97.65:9773] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/w.php"] [unique_id "aSXJCtVXYbb0ii_rVoKvOgAAAIY"]
[Tue Nov 25 23:19:39.030563 2025] [:error] [pid 28609:tid 28626] [client 4.189.97.65:57573] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJCyGGdT-nZJVs3x0MzAAAAYg"]
[Tue Nov 25 23:19:40.195215 2025] [:error] [pid 14076:tid 14093] [client 4.189.97.65:57541] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJDHsB4Gz6Qw-pvBtjAgAAAAw"]
[Tue Nov 25 23:19:41.515294 2025] [:error] [pid 14168:tid 14191] [client 4.189.97.65:57527] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJDfR-ZDU0QEgAIIunpAAAANQ"]
[Tue Nov 25 23:19:42.205135 2025] [:error] [pid 14078:tid 14156] [client 4.189.97.65:58178] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJDtVXYbb0ii_rVoKvRAAAAJM"]
[Tue Nov 25 23:19:44.299306 2025] [:error] [pid 28609:tid 28620] [client 4.189.97.65:58151] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXJECGGdT-nZJVs3x0M7wAAAYI"]
[Tue Nov 25 23:19:45.004631 2025] [:error] [pid 14078:tid 14143] [client 4.189.97.65:58125] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXJEdVXYbb0ii_rVoKvSgAAAIY"]
[Tue Nov 25 23:19:46.180357 2025] [:error] [pid 28739:tid 28778] [client 4.189.97.65:57584] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXJEhxGpKmlkG4FexTRcAAAAhA"]
[Tue Nov 25 23:19:46.670496 2025] [:error] [pid 14077:tid 14113] [client 4.189.97.65:9732] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ioxi-o.php"] [unique_id "aSXJEhG9n7UHEkwDTyjqPQAAAEM"]
[Tue Nov 25 23:19:47.374884 2025] [:error] [pid 28609:tid 28631] [client 4.189.97.65:9735] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/product.php"] [unique_id "aSXJEyGGdT-nZJVs3x0M8QAAAY0"]
[Tue Nov 25 23:19:48.148491 2025] [:error] [pid 14076:tid 14104] [client 4.189.97.65:9749] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/product.php"] [unique_id "aSXJFHsB4Gz6Qw-pvBtjCQAAABc"]
[Tue Nov 25 23:19:49.405271 2025] [:error] [pid 43981:tid 43997] [client 4.189.97.65:58199] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/product.php"] [unique_id "aSXJFQgZn97m_qh_RaGDQwAAAw4"]
[Tue Nov 25 23:19:50.283456 2025] [:error] [pid 14078:tid 14156] [client 4.189.97.65:58161] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/product.php"] [unique_id "aSXJFtVXYbb0ii_rVoKvUAAAAJM"]
[Tue Nov 25 23:19:51.723218 2025] [:error] [pid 14078:tid 14142] [client 4.189.97.65:58166] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/function.php"] [unique_id "aSXJF9VXYbb0ii_rVoKvUwAAAIU"]
[Tue Nov 25 23:19:52.637881 2025] [:error] [pid 28739:tid 28780] [client 4.189.97.65:56896] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/function.php"] [unique_id "aSXJGBxGpKmlkG4FexTRjAAAAhI"]
[Tue Nov 25 23:19:53.673401 2025] [:error] [pid 2987:tid 3008] [client 4.189.97.65:58152] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/function.php"] [unique_id "aSXJGc-djEt-pTzPxnzndAAAAVM"]
[Tue Nov 25 23:19:55.249126 2025] [:error] [pid 28739:tid 28781] [client 4.189.97.65:58239] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/function.php"] [unique_id "aSXJGxxGpKmlkG4FexTRngAAAhM"]
[Tue Nov 25 23:19:56.879888 2025] [:error] [pid 28836:tid 29006] [client 4.189.97.65:9785] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSXJHJwNRsoxcLQGkTcE0QAAAtA"]
[Tue Nov 25 23:19:58.545904 2025] [:error] [pid 2987:tid 2996] [client 4.189.97.65:9765] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSXJHs-djEt-pTzPxnzneAAAAUc"]
[Tue Nov 25 23:20:00.759423 2025] [:error] [pid 43843:tid 43846] [client 4.189.97.65:58168] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSXJIBhx4v3NUNdMKDMNwAAAAcE"]
[Tue Nov 25 23:20:01.968807 2025] [:error] [pid 14077:tid 14127] [client 4.189.97.65:58150] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/0x.php"] [unique_id "aSXJIRG9n7UHEkwDTyjqRQAAAFE"]
[Tue Nov 25 23:20:03.698418 2025] [:error] [pid 14077:tid 14110] [client 4.189.97.65:57566] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSXJIxG9n7UHEkwDTyjqRgAAAEA"]
[Tue Nov 25 23:20:05.376458 2025] [:error] [pid 14078:tid 14156] [client 4.189.97.65:57474] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSXJJdVXYbb0ii_rVoKvYQAAAJM"]
[Tue Nov 25 23:20:06.072475 2025] [:error] [pid 2987:tid 3011] [client 4.189.97.65:58143] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSXJJs-djEt-pTzPxnznhQAAAVY"]
[Tue Nov 25 23:20:07.018216 2025] [:error] [pid 14076:tid 14099] [client 4.189.97.65:57510] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css.php"] [unique_id "aSXJJ3sB4Gz6Qw-pvBtjIAAAABI"]
[Tue Nov 25 23:20:08.000745 2025] [:error] [pid 2987:tid 2996] [client 4.189.97.65:9764] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSXJJ8-djEt-pTzPxnznhwAAAUc"]
[Tue Nov 25 23:20:09.187800 2025] [:error] [pid 14078:tid 14144] [client 4.189.97.65:58176] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSXJKdVXYbb0ii_rVoKvZgAAAIc"]
[Tue Nov 25 23:20:10.176763 2025] [:error] [pid 14168:tid 14175] [client 4.189.97.65:57504] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSXJKvR-ZDU0QEgAIIunsgAAAMQ"]
[Tue Nov 25 23:20:11.176723 2025] [:error] [pid 28836:tid 29014] [client 4.189.97.65:56860] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/222.php"] [unique_id "aSXJK5wNRsoxcLQGkTcE1QAAAtg"]
[Tue Nov 25 23:20:11.980494 2025] [:error] [pid 28609:tid 28635] [client 4.189.97.65:58172] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXJKyGGdT-nZJVs3x0M_gAAAZE"]
[Tue Nov 25 23:20:13.268194 2025] [:error] [pid 28836:tid 28963] [client 4.189.97.65:57575] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXJLZwNRsoxcLQGkTcE1wAAAsg"]
[Tue Nov 25 23:20:15.731728 2025] [:error] [pid 28739:tid 28774] [client 4.189.97.65:57560] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/index.php"] [unique_id "aSXJLxxGpKmlkG4FexTR7QAAAgw"]
[Tue Nov 25 23:20:39.635066 2025] [:error] [pid 14076:tid 14102] [client 4.189.97.65:57539] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSXJR3sB4Gz6Qw-pvBtjkQAAABU"]
[Tue Nov 25 23:20:40.500802 2025] [:error] [pid 43981:tid 44007] [client 4.189.97.65:9747] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSXJSAgZn97m_qh_RaGDfAAAAxg"]
[Tue Nov 25 23:20:41.173513 2025] [:error] [pid 28739:tid 28776] [client 4.189.97.65:58165] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSXJSRxGpKmlkG4FexTSCQAAAg4"]
[Tue Nov 25 23:20:41.884681 2025] [:error] [pid 14168:tid 14171] [client 4.189.97.65:56910] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/default.php"] [unique_id "aSXJSfR-ZDU0QEgAIIun2wAAAMA"]
[Tue Nov 25 23:20:42.780580 2025] [:error] [pid 14168:tid 14188] [client 4.189.97.65:57551] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSXJSvR-ZDU0QEgAIIun4AAAANE"]
[Tue Nov 25 23:20:43.596431 2025] [:error] [pid 2987:tid 3002] [client 4.189.97.65:58123] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSXJS8-djEt-pTzPxnznrQAAAU0"]
[Tue Nov 25 23:20:44.574730 2025] [:error] [pid 14168:tid 14194] [client 4.189.97.65:58154] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSXJTPR-ZDU0QEgAIIun5wAAANc"]
[Tue Nov 25 23:20:45.604014 2025] [:error] [pid 14076:tid 14092] [client 4.189.97.65:57542] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/fm.php"] [unique_id "aSXJTXsB4Gz6Qw-pvBtjngAAAAs"]
[Tue Nov 25 23:20:46.711301 2025] [:error] [pid 14076:tid 14102] [client 4.189.97.65:58129] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aSXJTnsB4Gz6Qw-pvBtjoAAAABU"]
[Tue Nov 25 23:20:47.374721 2025] [:error] [pid 14078:tid 14159] [client 4.189.97.65:57496] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aSXJT9VXYbb0ii_rVoKvlAAAAJY"]
[Tue Nov 25 23:20:48.212151 2025] [:error] [pid 14078:tid 14150] [client 4.189.97.65:57519] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aSXJUNVXYbb0ii_rVoKvlQAAAI0"]
[Tue Nov 25 23:20:49.037074 2025] [:error] [pid 28836:tid 28962] [client 4.189.97.65:57475] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about.php"] [unique_id "aSXJUZwNRsoxcLQGkTcE8AAAAsc"]
[Tue Nov 25 23:20:51.345012 2025] [:error] [pid 28739:tid 28774] [client 4.189.97.65:57552] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSXJUxxGpKmlkG4FexTSHQAAAgw"]
[Tue Nov 25 23:20:52.559247 2025] [:error] [pid 43981:tid 43993] [client 4.189.97.65:9770] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSXJVAgZn97m_qh_RaGDkAAAAwo"]
[Tue Nov 25 23:20:53.396289 2025] [:error] [pid 28836:tid 29010] [client 4.189.97.65:58146] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSXJVZwNRsoxcLQGkTcE8QAAAtQ"]
[Tue Nov 25 23:20:54.114463 2025] [:error] [pid 14168:tid 14184] [client 4.189.97.65:9751] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/alfa.php"] [unique_id "aSXJVvR-ZDU0QEgAIIun6gAAAM0"]
[Tue Nov 25 23:20:55.855972 2025] [:error] [pid 28609:tid 28624] [client 4.189.97.65:58130] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/buy.php"] [unique_id "aSXJVyGGdT-nZJVs3x0NFQAAAYY"]
[Tue Nov 25 23:20:57.148676 2025] [:error] [pid 43843:tid 43861] [client 4.189.97.65:56918] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/buy.php"] [unique_id "aSXJWRhx4v3NUNdMKDMN3gAAAdA"]
[Tue Nov 25 23:20:57.761248 2025] [:error] [pid 14168:tid 14184] [client 4.189.97.65:9787] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/buy.php"] [unique_id "aSXJWfR-ZDU0QEgAIIun_gAAAM0"]
[Tue Nov 25 23:20:58.799874 2025] [:error] [pid 28739:tid 28765] [client 4.189.97.65:56866] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/buy.php"] [unique_id "aSXJWhxGpKmlkG4FexTSKwAAAgM"]
[Tue Nov 25 23:21:00.249295 2025] [:error] [pid 2987:tid 3002] [client 4.189.97.65:57553] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXJXM-djEt-pTzPxnznzgAAAU0"]
[Tue Nov 25 23:21:01.583794 2025] [:error] [pid 43981:tid 44003] [client 4.189.97.65:58145] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXJXQgZn97m_qh_RaGDlQAAAxQ"]
[Tue Nov 25 23:21:02.854921 2025] [:error] [pid 28609:tid 28634] [client 4.189.97.65:57595] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXJXiGGdT-nZJVs3x0NGwAAAZA"]
[Tue Nov 25 23:21:04.563797 2025] [:error] [pid 2987:tid 2997] [client 4.189.97.65:57597] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSXJYM-djEt-pTzPxnzn1wAAAUg"]
[Tue Nov 25 23:21:05.021212 2025] [:error] [pid 14078:tid 14137] [client 4.189.97.65:57593] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSXJYdVXYbb0ii_rVoKvrAAAAIA"]
[Tue Nov 25 23:21:06.582596 2025] [:error] [pid 14078:tid 14157] [client 4.189.97.65:57545] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSXJYtVXYbb0ii_rVoKvswAAAJQ"]
[Tue Nov 25 23:21:07.796627 2025] [:error] [pid 14078:tid 14161] [client 4.189.97.65:57520] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSXJY9VXYbb0ii_rVoKvugAAAJg"]
[Tue Nov 25 23:21:08.771487 2025] [:error] [pid 28739:tid 28766] [client 4.189.97.65:58118] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSXJZBxGpKmlkG4FexTSMAAAAgQ"]
[Tue Nov 25 23:21:09.590516 2025] [:error] [pid 14078:tid 14150] [client 4.189.97.65:57544] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSXJZdVXYbb0ii_rVoKvwAAAAI0"]
[Tue Nov 25 23:21:10.202530 2025] [:error] [pid 28609:tid 28642] [client 4.189.97.65:57556] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSXJZiGGdT-nZJVs3x0NHwAAAZg"]
[Tue Nov 25 23:21:10.994666 2025] [:error] [pid 43981:tid 43992] [client 4.189.97.65:57562] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSXJZggZn97m_qh_RaGDmAAAAwk"]
[Tue Nov 25 23:21:12.290072 2025] [:error] [pid 43843:tid 43855] [client 4.189.97.65:57581] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSXJaBhx4v3NUNdMKDMN9wAAAco"]
[Tue Nov 25 23:21:13.013291 2025] [:error] [pid 2987:tid 3008] [client 4.189.97.65:57487] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXJac-djEt-pTzPxnzn3QAAAVM"]
[Tue Nov 25 23:21:13.876852 2025] [:error] [pid 43981:tid 44004] [client 4.189.97.65:57483] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXJaQgZn97m_qh_RaGDmQAAAxU"]
[Tue Nov 25 23:21:15.312632 2025] [:error] [pid 43843:tid 43856] [client 4.189.97.65:57546] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXJaxhx4v3NUNdMKDMN-wAAAcs"]
[Tue Nov 25 23:21:16.575759 2025] [:error] [pid 28739:tid 28768] [client 4.189.97.65:9790] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSXJbBxGpKmlkG4FexTSNgAAAgY"]
[Tue Nov 25 23:21:17.727776 2025] [:error] [pid 28739:tid 28785] [client 4.189.97.65:57579] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/manager.php"] [unique_id "aSXJbRxGpKmlkG4FexTSOAAAAhc"]
[Tue Nov 25 23:21:18.705501 2025] [:error] [pid 28739:tid 28769] [client 4.189.97.65:56920] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/manager.php"] [unique_id "aSXJbhxGpKmlkG4FexTSOgAAAgc"]
[Tue Nov 25 23:21:19.266185 2025] [:error] [pid 28739:tid 28766] [client 4.189.97.65:9771] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/manager.php"] [unique_id "aSXJbxxGpKmlkG4FexTSPAAAAgQ"]
[Tue Nov 25 23:21:19.652994 2025] [:error] [pid 28739:tid 28763] [client 4.189.97.65:58138] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/manager.php"] [unique_id "aSXJbxxGpKmlkG4FexTSPwAAAgE"]
[Tue Nov 25 23:21:20.341128 2025] [:error] [pid 14076:tid 14094] [client 4.189.97.65:57567] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js/fm.php"] [unique_id "aSXJcHsB4Gz6Qw-pvBtjuAAAAA0"]
[Tue Nov 25 23:21:20.946391 2025] [:error] [pid 43981:tid 44005] [client 4.189.97.65:57514] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js/fm.php"] [unique_id "aSXJcAgZn97m_qh_RaGDoAAAAxY"]
[Tue Nov 25 23:21:21.484525 2025] [:error] [pid 14076:tid 14082] [client 4.189.97.65:57582] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js/fm.php"] [unique_id "aSXJcXsB4Gz6Qw-pvBtjvAAAAAE"]
[Tue Nov 25 23:21:22.012796 2025] [:error] [pid 14076:tid 14097] [client 4.189.97.65:57472] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/js/fm.php"] [unique_id "aSXJcnsB4Gz6Qw-pvBtjvgAAABA"]
[Tue Nov 25 23:21:23.217019 2025] [:error] [pid 28739:tid 28775] [client 4.189.97.65:58162] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/item.php"] [unique_id "aSXJcxxGpKmlkG4FexTSRAAAAg0"]
[Tue Nov 25 23:21:24.333726 2025] [:error] [pid 14168:tid 14171] [client 4.189.97.65:57578] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/item.php"] [unique_id "aSXJdPR-ZDU0QEgAIIuoBwAAAMA"]
[Tue Nov 25 23:21:25.076646 2025] [:error] [pid 43981:tid 44006] [client 4.189.97.65:57473] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/item.php"] [unique_id "aSXJdQgZn97m_qh_RaGDpAAAAxc"]
[Tue Nov 25 23:21:26.022251 2025] [:error] [pid 14078:tid 14137] [client 4.189.97.65:9758] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/item.php"] [unique_id "aSXJdtVXYbb0ii_rVoKv3gAAAIA"]
[Tue Nov 25 23:21:26.984810 2025] [:error] [pid 28739:tid 28773] [client 4.189.97.65:9736] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSXJdhxGpKmlkG4FexTSVQAAAgs"]
[Tue Nov 25 23:21:27.751298 2025] [:error] [pid 28739:tid 28766] [client 4.189.97.65:58173] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSXJdxxGpKmlkG4FexTSWAAAAgQ"]
[Tue Nov 25 23:21:29.086656 2025] [:error] [pid 28609:tid 28632] [client 4.189.97.65:56869] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSXJeSGGdT-nZJVs3x0NNQAAAY4"]
[Tue Nov 25 23:21:29.842618 2025] [:error] [pid 28836:tid 28962] [client 4.189.97.65:57478] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSXJeZwNRsoxcLQGkTcFFwAAAsc"]
[Tue Nov 25 23:21:30.421163 2025] [:error] [pid 14078:tid 14148] [client 4.189.97.65:57501] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJetVXYbb0ii_rVoKv4wAAAIs"]
[Tue Nov 25 23:21:31.224921 2025] [:error] [pid 14078:tid 14145] [client 4.189.97.65:57564] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJe9VXYbb0ii_rVoKv5gAAAIg"]
[Tue Nov 25 23:21:32.049225 2025] [:error] [pid 14078:tid 14152] [client 4.189.97.65:57598] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJfNVXYbb0ii_rVoKv6QAAAI8"]
[Tue Nov 25 23:21:33.071424 2025] [:error] [pid 28609:tid 28641] [client 4.189.97.65:56840] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/404.php"] [unique_id "aSXJfSGGdT-nZJVs3x0NOwAAAZc"]
[Tue Nov 25 23:21:34.542603 2025] [:error] [pid 14077:tid 14132] [client 4.189.97.65:9769] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSXJfhG9n7UHEkwDTyjq5wAAAFY"]
[Tue Nov 25 23:21:35.244877 2025] [:error] [pid 28739:tid 28774] [client 4.189.97.65:57500] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSXJfxxGpKmlkG4FexTSZAAAAgw"]
[Tue Nov 25 23:21:36.717807 2025] [:error] [pid 14077:tid 14123] [client 4.189.97.65:56945] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/mail.php"] [unique_id "aSXJgBG9n7UHEkwDTyjq7AAAAE0"]
[Tue Nov 25 23:21:56.744590 2025] [:error] [pid 14076:tid 14086] [client 4.189.97.65:57591] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXJlHsB4Gz6Qw-pvBtj5wAAAAU"]
[Tue Nov 25 23:21:58.034059 2025] [:error] [pid 14078:tid 14155] [client 4.189.97.65:56887] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXJltVXYbb0ii_rVoKwAAAAAJI"]
[Tue Nov 25 23:21:58.893900 2025] [:error] [pid 2987:tid 2997] [client 4.189.97.65:58191] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXJls-djEt-pTzPxnzn-QAAAUg"]
[Tue Nov 25 23:21:59.824303 2025] [:error] [pid 28739:tid 28786] [client 4.189.97.65:57536] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/index.php"] [unique_id "aSXJlxxGpKmlkG4FexTShgAAAhg"]
[Tue Nov 25 23:22:00.851947 2025] [:error] [pid 14077:tid 14115] [client 4.189.97.65:57479] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSXJmBG9n7UHEkwDTyjq-AAAAEU"]
[Tue Nov 25 23:22:02.206165 2025] [:error] [pid 43981:tid 43985] [client 4.189.97.65:57499] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSXJmggZn97m_qh_RaGDzAAAAwI"]
[Tue Nov 25 23:22:03.451518 2025] [:error] [pid 14078:tid 14142] [client 4.189.97.65:57492] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSXJm9VXYbb0ii_rVoKwBgAAAIU"]
[Tue Nov 25 23:22:04.750168 2025] [:error] [pid 14078:tid 14149] [client 4.189.97.65:57488] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSXJnNVXYbb0ii_rVoKwCgAAAIw"]
[Tue Nov 25 23:22:05.413644 2025] [:error] [pid 43981:tid 43991] [client 4.189.97.65:57561] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSXJnQgZn97m_qh_RaGD0gAAAwg"]
[Tue Nov 25 23:22:06.466908 2025] [:error] [pid 28836:tid 28955] [client 4.189.97.65:56959] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXJnpwNRsoxcLQGkTcFNAAAAsA"]
[Tue Nov 25 23:22:08.090617 2025] [:error] [pid 14076:tid 14093] [client 4.189.97.65:57547] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXJoHsB4Gz6Qw-pvBtj8AAAAAw"]
[Tue Nov 25 23:22:09.775362 2025] [:error] [pid 14078:tid 14159] [client 4.189.97.65:57524] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXJodVXYbb0ii_rVoKwFAAAAJY"]
[Tue Nov 25 23:22:11.086703 2025] [:error] [pid 14077:tid 14124] [client 4.189.97.65:57495] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSXJoxG9n7UHEkwDTyjq_gAAAE4"]
[Tue Nov 25 23:22:12.264421 2025] [:error] [pid 2987:tid 3007] [client 4.189.97.65:58181] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXJpM-djEt-pTzPxnzoAgAAAVI"]
[Tue Nov 25 23:22:13.119084 2025] [:error] [pid 28836:tid 28967] [client 4.189.97.65:56888] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXJpZwNRsoxcLQGkTcFOAAAAsw"]
[Tue Nov 25 23:22:13.867858 2025] [:error] [pid 28609:tid 28632] [client 4.189.97.65:57517] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXJpSGGdT-nZJVs3x0NcAAAAY4"]
[Tue Nov 25 23:22:14.798502 2025] [:error] [pid 14077:tid 14113] [client 4.189.97.65:57505] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSXJphG9n7UHEkwDTyjrAgAAAEM"]
[Tue Nov 25 23:22:15.292918 2025] [:error] [pid 2987:tid 2999] [client 4.189.97.65:57508] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSXJp8-djEt-pTzPxnzoBgAAAUo"]
[Tue Nov 25 23:22:16.019902 2025] [:error] [pid 14077:tid 14119] [client 4.189.97.65:58149] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSXJqBG9n7UHEkwDTyjrBAAAAEk"]
[Tue Nov 25 23:22:17.108662 2025] [:error] [pid 28609:tid 28640] [client 4.189.97.65:57481] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSXJqSGGdT-nZJVs3x0NcgAAAZY"]
[Tue Nov 25 23:22:17.677125 2025] [:error] [pid 14078:tid 14155] [client 4.189.97.65:9744] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/gmo.php"] [unique_id "aSXJqdVXYbb0ii_rVoKwHwAAAJI"]
[Tue Nov 25 23:22:18.662446 2025] [:error] [pid 28609:tid 28641] [client 4.189.97.65:58218] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSXJqiGGdT-nZJVs3x0NdAAAAZc"]
[Tue Nov 25 23:22:20.022631 2025] [:error] [pid 14078:tid 14147] [client 4.189.97.65:56949] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/index.php"] [unique_id "aSXJrNVXYbb0ii_rVoKwIwAAAIo"]
[Tue Nov 25 23:22:21.377085 2025] [:error] [pid 14076:tid 14094] [client 4.189.97.65:57558] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/index.php"] [unique_id "aSXJrXsB4Gz6Qw-pvBtj_gAAAA0"]
[Tue Nov 25 23:22:22.743655 2025] [:error] [pid 14078:tid 14150] [client 4.189.97.65:9757] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/index.php"] [unique_id "aSXJrtVXYbb0ii_rVoKwKAAAAI0"]
[Tue Nov 25 23:22:23.505282 2025] [:error] [pid 43981:tid 43989] [client 4.189.97.65:57554] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/css/index.php"] [unique_id "aSXJrwgZn97m_qh_RaGD4AAAAwY"]
[Tue Nov 25 23:22:24.122079 2025] [:error] [pid 14168:tid 14184] [client 4.189.97.65:57494] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSXJsPR-ZDU0QEgAIIuoMAAAAM0"]
[Tue Nov 25 23:22:24.684831 2025] [:error] [pid 28739:tid 28766] [client 4.189.97.65:58234] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSXJsBxGpKmlkG4FexTSlgAAAgQ"]
[Tue Nov 25 23:22:25.216262 2025] [:error] [pid 2987:tid 2996] [client 4.189.97.65:57518] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSXJsc-djEt-pTzPxnzoCwAAAUc"]
[Tue Nov 25 23:22:26.458200 2025] [:error] [pid 43843:tid 43847] [client 4.189.97.65:9791] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSXJshhx4v3NUNdMKDMOMwAAAcI"]
[Tue Nov 25 23:22:28.393626 2025] [:error] [pid 2987:tid 2989] [client 4.189.97.65:56897] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSXJtM-djEt-pTzPxnzoFQAAAUA"]
[Tue Nov 25 23:22:28.958141 2025] [:error] [pid 43843:tid 43865] [client 4.189.97.65:58182] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXJtBhx4v3NUNdMKDMONQAAAdQ"]
[Tue Nov 25 23:22:29.454475 2025] [:error] [pid 28609:tid 28628] [client 4.189.97.65:58238] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXJtSGGdT-nZJVs3x0NdwAAAYo"]
[Tue Nov 25 23:22:30.280193 2025] [:error] [pid 14168:tid 14185] [client 4.189.97.65:56854] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXJtvR-ZDU0QEgAIIuoMgAAAM4"]
[Tue Nov 25 23:22:30.837795 2025] [:error] [pid 28739:tid 28767] [client 4.189.97.65:58144] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSXJthxGpKmlkG4FexTSpAAAAgU"]
[Tue Nov 25 23:22:32.127043 2025] [:error] [pid 14168:tid 14190] [client 4.189.97.65:57493] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXJuPR-ZDU0QEgAIIuoMwAAANM"]
[Tue Nov 25 23:22:32.927560 2025] [:error] [pid 28739:tid 28770] [client 4.189.97.65:58163] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXJuBxGpKmlkG4FexTSpwAAAgg"]
[Tue Nov 25 23:22:34.940074 2025] [:error] [pid 28609:tid 28635] [client 4.189.97.65:58208] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXJuiGGdT-nZJVs3x0NfwAAAZE"]
[Tue Nov 25 23:22:36.548247 2025] [:error] [pid 28609:tid 28629] [client 4.189.97.65:58214] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSXJvCGGdT-nZJVs3x0NiAAAAYs"]
[Tue Nov 25 23:22:37.065371 2025] [:error] [pid 28609:tid 28636] [client 4.189.97.65:58237] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXJvSGGdT-nZJVs3x0NiQAAAZI"]
[Tue Nov 25 23:22:38.071502 2025] [:error] [pid 28739:tid 28772] [client 4.189.97.65:58157] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXJvhxGpKmlkG4FexTSrQAAAgo"]
[Tue Nov 25 23:22:39.058986 2025] [:error] [pid 28609:tid 28635] [client 4.189.97.65:57559] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXJvyGGdT-nZJVs3x0NjgAAAZE"]
[Tue Nov 25 23:22:40.451544 2025] [:error] [pid 28739:tid 28778] [client 4.189.97.65:9748] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSXJwBxGpKmlkG4FexTStgAAAhA"]
[Tue Nov 25 23:22:41.622142 2025] [:error] [pid 28739:tid 28783] [client 4.189.97.65:58209] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSXJwRxGpKmlkG4FexTSuAAAAhU"]
[Tue Nov 25 23:22:42.952832 2025] [:error] [pid 28739:tid 28765] [client 4.189.97.65:57590] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSXJwhxGpKmlkG4FexTSvQAAAgM"]
[Tue Nov 25 23:22:43.751156 2025] [:error] [pid 14076:tid 14085] [client 4.189.97.65:58196] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/index/function.php"] [unique_id "aSXJw3sB4Gz6Qw-pvBtkFAAAAAQ"]
[Tue Nov 25 23:22:45.200483 2025] [:error] [pid 28609:tid 28638] [client 4.189.97.65:57521] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/index/function.php"] [unique_id "aSXJxSGGdT-nZJVs3x0NpAAAAZQ"]
[Tue Nov 25 23:22:45.609039 2025] [:error] [pid 14076:tid 14096] [client 4.189.97.65:57576] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/index/function.php"] [unique_id "aSXJxXsB4Gz6Qw-pvBtkFgAAAA8"]
[Tue Nov 25 23:22:46.455634 2025] [:error] [pid 28836:tid 28967] [client 4.189.97.65:58139] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/index/function.php"] [unique_id "aSXJxpwNRsoxcLQGkTcFTgAAAsw"]
[Tue Nov 25 23:22:47.219995 2025] [:error] [pid 43843:tid 43845] [client 4.189.97.65:56905] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXJxxhx4v3NUNdMKDMOPAAAAcA"]
[Tue Nov 25 23:22:48.095292 2025] [:error] [pid 43981:tid 43992] [client 4.189.97.65:9743] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXJyAgZn97m_qh_RaGD9QAAAwk"]
[Tue Nov 25 23:22:48.702014 2025] [:error] [pid 43981:tid 44004] [client 4.189.97.65:58200] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXJyAgZn97m_qh_RaGD-AAAAxU"]
[Tue Nov 25 23:22:49.279473 2025] [:error] [pid 28836:tid 29008] [client 4.189.97.65:58193] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSXJyZwNRsoxcLQGkTcFUwAAAtI"]
[Tue Nov 25 23:22:50.453091 2025] [:error] [pid 14076:tid 14098] [client 4.189.97.65:9789] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aSXJynsB4Gz6Qw-pvBtkFwAAABE"]
[Tue Nov 25 23:22:51.000303 2025] [:error] [pid 14077:tid 14123] [client 4.189.97.65:57507] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSXJyhG9n7UHEkwDTyjrJAAAAE0"]
[Tue Nov 25 23:22:51.578045 2025] [:error] [pid 14078:tid 14142] [client 4.189.97.65:9734] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww1.php"] [unique_id "aSXJy9VXYbb0ii_rVoKwOQAAAIU"]
[Tue Nov 25 23:22:52.258120 2025] [:error] [pid 43843:tid 43869] [client 4.189.97.65:9774] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww1.php"] [unique_id "aSXJzBhx4v3NUNdMKDMORAAAAdg"]
[Tue Nov 25 23:22:54.158803 2025] [:error] [pid 28836:tid 29007] [client 4.189.97.65:58202] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww1.php"] [unique_id "aSXJzpwNRsoxcLQGkTcFWQAAAtE"]
[Tue Nov 25 23:23:01.970636 2025] [:error] [pid 28609:tid 28632] [client 4.189.97.65:9766] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSXJ1SGGdT-nZJVs3x0NyAAAAY4"]
[Tue Nov 25 23:23:04.523296 2025] [proxy_fcgi:error] [pid 14076:tid 14099] [client 4.189.97.65:58231] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 23:23:21.178090 2025] [autoindex:error] [pid 14078:tid 14157] [client 4.189.97.65:9772] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:23:23.292835 2025] [:error] [pid 14078:tid 14143] [client 4.189.97.65:9772] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSXJ69VXYbb0ii_rVoKwbwAAAIY"]
[Tue Nov 25 23:23:27.484272 2025] [autoindex:error] [pid 14168:tid 14173] [client 4.189.97.65:57587] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:23:31.330210 2025] [:error] [pid 14168:tid 14176] [client 4.189.97.65:57587] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXJ8_R-ZDU0QEgAIIuoYwAAAMU"]
[Tue Nov 25 23:23:32.277973 2025] [:error] [pid 43843:tid 43869] [client 4.189.97.65:9756] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXJ9Bhx4v3NUNdMKDMOgwAAAdg"]
[Tue Nov 25 23:23:32.743326 2025] [:error] [pid 28836:tid 29011] [client 4.189.97.65:9741] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXJ9JwNRsoxcLQGkTcFqAAAAtU"]
[Tue Nov 25 23:23:33.899635 2025] [:error] [pid 28739:tid 28786] [client 4.189.97.65:9740] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSXJ9RxGpKmlkG4FexTS-wAAAhg"]
[Tue Nov 25 23:23:34.325650 2025] [:error] [pid 28836:tid 28960] [client 4.189.97.65:57577] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXJ9pwNRsoxcLQGkTcFqgAAAsU"]
[Tue Nov 25 23:23:35.911868 2025] [:error] [pid 14168:tid 14192] [client 4.189.97.65:9742] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXJ9_R-ZDU0QEgAIIuoZgAAANU"]
[Tue Nov 25 23:23:36.905650 2025] [:error] [pid 2987:tid 2989] [client 4.189.97.65:58226] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXJ-M-djEt-pTzPxnzoUAAAAUA"]
[Tue Nov 25 23:23:38.142112 2025] [:error] [pid 28739:tid 28767] [client 4.189.97.65:58219] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSXJ-hxGpKmlkG4FexTTBAAAAgU"]
[Tue Nov 25 23:23:39.303502 2025] [:error] [pid 14077:tid 14120] [client 4.189.97.65:9750] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXJ-xG9n7UHEkwDTyjrTQAAAEo"]
[Tue Nov 25 23:23:40.288820 2025] [:error] [pid 14078:tid 14151] [client 4.189.97.65:9738] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXJ_NVXYbb0ii_rVoKwfgAAAI4"]
[Tue Nov 25 23:23:41.207605 2025] [:error] [pid 43843:tid 43847] [client 4.189.97.65:58223] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXJ_Rhx4v3NUNdMKDMOiwAAAcI"]
[Tue Nov 25 23:23:41.780529 2025] [:error] [pid 28609:tid 28639] [client 4.189.97.65:58236] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSXJ_SGGdT-nZJVs3x0N8wAAAZU"]
[Tue Nov 25 23:23:42.637340 2025] [:error] [pid 28609:tid 28621] [client 4.189.97.65:58185] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXJ_iGGdT-nZJVs3x0N9QAAAYM"]
[Tue Nov 25 23:23:44.036405 2025] [:error] [pid 43981:tid 44001] [client 4.189.97.65:58235] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXKAAgZn97m_qh_RaGEOwAAAxI"]
[Tue Nov 25 23:23:45.118780 2025] [:error] [pid 28739:tid 28778] [client 4.189.97.65:58128] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXKARxGpKmlkG4FexTTCQAAAhA"]
[Tue Nov 25 23:23:46.403342 2025] [:error] [pid 28609:tid 28633] [client 4.189.97.65:58217] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.well-known/log.php"] [unique_id "aSXKAiGGdT-nZJVs3x0N-QAAAY8"]
[Tue Nov 25 23:23:47.250862 2025] [:error] [pid 28836:tid 28955] [client 4.189.97.65:56832] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/class.php"] [unique_id "aSXKA5wNRsoxcLQGkTcFtQAAAsA"]
[Tue Nov 25 23:23:48.349749 2025] [:error] [pid 14077:tid 14124] [client 4.189.97.65:9752] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/class.php"] [unique_id "aSXKBBG9n7UHEkwDTyjrWgAAAE4"]
[Tue Nov 25 23:23:49.455162 2025] [:error] [pid 14077:tid 14120] [client 4.189.97.65:57572] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/class.php"] [unique_id "aSXKBRG9n7UHEkwDTyjrXAAAAEo"]
[Tue Nov 25 23:23:50.596235 2025] [:error] [pid 14076:tid 14094] [client 4.189.97.65:9741] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/class.php"] [unique_id "aSXKBnsB4Gz6Qw-pvBtkXgAAAA0"]
[Tue Nov 25 23:23:52.192283 2025] [:error] [pid 14078:tid 14152] [client 4.189.97.65:58195] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bless.php"] [unique_id "aSXKCNVXYbb0ii_rVoKwmAAAAI8"]
[Tue Nov 25 23:23:53.437345 2025] [:error] [pid 14076:tid 14090] [client 4.189.97.65:57541] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bless.php"] [unique_id "aSXKCXsB4Gz6Qw-pvBtkYQAAAAk"]
[Tue Nov 25 23:23:54.642049 2025] [:error] [pid 14168:tid 14176] [client 4.189.97.65:56917] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bless.php"] [unique_id "aSXKCvR-ZDU0QEgAIIuoeAAAAMU"]
[Tue Nov 25 23:23:55.303204 2025] [:error] [pid 43981:tid 43996] [client 4.189.97.65:58233] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bless.php"] [unique_id "aSXKCwgZn97m_qh_RaGEQwAAAw0"]
[Tue Nov 25 23:23:56.481009 2025] [:error] [pid 28739:tid 28766] [client 4.189.97.65:58188] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSXKDBxGpKmlkG4FexTTIAAAAgQ"]
[Tue Nov 25 23:23:57.688641 2025] [:error] [pid 14077:tid 14114] [client 4.189.97.65:58221] [client 4.189.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSXKDRG9n7UHEkwDTyjraAAAAEQ"]
[Tue Nov 25 23:23:59.080644 2025] [:error] [pid 2987:tid 3008] [client 4.189.97.65:56842] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock360.php"] [unique_id "aSXKD8-djEt-pTzPxnzoYwAAAVM"]
[Tue Nov 25 23:24:00.320209 2025] [:error] [pid 14077:tid 14117] [client 4.189.97.65:58194] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock360.php"] [unique_id "aSXKEBG9n7UHEkwDTyjrbgAAAEc"]
[Tue Nov 25 23:24:01.043184 2025] [:error] [pid 14078:tid 14155] [client 4.189.97.65:58211] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock360.php"] [unique_id "aSXKEdVXYbb0ii_rVoKwuwAAAJI"]
[Tue Nov 25 23:24:02.735394 2025] [:error] [pid 28609:tid 28629] [client 4.189.97.65:58119] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/lock360.php"] [unique_id "aSXKEiGGdT-nZJVs3x0OCwAAAYs"]
[Tue Nov 25 23:24:04.744331 2025] [:error] [pid 43981:tid 43989] [client 4.189.97.65:58213] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bge.php"] [unique_id "aSXKFAgZn97m_qh_RaGEUwAAAwY"]
[Tue Nov 25 23:24:06.728928 2025] [:error] [pid 14077:tid 14115] [client 4.189.97.65:58199] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bge.php"] [unique_id "aSXKFhG9n7UHEkwDTyjrhAAAAEU"]
[Tue Nov 25 23:24:07.579667 2025] [:error] [pid 14168:tid 14186] [client 4.189.97.65:57562] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bge.php"] [unique_id "aSXKF_R-ZDU0QEgAIIuojAAAAM8"]
[Tue Nov 25 23:24:08.747786 2025] [:error] [pid 28739:tid 28772] [client 4.189.97.65:9735] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/bge.php"] [unique_id "aSXKGBxGpKmlkG4FexTTKQAAAgo"]
[Tue Nov 25 23:24:10.574430 2025] [:error] [pid 14078:tid 14140] [client 4.189.97.65:58207] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ifm.php"] [unique_id "aSXKGtVXYbb0ii_rVoKw0gAAAIM"]
[Tue Nov 25 23:24:11.634964 2025] [:error] [pid 14076:tid 14101] [client 4.189.97.65:58239] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ifm.php"] [unique_id "aSXKG3sB4Gz6Qw-pvBtkiwAAABQ"]
[Tue Nov 25 23:24:13.098147 2025] [:error] [pid 28836:tid 28962] [client 4.189.97.65:58125] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ifm.php"] [unique_id "aSXKHZwNRsoxcLQGkTcFxQAAAsc"]
[Tue Nov 25 23:24:14.659417 2025] [:error] [pid 14078:tid 14143] [client 4.189.97.65:9768] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ifm.php"] [unique_id "aSXKHtVXYbb0ii_rVoKw2AAAAIY"]
[Tue Nov 25 23:24:16.893597 2025] [:error] [pid 43981:tid 43990] [client 4.189.97.65:58210] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww5.php"] [unique_id "aSXKIAgZn97m_qh_RaGEWwAAAwc"]
[Tue Nov 25 23:24:18.389132 2025] [:error] [pid 14078:tid 14149] [client 4.189.97.65:58179] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww5.php"] [unique_id "aSXKItVXYbb0ii_rVoKw4gAAAIw"]
[Tue Nov 25 23:24:19.328106 2025] [:error] [pid 14077:tid 14119] [client 4.189.97.65:58122] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww5.php"] [unique_id "aSXKIxG9n7UHEkwDTyjrkAAAAEk"]
[Tue Nov 25 23:24:20.130022 2025] [:error] [pid 14077:tid 14131] [client 4.189.97.65:57588] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ww5.php"] [unique_id "aSXKJBG9n7UHEkwDTyjrlQAAAFU"]
[Tue Nov 25 23:24:20.962821 2025] [:error] [pid 2987:tid 2992] [client 4.189.97.65:9746] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/thxt.php"] [unique_id "aSXKJM-djEt-pTzPxnzosAAAAUM"]
[Tue Nov 25 23:24:22.481294 2025] [:error] [pid 14168:tid 14188] [client 4.189.97.65:58117] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/thxt.php"] [unique_id "aSXKJvR-ZDU0QEgAIIuoqgAAANE"]
[Tue Nov 25 23:24:23.108830 2025] [:error] [pid 2987:tid 3004] [client 4.189.97.65:9778] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/thxt.php"] [unique_id "aSXKJ8-djEt-pTzPxnzosQAAAU8"]
[Tue Nov 25 23:24:24.049054 2025] [:error] [pid 2987:tid 2996] [client 4.189.97.65:58197] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/thxt.php"] [unique_id "aSXKKM-djEt-pTzPxnzosgAAAUc"]
[Tue Nov 25 23:24:25.131449 2025] [:error] [pid 28836:tid 28966] [client 4.189.97.65:9788] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kairolin.php"] [unique_id "aSXKKZwNRsoxcLQGkTcF0QAAAss"]
[Tue Nov 25 23:24:25.544052 2025] [:error] [pid 2987:tid 2990] [client 4.189.97.65:58141] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kairolin.php"] [unique_id "aSXKKc-djEt-pTzPxnzouAAAAUE"]
[Tue Nov 25 23:24:26.346425 2025] [:error] [pid 43981:tid 43985] [client 4.189.97.65:57557] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kairolin.php"] [unique_id "aSXKKggZn97m_qh_RaGEZwAAAwI"]
[Tue Nov 25 23:24:27.436174 2025] [:error] [pid 28739:tid 28764] [client 4.189.97.65:58124] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/kairolin.php"] [unique_id "aSXKKxxGpKmlkG4FexTTRQAAAgI"]
[Tue Nov 25 23:24:28.410630 2025] [:error] [pid 14078:tid 14159] [client 4.189.97.65:9737] [client 4.189.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/siln.php"] [unique_id "aSXKLNVXYbb0ii_rVoKw6AAAAJY"]
[Wed Nov 26 00:03:53.913599 2025] [:error] [pid 28739:tid 28783] [client 114.79.136.86:48562] [client 114.79.136.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.79.136.86, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXTaRxGpKmlkG4FexTiZQAAAhU"]
[Wed Nov 26 00:07:39.703773 2025] [:error] [pid 43843:tid 43869] [client 24.77.74.230:11137] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSXUSxhx4v3NUNdMKDMYRAAAAdg"]
[Wed Nov 26 01:01:58.407426 2025] [:error] [pid 28739:tid 28777] [client 159.203.44.72:49195] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSXhBhxGpKmlkG4FexT37AAAAg8"]
[Wed Nov 26 01:17:49.776389 2025] [:error] [pid 14076:tid 14102] [client 159.203.44.72:64913] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSXkvXsB4Gz6Qw-pvBuFUQAAABU"]
[Wed Nov 26 01:26:02.385938 2025] [:error] [pid 14078:tid 14138] [client 54.173.250.15:50744] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSXmqtVXYbb0ii_rVoLqfQAAAIE"]
[Wed Nov 26 01:33:44.125562 2025] [:error] [pid 43981:tid 43989] [client 159.203.44.72:64238] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSXoeAgZn97m_qh_RaGeggAAAwY"]
[Wed Nov 26 01:49:39.969435 2025] [:error] [pid 2987:tid 2999] [client 159.203.44.72:63562] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSXsM8-djEt-pTzPxnwKUgAAAUo"]
[Wed Nov 26 02:05:37.982432 2025] [:error] [pid 28609:tid 28636] [client 159.203.44.72:62887] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSXv8SGGdT-nZJVs3x023AAAAZI"]
[Wed Nov 26 02:21:40.043201 2025] [:error] [pid 28836:tid 28967] [client 159.203.44.72:62217] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSXztJwNRsoxcLQGkTcr3AAAAsw"]
[Wed Nov 26 02:37:36.752494 2025] [:error] [pid 43843:tid 43855] [client 159.203.44.72:61530] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSX3cBhx4v3NUNdMKDMwaQAAAco"]
[Wed Nov 26 02:53:39.270611 2025] [:error] [pid 14076:tid 14101] [client 159.203.44.72:60877] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSX7M3sB4Gz6Qw-pvBuaagAAABQ"]
[Wed Nov 26 03:09:36.414966 2025] [:error] [pid 43981:tid 44002] [client 159.203.44.72:60171] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSX-8AgZn97m_qh_RaGs2wAAAxM"]
[Wed Nov 26 03:25:31.141756 2025] [:error] [pid 19754:tid 19761] [client 159.203.44.72:59493] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYCqyZ9cWUdNp6Aqf2EgwAAAMU"]
[Wed Nov 26 03:41:29.887074 2025] [:error] [pid 23968:tid 23993] [client 159.203.44.72:58842] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYGac4ofN5EjQSFyQcVeQAAAAU"]
[Wed Nov 26 03:57:29.063724 2025] [:error] [pid 3493:tid 3516] [client 159.203.44.72:58140] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYKKWBUa93ugXko11NQMwAAARU"]
[Wed Nov 26 04:13:30.247733 2025] [:error] [pid 3012:tid 3070] [client 159.203.44.72:57460] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYN6kfo8Sm1Un9NK6gb5QAAAIE"]
[Wed Nov 26 04:29:27.112425 2025] [:error] [pid 3011:tid 3043] [client 159.203.44.72:56785] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYRp0b0BA3GljiGlI6wYQAAAEE"]
[Wed Nov 26 04:45:27.421665 2025] [:error] [pid 3097:tid 3102] [client 159.203.44.72:56119] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYVZ-VgdOH9N9jhT56AIgAAAME"]
[Wed Nov 26 05:01:29.975048 2025] [:error] [pid 3097:tid 3106] [client 159.203.44.72:55435] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYZKeVgdOH9N9jhT56HfwAAAMU"]
[Wed Nov 26 05:17:26.544707 2025] [:error] [pid 3012:tid 3086] [client 159.203.44.72:54750] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYc5kfo8Sm1Un9NK6guXwAAAJE"]
[Wed Nov 26 05:33:07.385764 2025] [:error] [pid 3010:tid 3025] [client 159.203.44.72:54046] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYgk0Wl16-roARWvItiSAAAAAs"]
[Wed Nov 26 05:45:24.482622 2025] [:error] [pid 683:tid 699] [client 114.79.136.86:10559] [client 114.79.136.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSYjdM4Hks4Npntw8NlTugAAAcw"]
[Wed Nov 26 05:46:51.655742 2025] [:error] [pid 717:tid 750] [client 114.79.136.86:10315] [client 114.79.136.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.79.136.86, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYjy3aTjghKhdJnwAvpxQAAAkM"]
[Wed Nov 26 05:48:23.481959 2025] [:error] [pid 2053:tid 2063] [client 114.79.136.86:10614] [client 114.79.136.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.79.136.86, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYkJ6PpsJMycZy0cRpNwQAAA0E"]
[Wed Nov 26 05:48:28.784758 2025] [:error] [pid 1287:tid 1310] [client 159.203.44.72:53346] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYkLBITYaZuORjpDCVi5AAAAtQ"]
[Wed Nov 26 05:49:43.971432 2025] [:error] [pid 3193:tid 3200] [client 114.79.136.86:10930] [client 114.79.136.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.79.136.86, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYkd3uQoDIKTNoWPJU9OwAAA8U"]
[Wed Nov 26 05:51:41.056844 2025] [:error] [pid 716:tid 739] [client 114.79.136.86:10765] [client 114.79.136.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.79.136.86, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYk7fk-DzbcuL5gvNySKwAAAhM"]
[Wed Nov 26 05:53:20.900048 2025] [:error] [pid 514:tid 520] [client 114.79.136.86:10566] [client 114.79.136.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.79.136.86, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYlUP1im2wfcIabi9_0PgAAAYE"]
[Wed Nov 26 06:04:29.988689 2025] [:error] [pid 683:tid 704] [client 159.203.44.72:52630] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYn7c4Hks4Npntw8NlXTgAAAdE"]
[Wed Nov 26 06:20:31.662366 2025] [:error] [pid 2118:tid 2124] [client 159.203.44.72:51942] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYrrxndpvkGwwtuEgIgTQAAA4Q"]
[Wed Nov 26 06:36:21.523941 2025] [:error] [pid 3012:tid 3083] [client 159.203.44.72:51227] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYvZUfo8Sm1Un9NK6hCKwAAAI4"]
[Wed Nov 26 06:52:18.268384 2025] [:error] [pid 38796:tid 38799] [client 159.203.44.72:50532] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSYzIgGcUUzaXxvjCXPNhAAAAUA"]
[Wed Nov 26 07:08:18.940293 2025] [:error] [pid 3493:tid 3515] [client 159.203.44.72:49826] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSY24mBUa93ugXko11OMFAAAARQ"]
[Wed Nov 26 07:24:22.675123 2025] [:error] [pid 34744:tid 34808] [client 159.203.44.72:65508] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSY6pktgOvVbhyALkTSU1wAAAYU"]
[Wed Nov 26 07:40:19.186820 2025] [:error] [pid 35540:tid 35566] [client 159.203.44.72:64825] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSY-Y8GrIq2A6SZSnkLzJQAAAJQ"]
[Wed Nov 26 07:56:18.048821 2025] [:error] [pid 34830:tid 34835] [client 159.203.44.72:64114] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZCIkukvkWgWN6jCR1cUwAAAAM"]
[Wed Nov 26 08:12:23.556168 2025] [:error] [pid 45836:tid 45850] [client 159.203.44.72:63417] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZF55frnOGqL-seZAzn-QAAAMQ"]
[Wed Nov 26 08:28:30.465663 2025] [:error] [pid 35540:tid 35550] [client 159.203.44.72:62718] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZJrsGrIq2A6SZSnkIJIAAAAIQ"]
[Wed Nov 26 08:44:37.237181 2025] [:error] [pid 45901:tid 45918] [client 159.203.44.72:62009] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZNdSunQ1SpfPRNrtxWgwAAAQ8"]
[Wed Nov 26 09:00:44.527180 2025] [:error] [pid 34743:tid 34782] [client 159.203.44.72:61308] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZRPAvyX7Q5oU7_mBxgnAAAAUY"]
[Wed Nov 26 09:16:50.827144 2025] [:error] [pid 34830:tid 34849] [client 159.203.44.72:60588] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZVAkukvkWgWN6jCR1wNQAAABE"]
[Wed Nov 26 09:33:02.685181 2025] [:error] [pid 34830:tid 34840] [client 159.203.44.72:59892] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZYzkukvkWgWN6jCR10uAAAAAg"]
[Wed Nov 26 09:49:09.571927 2025] [:error] [pid 34830:tid 34833] [client 159.203.44.72:59196] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZclUukvkWgWN6jCR15BQAAAAE"]
[Wed Nov 26 10:05:15.543950 2025] [:error] [pid 10383:tid 10404] [client 159.203.44.72:58474] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZgW60RJ-zjhOVjD8-AOAAAAdI"]
[Wed Nov 26 10:21:25.522925 2025] [:error] [pid 34744:tid 34818] [client 159.203.44.72:57771] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZkJUtgOvVbhyALkTTNRwAAAY8"]
[Wed Nov 26 10:37:37.704405 2025] [:error] [pid 35540:tid 35551] [client 159.203.44.72:57066] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZn8cGrIq2A6SZSnkJBLwAAAIU"]
[Wed Nov 26 10:53:36.986679 2025] [:error] [pid 34830:tid 34836] [client 159.203.44.72:56367] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZrsEukvkWgWN6jCR2GLQAAAAQ"]
[Wed Nov 26 11:09:43.205751 2025] [:error] [pid 35540:tid 35555] [client 159.203.44.72:55673] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZvd8GrIq2A6SZSnkJL_QAAAIk"]
[Wed Nov 26 11:25:46.686508 2025] [:error] [pid 34744:tid 34814] [client 159.203.44.72:54969] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZzOktgOvVbhyALkTTdjAAAAYs"]
[Wed Nov 26 11:41:50.693963 2025] [:error] [pid 34830:tid 34841] [client 159.203.44.72:54254] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZ2_kukvkWgWN6jCR2RYQAAAAk"]
[Wed Nov 26 11:57:51.946274 2025] [:error] [pid 45836:tid 45849] [client 159.203.44.72:53555] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZ6v5frnOGqL-seZAwoWQAAAMM"]
[Wed Nov 26 12:14:01.264795 2025] [:error] [pid 35540:tid 35565] [client 159.203.44.72:52886] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSZ-icGrIq2A6SZSnkJhjgAAAJM"]
[Wed Nov 26 12:30:07.732193 2025] [:error] [pid 34744:tid 34819] [client 159.203.44.72:52189] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSaCT0tgOvVbhyALkTTs4gAAAZA"]
[Wed Nov 26 12:46:14.331667 2025] [:error] [pid 45836:tid 45859] [client 159.203.44.72:51518] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSaGFpfrnOGqL-seZAwzLgAAAM0"]
[Wed Nov 26 13:02:19.983342 2025] [:error] [pid 45836:tid 45860] [client 159.203.44.72:50820] [client 159.203.44.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.44.72, incrementing brute counter"] [hostname "funnyemuart.com.au"] [uri "/wp-login.php"] [unique_id "aSaJ25frnOGqL-seZAw19gAAAM4"]
[Wed Nov 26 15:39:05.270015 2025] [:error] [pid 45685:tid 45746] [client 138.68.144.227:47034] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||funnyemuart.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSaumVj3f_NRdgU0DQ6fXQAAAQQ"]
[Wed Nov 26 15:39:08.200772 2025] [:error] [pid 45769:tid 45790] [client 138.68.144.227:47040] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSaunFdG5Eht9c3yy4Pk2AAAAdI"]
[Wed Nov 26 15:39:08.942309 2025] [:error] [pid 45683:tid 45691] [client 138.68.144.227:47050] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/about"] [unique_id "aSaunBX1gQgNFW_222p0JwAAAUM"]
[Wed Nov 26 15:39:09.681321 2025] [:error] [pid 45685:tid 45757] [client 138.68.144.227:47060] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/debug/default/view"] [unique_id "aSaunVj3f_NRdgU0DQ6fXwAAAQ8"]
[Wed Nov 26 15:39:10.418645 2025] [:error] [pid 46443:tid 46466] [client 138.68.144.227:47070] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/v2/_catalog"] [unique_id "aSaunsLmDsnHrj-QFB-OKwAAAFU"]
[Wed Nov 26 15:39:11.163138 2025] [:error] [pid 45769:tid 45773] [client 138.68.144.227:47086] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSaun1dG5Eht9c3yy4Pk2gAAAcE"]
[Wed Nov 26 15:39:11.899786 2025] [:error] [pid 45769:tid 45796] [client 138.68.144.227:47088] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/server-status"] [unique_id "aSaun1dG5Eht9c3yy4Pk2wAAAdg"]
[Wed Nov 26 15:39:12.635533 2025] [:error] [pid 45683:tid 45701] [client 138.68.144.227:47096] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/login.action"] [unique_id "aSauoBX1gQgNFW_222p0KAAAAU0"]
[Wed Nov 26 15:39:13.373915 2025] [:error] [pid 45769:tid 45780] [client 138.68.144.227:47104] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/_all_dbs"] [unique_id "aSauoVdG5Eht9c3yy4Pk3AAAAcg"]
[Wed Nov 26 15:39:14.102009 2025] [:error] [pid 45685:tid 45744] [client 138.68.144.227:34242] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aSauolj3f_NRdgU0DQ6fYQAAAQI"]
[Wed Nov 26 15:39:14.840000 2025] [:error] [pid 45769:tid 45792] [client 138.68.144.227:34256] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aSauoldG5Eht9c3yy4Pk3gAAAdQ"]
[Wed Nov 26 15:39:15.579447 2025] [:error] [pid 46443:tid 46465] [client 138.68.144.227:34264] [client 138.68.144.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSauo8LmDsnHrj-QFB-OLwAAAFQ"]
[Wed Nov 26 15:39:16.308092 2025] [:error] [pid 45684:tid 45734] [client 138.68.144.227:34276] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSaupPg5LMxwI4-PD1f7AwAAABM"]
[Wed Nov 26 15:39:17.033903 2025] [:error] [pid 45683:tid 45694] [client 138.68.144.227:34280] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/config.json"] [unique_id "aSaupRX1gQgNFW_222p0KwAAAUY"]
[Wed Nov 26 15:39:17.766851 2025] [:error] [pid 45769:tid 45793] [client 138.68.144.227:34290] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aSaupVdG5Eht9c3yy4Pk4wAAAdU"]
[Wed Nov 26 15:39:18.501185 2025] [:error] [pid 45684:tid 45730] [client 138.68.144.227:34298] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aSaupvg5LMxwI4-PD1f7BgAAAA8"]
[Wed Nov 26 15:39:19.239095 2025] [:error] [pid 46443:tid 46463] [client 138.68.144.227:34314] [client 138.68.144.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aSaup8LmDsnHrj-QFB-OMQAAAFI"]
[Wed Nov 26 15:39:50.641953 2025] [:error] [pid 45683:tid 45703] [client 24.77.74.230:14780] [client 24.77.74.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSauxhX1gQgNFW_222p0OQAAAU8"]
[Wed Nov 26 15:40:55.024719 2025] [:error] [pid 46443:tid 46447] [client 24.77.74.230:2059] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSavB8LmDsnHrj-QFB-OlQAAAEI"]
[Wed Nov 26 15:41:45.193787 2025] [:error] [pid 45684:tid 45733] [client 24.77.74.230:2830] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSavOfg5LMxwI4-PD1f7eQAAABI"]
[Wed Nov 26 15:42:52.768584 2025] [:error] [pid 45769:tid 45785] [client 24.77.74.230:3840] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSavfFdG5Eht9c3yy4PleQAAAc0"]
[Wed Nov 26 15:43:44.598008 2025] [:error] [pid 45769:tid 45795] [client 24.77.74.230:4675] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSavsFdG5Eht9c3yy4Pl2wAAAdc"]
[Wed Nov 26 15:44:47.132815 2025] [:error] [pid 46443:tid 46464] [client 24.77.74.230:5638] [client 24.77.74.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.74.230, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSav78LmDsnHrj-QFB-PzgAAAFM"]
[Wed Nov 26 18:30:03.913681 2025] [:error] [pid 45769:tid 45776] [client 216.126.239.203:35232] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSbWq1dG5Eht9c3yy4MX6gAAAcQ"]
[Thu Nov 27 00:50:09.993377 2025] [:error] [pid 25180:tid 25186] [client 103.77.107.57:52110] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/sftp-config.json"] [unique_id "aScvwb-owhtiwMHXYlzPowAAAYQ"]
[Thu Nov 27 05:58:46.509730 2025] [autoindex:error] [pid 21017:tid 21069] [client 20.19.123.147:7053] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 05:58:46.796138 2025] [proxy_fcgi:error] [pid 21017:tid 21063] [client 20.19.123.147:7053] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 27 06:01:02.708147 2025] [:error] [pid 21017:tid 21063] [client 20.19.123.147:7162] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "funnyemuart.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSd4nqZA663ub03MMQulCwAAAQQ"], referer: https://www.yahoo.com/
[Thu Nov 27 06:01:25.414246 2025] [autoindex:error] [pid 6290:tid 6312] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:01:25.656245 2025] [autoindex:error] [pid 6290:tid 6316] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:01:25.900364 2025] [autoindex:error] [pid 6290:tid 6303] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:01:28.636847 2025] [autoindex:error] [pid 6290:tid 6294] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:01:29.001715 2025] [autoindex:error] [pid 6290:tid 6305] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:01:29.309487 2025] [autoindex:error] [pid 6290:tid 6296] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:01:37.987864 2025] [autoindex:error] [pid 6290:tid 6302] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:01:38.286537 2025] [autoindex:error] [pid 6290:tid 6305] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:01:38.528781 2025] [autoindex:error] [pid 6290:tid 6317] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:01:40.549630 2025] [autoindex:error] [pid 6290:tid 6318] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:01:42.980163 2025] [autoindex:error] [pid 6290:tid 6299] [client 20.19.123.147:7165] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:02:31.739445 2025] [autoindex:error] [pid 21017:tid 21077] [client 20.19.123.147:7048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:02:33.877918 2025] [autoindex:error] [pid 21017:tid 21076] [client 20.19.123.147:7048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:02:39.044861 2025] [autoindex:error] [pid 21017:tid 21076] [client 20.19.123.147:7048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:02:39.285514 2025] [autoindex:error] [pid 21017:tid 21078] [client 20.19.123.147:7048] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:02:39.527446 2025] [:error] [pid 21017:tid 21083] [client 20.19.123.147:7048] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSd4_6ZA663ub03MMQumfwAAARg"], referer: https://duckduckgo.com/
[Thu Nov 27 06:02:41.570816 2025] [autoindex:error] [pid 6203:tid 6274] [client 20.19.123.147:7104] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:02:42.122564 2025] [:error] [pid 6203:tid 6277] [client 20.19.123.147:7104] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aSd5AsbdRL7aKyrgqyzdSwAAAJE"], referer: https://www.yahoo.com/
[Thu Nov 27 06:02:44.260698 2025] [autoindex:error] [pid 6203:tid 6282] [client 20.19.123.147:7111] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:02:45.149430 2025] [autoindex:error] [pid 6203:tid 6270] [client 20.19.123.147:7111] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:02:48.148846 2025] [:error] [pid 6203:tid 6262] [client 20.19.123.147:7111] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSd5CMbdRL7aKyrgqyzdUQAAAII"], referer: https://www.google.de/
[Thu Nov 27 06:02:48.997726 2025] [autoindex:error] [pid 6203:tid 6268] [client 20.19.123.147:7167] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:02:51.631699 2025] [:error] [pid 6203:tid 6264] [client 20.19.123.147:7167] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSd5C8bdRL7aKyrgqyzdVgAAAIQ"], referer: https://www.google.de/
[Thu Nov 27 06:02:53.692875 2025] [:error] [pid 6290:tid 6301] [client 20.19.123.147:7132] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSd5DYqL4zye-zKr6suv_AAAAMc"], referer: https://www.google.com/
[Thu Nov 27 06:03:02.906146 2025] [:error] [pid 21017:tid 21080] [client 20.19.123.147:7064] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSd5FqZA663ub03MMQumjQAAARU"], referer: https://www.bing.com/
[Thu Nov 27 06:03:03.726796 2025] [autoindex:error] [pid 6290:tid 6304] [client 20.19.123.147:7054] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:03:04.648199 2025] [autoindex:error] [pid 6290:tid 6305] [client 20.19.123.147:7054] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:03:04.889059 2025] [autoindex:error] [pid 6290:tid 6294] [client 20.19.123.147:7054] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:03:05.187036 2025] [autoindex:error] [pid 6290:tid 6315] [client 20.19.123.147:7054] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:03:05.427444 2025] [:error] [pid 6290:tid 6295] [client 20.19.123.147:7054] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSd5GYqL4zye-zKr6suwBAAAAME"], referer: https://duckduckgo.com/
[Thu Nov 27 06:03:08.724191 2025] [:error] [pid 6290:tid 6297] [client 20.19.123.147:7137] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSd5HIqL4zye-zKr6suwBwAAAMM"], referer: https://www.google.de/
[Thu Nov 27 06:03:12.235155 2025] [autoindex:error] [pid 21017:tid 21078] [client 20.19.123.147:7123] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:03:12.476671 2025] [:error] [pid 21017:tid 21068] [client 20.19.123.147:7123] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSd5IKZA663ub03MMQumrgAAAQk"], referer: https://www.yahoo.com/
[Thu Nov 27 06:03:14.854331 2025] [:error] [pid 21017:tid 21073] [client 20.19.123.147:7126] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSd5IqZA663ub03MMQumtAAAAQ4"], referer: https://www.google.com/
[Thu Nov 27 06:03:17.377526 2025] [autoindex:error] [pid 6201:tid 6214] [client 20.19.123.147:7148] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:03:17.647060 2025] [autoindex:error] [pid 6201:tid 6205] [client 20.19.123.147:7148] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:03:17.942753 2025] [autoindex:error] [pid 6201:tid 6222] [client 20.19.123.147:7148] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:03:18.226457 2025] [:error] [pid 6201:tid 6216] [client 20.19.123.147:7148] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSd5JjkSJeRkIQGTjzw1ZwAAAAs"], referer: https://duckduckgo.com/
[Thu Nov 27 06:03:22.068429 2025] [autoindex:error] [pid 6202:tid 6240] [client 20.19.123.147:7140] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:03:22.315164 2025] [autoindex:error] [pid 6202:tid 6243] [client 20.19.123.147:7140] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:03:22.551221 2025] [:error] [pid 6202:tid 6245] [client 20.19.123.147:7140] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSd5KtJa7NTP0XPyZ6l6rQAAAEw"], referer: https://www.google.co.uk/
[Thu Nov 27 06:03:25.969275 2025] [autoindex:error] [pid 6203:tid 6277] [client 20.19.123.147:6992] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:03:26.254499 2025] [:error] [pid 6203:tid 6260] [client 20.19.123.147:6992] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSd5LsbdRL7aKyrgqyzdegAAAIA"], referer: https://www.bing.com/
[Thu Nov 27 06:03:43.306242 2025] [access_compat:error] [pid 6203:tid 6269] [client 20.19.123.147:7120] AH01797: client denied by server configuration: /home/stunnedemuadmin/public_html/wp-content/updraft/, referer: https://www.google.co.uk/
[Thu Nov 27 06:03:52.350672 2025] [access_compat:error] [pid 6203:tid 6272] [client 20.19.123.147:7120] AH01797: client denied by server configuration: /home/stunnedemuadmin/public_html/wp-content/uploads/woocommerce_uploads/, referer: https://www.google.co.uk/
[Thu Nov 27 06:03:55.725772 2025] [access_compat:error] [pid 6203:tid 6270] [client 20.19.123.147:7120] AH01797: client denied by server configuration: /home/stunnedemuadmin/public_html/wp-content/uploads/wc-logs/, referer: https://www.google.de/
[Thu Nov 27 06:03:55.996272 2025] [autoindex:error] [pid 6203:tid 6263] [client 20.19.123.147:7120] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:03:56.322287 2025] [autoindex:error] [pid 6203:tid 6261] [client 20.19.123.147:7120] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:03:56.604374 2025] [autoindex:error] [pid 6203:tid 6267] [client 20.19.123.147:7120] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:03:56.840593 2025] [:error] [pid 6203:tid 6276] [client 20.19.123.147:7120] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSd5TMbdRL7aKyrgqyzduAAAAJA"], referer: https://www.bing.com/
[Thu Nov 27 06:04:01.541938 2025] [:error] [pid 6203:tid 6270] [client 20.19.123.147:7150] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSd5UcbdRL7aKyrgqyzdwgAAAIo"], referer: https://www.google.co.uk/
[Thu Nov 27 06:04:05.058253 2025] [autoindex:error] [pid 6290:tid 6315] [client 20.19.123.147:7155] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/html-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:04:05.299176 2025] [autoindex:error] [pid 6290:tid 6311] [client 20.19.123.147:7155] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:04:05.535279 2025] [:error] [pid 6290:tid 6308] [client 20.19.123.147:7155] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aSd5VYqL4zye-zKr6suwTwAAAM4"], referer: https://duckduckgo.com/
[Thu Nov 27 06:04:09.827031 2025] [autoindex:error] [pid 6290:tid 6310] [client 20.19.123.147:7051] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:04:10.062988 2025] [:error] [pid 6290:tid 6317] [client 20.19.123.147:7051] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSd5WoqL4zye-zKr6suwUwAAANc"], referer: https://duckduckgo.com/
[Thu Nov 27 06:04:12.619673 2025] [autoindex:error] [pid 6290:tid 6301] [client 20.19.123.147:7057] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:04:15.448348 2025] [:error] [pid 6290:tid 6316] [client 20.19.123.147:7057] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSd5X4qL4zye-zKr6suwWAAAANY"], referer: https://www.google.co.uk/
[Thu Nov 27 06:04:17.161049 2025] [autoindex:error] [pid 6290:tid 6309] [client 20.19.123.147:7145] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:04:17.404255 2025] [autoindex:error] [pid 6290:tid 6315] [client 20.19.123.147:7145] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:04:18.099583 2025] [:error] [pid 6290:tid 6295] [client 20.19.123.147:7145] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSd5YoqL4zye-zKr6suwXgAAAME"], referer: https://www.google.de/
[Thu Nov 27 06:04:19.127639 2025] [autoindex:error] [pid 6203:tid 6272] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/php-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:04:19.717662 2025] [autoindex:error] [pid 6203:tid 6274] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:04:22.766298 2025] [autoindex:error] [pid 6203:tid 6266] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:04:23.010419 2025] [autoindex:error] [pid 6203:tid 6275] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 27 06:04:23.609139 2025] [autoindex:error] [pid 6203:tid 6272] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 27 06:04:24.071678 2025] [autoindex:error] [pid 6203:tid 6264] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:04:25.018419 2025] [autoindex:error] [pid 6203:tid 6269] [client 20.19.123.147:7147] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 27 06:04:25.296005 2025] [:error] [pid 6203:tid 6261] [client 20.19.123.147:7147] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSd5acbdRL7aKyrgqyzd6AAAAIE"], referer: https://www.google.com/
[Thu Nov 27 06:04:27.257102 2025] [autoindex:error] [pid 6290:tid 6307] [client 20.19.123.147:7052] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Nov 27 06:04:27.886090 2025] [autoindex:error] [pid 6290:tid 6308] [client 20.19.123.147:7052] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 27 06:04:28.123568 2025] [:error] [pid 6290:tid 6311] [client 20.19.123.147:7052] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSd5bIqL4zye-zKr6suwZgAAANE"], referer: https://www.google.fr/
[Thu Nov 27 06:04:29.628291 2025] [autoindex:error] [pid 6203:tid 6278] [client 20.19.123.147:7122] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 27 06:04:29.983174 2025] [:error] [pid 6203:tid 6268] [client 20.19.123.147:7122] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSd5bcbdRL7aKyrgqyzd8wAAAIg"], referer: https://www.bing.com/
[Thu Nov 27 06:04:31.193875 2025] [:error] [pid 6290:tid 6296] [client 20.19.123.147:7058] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSd5b4qL4zye-zKr6suwaAAAAMI"], referer: https://www.google.de/
[Thu Nov 27 06:04:32.626407 2025] [autoindex:error] [pid 21017:tid 21081] [client 20.19.123.147:7041] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 27 06:04:32.865387 2025] [:error] [pid 21017:tid 21060] [client 20.19.123.147:7041] [client 20.19.123.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "funnyemuart.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSd5cKZA663ub03MMQunfwAAAQE"], referer: https://www.yahoo.com/
[Thu Nov 27 06:04:41.359120 2025] [proxy_fcgi:error] [pid 6201:tid 6206] [client 20.19.123.147:7144] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/stunnedemuadmin/public_html/wp-includes/class-wpdb.php on line 2351', referer: https://www.google.co.uk/
[Thu Nov 27 07:35:25.962793 2025] [:error] [pid 21764:tid 21824] [client 46.101.1.225:35232] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||funnyemuart.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "funnyemuart.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSeOveQGYcrY_Uk9UPtY-AAAAY4"]
[Thu Nov 27 07:35:42.468730 2025] [authz_core:error] [pid 23498:tid 23517] [client 46.101.1.225:42502] AH01630: client denied by server configuration: /home/stunnedemuadmin/public_html/server-status
[Thu Nov 27 07:35:47.708670 2025] [:error] [pid 23411:tid 23421] [client 46.101.1.225:42524] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/.DS_Store"] [unique_id "aSeO01YunVkONF97NEkG3AAAAEY"]
[Thu Nov 27 07:35:48.548824 2025] [:error] [pid 23413:tid 23481] [client 46.101.1.225:42526] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.env"] [unique_id "aSeO1Ke9j7lVV0RAVuQNMwAAAIw"]
[Thu Nov 27 07:35:49.282821 2025] [:error] [pid 23412:tid 23445] [client 46.101.1.225:42528] [client 46.101.1.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSeO1feMmsvPE1IwQb-fOwAAAYM"]
[Thu Nov 27 07:35:50.041628 2025] [:error] [pid 23498:tid 23510] [client 46.101.1.225:35498] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSeO1lMT8s4PMDyK_T2dHwAAAAo"]
[Thu Nov 27 07:35:50.780325 2025] [:error] [pid 23412:tid 23461] [client 46.101.1.225:35500] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/config.json"] [unique_id "aSeO1veMmsvPE1IwQb-fSwAAAZM"]
[Thu Nov 27 07:35:51.506896 2025] [:error] [pid 23412:tid 23451] [client 46.101.1.225:35510] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/telescope/requests"] [unique_id "aSeO1_eMmsvPE1IwQb-fWwAAAYk"]
[Thu Nov 27 07:35:52.243617 2025] [:error] [pid 23412:tid 23456] [client 46.101.1.225:35520] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/info.php"] [unique_id "aSeO2PeMmsvPE1IwQb-fawAAAY4"]
[Thu Nov 27 07:35:52.979982 2025] [:error] [pid 23498:tid 23514] [client 46.101.1.225:35522] [client 46.101.1.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "funnyemuart.com.au"] [uri "/"] [unique_id "aSeO2FMT8s4PMDyK_T2dMwAAAA4"]
[Thu Nov 27 07:37:27.036525 2025] [:error] [pid 23411:tid 23426] [client 176.53.163.29:44814] [client 176.53.163.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSePN1YunVkONF97NEkHzQAAAEs"]
[Thu Nov 27 07:37:27.184340 2025] [:error] [pid 23411:tid 23424] [client 176.53.163.29:44818] [client 176.53.163.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.funnyemuart.com.au"] [uri "/.git/config"] [unique_id "aSePN1YunVkONF97NEkHzgAAAEk"]
[Thu Nov 27 08:25:55.213928 2025] [:error] [pid 19014:tid 19052] [client 122.161.67.123:14519] [client 122.161.67.123] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||funnyemuart.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "funnyemuart.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSeak42utvwZ4eADRmryOQAAAEg"]
[Thu Nov 27 08:27:09.180185 2025] [:error] [pid 19119:tid 19196] [client 122.161.67.123:15423] [client 122.161.67.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.67.123, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSea3RsL_RTusriYkwds4AAAANY"]
[Thu Nov 27 08:28:15.197409 2025] [:error] [pid 19015:tid 19090] [client 122.161.67.123:7210] [client 122.161.67.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.67.123, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSebHw4MxyJWPPh2qEi2pgAAAJM"]
[Thu Nov 27 08:29:35.387149 2025] [:error] [pid 19119:tid 19180] [client 122.161.67.123:15341] [client 122.161.67.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.67.123, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSebbxsL_RTusriYkwdvOwAAAMY"]
[Thu Nov 27 08:30:53.347747 2025] [:error] [pid 19015:tid 19072] [client 122.161.67.123:26179] [client 122.161.67.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.67.123, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSebvQ4MxyJWPPh2qEi4wgAAAIE"]
[Thu Nov 27 08:32:10.068544 2025] [:error] [pid 19013:tid 19027] [client 122.161.67.123:15946] [client 122.161.67.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.67.123, incrementing ddos counter"] [hostname "funnyemuart.com.au"] [uri "/xmlrpc.php"] [unique_id "aSecCoaBrX8b6-N6_86QLQAAAAo"]
[Tue Mar 17 22:04:31.761289 2026] [ssl:error] [pid 15011:tid 15053] [client 79.127.222.201:55449] AH02032: Hostname wendybinks.com.au provided via SNI and hostname funnyemuart.com.au provided via HTTP have no compatible SSL setup, referer: http://wendybinks.com.au/
[Thu Apr 16 01:43:30.413736 2026] [ssl:warn] [pid 4016:tid 4016] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 01:43:30.413764 2026] [ssl:warn] [pid 4016:tid 4016] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:40.990975 2026] [ssl:warn] [pid 52554:tid 52554] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:40.991001 2026] [ssl:warn] [pid 52554:tid 52554] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:42.961815 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:42.961842 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:08.021820 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:08.021820 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:23.134903 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:23.134930 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:30.099139 2026] [ssl:warn] [pid 53231:tid 53231] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:30.099168 2026] [ssl:warn] [pid 53231:tid 53231] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:32.165028 2026] [ssl:warn] [pid 53237:tid 53237] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:32.165055 2026] [ssl:warn] [pid 53237:tid 53237] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:22.795813 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:22.795840 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:24.792744 2026] [ssl:warn] [pid 26973:tid 26973] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:24.792770 2026] [ssl:warn] [pid 26973:tid 26973] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:47:58.921774 2026] [ssl:warn] [pid 57468:tid 57468] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:47:58.921810 2026] [ssl:warn] [pid 57468:tid 57468] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:48:00.990208 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:48:00.990265 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 00:03:17.097183 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:17.097216 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:41.227899 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:41.227926 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:43.278876 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:43.278902 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.484466 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.484493 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:02.359457 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:02.359485 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:13.186261 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:13.186265 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:15.191898 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:15.191925 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:46.074686 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:46.074716 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:48.083891 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:48.083917 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:46.791249 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:46.791303 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:48.853979 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:48.854006 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 00:02:18.497297 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:18.497329 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.680037 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.680066 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.693562 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.693589 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:56.094980 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:56.095009 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:05.036407 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:05.036431 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:13.835449 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:13.835486 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:15.844166 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:15.844193 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.776730 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.776735 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.783373 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.783400 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:56.014477 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:56.014499 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:58.045374 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:58.045402 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 00:02:31.663230 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:31.663299 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:50.138455 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:50.138484 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:52.232880 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:52.232880 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.686672 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.686767 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.605420 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.605446 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.456955 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.456985 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.524058 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.524102 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:07.938457 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:07.938485 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:09.982100 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:09.982143 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:45.043594 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:45.043622 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:47.090626 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:47.090655 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:52.303097 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:52.303142 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.496969 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.496998 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:11.252846 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:11.252872 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.646490 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.646515 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.534447 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.534474 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.524539 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.524568 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:14.117812 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:14.117894 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:16.146556 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:16.146600 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.657401 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.657427 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.715848 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.715874 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 10:09:52.561789 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:52.561824 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:53.562302 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:53.562333 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.768317 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.768355 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:10.958148 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:10.958175 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:20.845402 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:20.845429 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:26.789604 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:26.789631 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:28.873687 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:28.873723 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:47.096671 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:47.096699 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:49.155843 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:49.155870 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.516544 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.516574 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.662335 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.662429 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:45.734344 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:45.734373 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:47.989017 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:47.989019 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:03.239632 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:03.239668 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:12.784032 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:12.784058 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.689471 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.689497 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:21.792963 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:21.792989 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:31.134076 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:31.134104 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:33.221655 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:33.221684 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:03.315375 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:03.315414 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:05.401000 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:05.401027 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 13:25:49.098347 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:49.098347 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:44.532199 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:44.532268 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.710618 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.710643 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:04.068125 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:04.068163 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:13.362658 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:13.362695 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:27.381873 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:27.381899 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:29.431805 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:29.431834 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:41.857149 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:41.857183 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:43.875693 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:43.875719 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.712520 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.712548 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.687443 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.687458 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:45.322917 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:45.322946 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.595328 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.595355 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.669467 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.669494 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.434265 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.434295 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:15.427493 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:15.427519 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.500950 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.500978 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:36.830827 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:36.830856 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:38.926747 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:38.926775 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:34.156691 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:34.156720 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:36.257416 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:36.257443 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:09.936788 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:09.936819 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:39.217327 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:39.217358 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:57.005678 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:57.005721 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:03.851279 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:03.851308 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:15.193432 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:15.193462 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:41.051455 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:41.051483 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.468958 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.468996 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 00:01:49.170012 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:49.170041 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:48.401105 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:48.401135 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.524068 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.524096 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.736943 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.736972 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:15.045608 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:15.045637 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:28.903657 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:28.903699 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:30.903301 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:30.903328 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:02.106382 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:02.106444 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:04.197190 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:04.197217 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:47.094604 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:47.094633 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:49.189423 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:49.189449 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:14.333168 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:14.333200 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:17.758432 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:17.758459 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.727805 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.727835 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:34.863890 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:34.863902 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:45.441340 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:45.441366 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.549505 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.549533 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:01.376143 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:01.376170 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:11.218022 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:11.218059 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:18.049401 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:18.049429 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:20.074397 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:20.074426 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:37.962123 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:37.962154 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:40.305743 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:40.305773 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:16.940017 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:16.940046 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:18.926423 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:18.926450 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:43.417462 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:43.417490 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.564351 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.564379 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:00.857721 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:00.857747 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.528232 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.528290 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:16.289657 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:16.289685 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:18.298279 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:18.298306 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:43.860252 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:43.860310 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:45.893880 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:45.893905 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:14.961431 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:14.961459 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:16.999602 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:16.999630 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:15.075078 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:15.075109 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:29.899049 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:29.899076 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:24.943758 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:24.943787 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 09:00:41.287827 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:41.287855 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:09.312780 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:09.312811 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:34.176683 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:34.176711 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.538621 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.538653 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:10.213589 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:10.213628 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:46.295073 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:46.295099 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.532040 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.532067 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.404422 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.404448 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.598214 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.598273 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:49.706498 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:49.706525 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.757047 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.757082 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.704148 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.704175 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:14.874631 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:14.874661 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:21.138427 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:21.138456 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.488613 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.488641 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:54.399110 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:54.399137 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:56.337408 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:56.337446 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:30.931256 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:30.931268 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:32.841977 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:32.842003 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.670566 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.670593 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.643627 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.643653 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:30.272330 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:30.272392 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:25.897396 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:25.897425 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:46.292932 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:46.292960 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:48.371129 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:48.371160 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:57.211277 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:57.211304 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.509253 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.509262 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:14.293914 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:14.293943 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:16.256639 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:16.256700 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:39.946330 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:39.946357 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:41.886897 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:41.886925 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:16.945884 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:16.945921 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:18.921973 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:18.922016 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:12.111386 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:12.111420 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.506901 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.506928 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.754497 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.754526 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:51.103314 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:51.103342 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:11.833811 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:11.833839 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.705897 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.705930 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:37.047799 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:37.047826 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:06.729918 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:06.729999 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:08.806660 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:08.806688 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:23.003674 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:23.003701 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:32.176100 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:32.176140 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:39.087077 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:39.087106 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:41.037240 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:41.037255 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:07.206069 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:07.206106 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:09.158039 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:09.158065 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:52.294608 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:52.294642 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:54.288938 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:54.288968 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:13.611047 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:13.611075 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:52.861120 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:52.861120 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.495021 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.495050 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:02.018087 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:02.018115 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:50.797644 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:50.797674 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:35.351976 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:35.352005 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:00.290628 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:00.290656 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:35.989483 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:35.989512 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.472411 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.472458 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.750913 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.750940 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.559579 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.559606 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:03.023163 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:03.023189 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.639646 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.639678 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.678448 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.678477 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:06.885783 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:06.885826 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:16.039008 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:16.039038 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:28.969400 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:28.969432 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:30.985129 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:30.985159 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:16.989857 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:16.989890 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:19.384687 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:19.384717 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.534347 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.534379 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.504931 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.504970 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:29:07.774158 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:07.774213 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:16.920635 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:16.920665 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.643960 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.643988 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.651896 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.651946 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:09.013524 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:09.013554 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:18.036830 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:18.036859 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:25.939803 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:25.939834 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:27.828009 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:27.828017 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.453623 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.453634 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:46.368271 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:46.368300 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:04.797624 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:04.797656 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.718857 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.718857 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:54.781962 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:54.782000 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:56.932448 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:56.932476 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:04.803183 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:04.803212 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:14.256459 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:14.256501 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:28.275725 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:28.275755 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:30.249459 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:30.249487 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.428404 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.428434 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.442866 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.442895 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.700641 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.700675 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.708086 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.708115 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:22.952648 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:22.952668 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:53.739409 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:53.739438 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:55.812597 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:55.812634 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.725124 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.725153 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:27.934311 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:27.934340 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.710885 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.710928 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.612918 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.612947 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:32.032616 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:32.032645 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:33.931201 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:33.931227 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.774779 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.774809 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.701835 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.701865 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:24:47.355992 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:47.356018 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.623097 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.623127 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:40.216479 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:40.216507 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:02.261681 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:02.261710 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:18:00.251793 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:18:00.251859 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:15.296627 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:15.296656 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.665173 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.665202 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:23.965985 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:23.966013 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:40.373371 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:40.373414 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:51.190605 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:51.190645 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:04.393797 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:04.393835 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:13.133143 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:13.133171 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.602092 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.602122 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:40.335954 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:40.335986 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:49.338903 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:49.338937 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:52.370693 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:52.370722 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.435500 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.435529 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.669650 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.669711 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.790381 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.790408 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:32.863728 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:32.863759 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:34.898476 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:34.898504 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.590012 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.590053 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.516848 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.516876 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:31.941912 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:31.941949 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:33.811476 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:33.811503 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:44.875019 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:44.875054 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:43.508070 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:43.508100 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.454578 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.454607 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.620699 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.620728 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:12.260171 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:12.260200 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:17.175822 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:17.175852 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:19.055465 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:19.055492 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:00.020751 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:00.020780 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:01.940448 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:01.940477 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:47.223652 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:47.223681 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:49.162023 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:49.162052 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.772748 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.772779 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:18.944582 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:18.944615 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.495886 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.495917 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:07.239722 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:07.239751 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:52.159752 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:52.159781 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:54.188398 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:54.188445 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.458449 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.458500 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.442539 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.442565 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:26.146709 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:26.146740 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:28.040550 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:28.040578 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:52.947321 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:52.947352 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:54.875858 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:54.875885 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.756560 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.756592 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.658147 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.658176 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:35.190778 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:35.190822 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.610569 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.610597 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.639452 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.639483 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.535808 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.535862 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 14:14:11.180479 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:11.180511 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:37.899201 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:37.899233 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:39.853917 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:39.853946 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:53.933692 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:53.933723 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.733062 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.733090 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.423925 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.423955 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:12.351365 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:12.351395 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:59.135798 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:59.135829 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:01.025412 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:01.025440 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:58.074672 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:58.074738 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:37:00.391164 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:37:00.391208 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:39.951294 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:39.951300 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:42.094409 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:42.094439 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.528394 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.528421 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.758092 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.758121 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.482980 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.483009 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:25.382727 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:25.382757 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.591419 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.591449 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.536937 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.536964 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:48.926729 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:48.926761 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:50.858043 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:50.858072 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.768024 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.768054 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.673010 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.673038 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:43.891680 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:43.891708 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:45.808787 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:45.808814 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:34.909223 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:34.909310 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.745630 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.745668 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:49.289443 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:49.289472 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:51.191656 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:51.191684 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:04.198792 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:04.198823 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:15.082935 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:15.082961 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.569416 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.569443 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.455104 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.455133 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.736864 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.736895 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.674531 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.674563 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:35.250040 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:35.250070 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:37.202970 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:37.202998 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:54.897734 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:54.897763 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:50.989703 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:50.989733 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:01.283196 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:01.283246 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.477813 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.477849 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:20.051208 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:20.051268 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.547697 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.547727 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.594417 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.594451 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.741414 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.741444 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:50.912940 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:50.912971 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:53.012449 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:53.012498 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.534434 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.534463 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:17.210064 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:17.210094 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:30.975686 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:30.975715 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:32.843521 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:32.843549 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.467943 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.467971 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:07.346791 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:07.346820 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:50.236759 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:50.236788 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:52.150498 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:52.150525 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:08:05.617892 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:05.617927 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:36.257478 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:36.257510 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:42.667763 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:42.667805 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.652209 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.652298 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:59.054115 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:59.054144 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:07.971274 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:07.971302 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.688022 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.688049 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.474408 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.474435 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.723300 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.723330 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.546396 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.546424 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.579324 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.579352 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.418185 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.418213 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:42.641783 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:42.641827 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.755331 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.755358 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.784998 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.785035 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:06.008458 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:06.008505 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.739103 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.739129 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.629827 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.629872 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.529343 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.529374 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.415723 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.415753 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:57.140483 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:57.140512 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:59.034525 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:59.034554 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:05.110799 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:05.110843 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:18.202671 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:18.202699 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:37.966437 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:37.966465 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.417152 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.417182 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:50.687607 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:50.687677 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.721495 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.721525 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.714978 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.715007 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:18.229939 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:18.229968 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:31.991174 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:31.991204 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:33.857452 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:33.857486 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:43.315115 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:43.315159 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:45.142175 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:45.142203 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.557642 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.557670 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.389038 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.389067 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:52.065421 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:52.065463 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:54.069631 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:54.069661 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.419636 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.419663 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.463329 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.463358 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:29.232383 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:29.232413 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:31.100197 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:31.100227 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:44.047628 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:44.047657 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:42.352014 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:42.352046 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:44.187862 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:44.187891 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:27.283508 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:27.283535 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:29.132470 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:29.132496 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:01.316548 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:01.316586 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:05.099437 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:05.099466 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:46.360621 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:46.360657 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:48.380057 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:48.380086 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:04.199046 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:04.199073 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:12.802369 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:12.802398 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.533439 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.533467 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:20.376215 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:20.376294 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.695191 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.695223 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.529667 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.529713 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.536482 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.536524 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:05.352466 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:05.352494 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:41.621067 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:41.621097 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.624598 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.624626 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:58.220614 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:58.220643 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:09.043984 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:09.044026 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.792570 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.792598 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.588338 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.588370 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:29.018089 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:29.018118 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.769090 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.769120 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.530599 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.530638 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:51.381139 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:51.381166 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:42.753689 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:42.753724 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.714444 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.714472 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.779372 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.779400 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.473592 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.473621 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:14.118444 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:14.118472 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:15.895521 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:15.895560 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:10.393815 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:10.393844 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:12.218932 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:12.218969 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:56.096443 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:56.096474 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:57.888367 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:57.888396 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:39.274598 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:39.274639 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.554800 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.554842 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:27.159853 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:27.159882 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.499428 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.499458 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:32.842030 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:32.842057 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.523397 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.523437 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.549785 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.549814 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.641606 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.641650 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.464117 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.464157 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:19.819710 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:19.819740 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:42.108553 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:42.108630 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:44.073509 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:44.073537 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.696174 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.696202 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:09.931553 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:09.931581 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.702368 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.702395 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.550615 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.550654 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.444547 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.444579 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:30.285468 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:30.285497 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:28.376854 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:28.376887 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:30.167783 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:30.167811 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:56.880399 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:56.880429 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:58.840265 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:58.840265 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:50.200586 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:50.200615 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:04.324513 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:04.324545 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:18.097455 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:18.097483 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:19.924625 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:19.924655 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.760671 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.760712 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.564693 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.564724 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:57.367523 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:57.367553 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:45.014820 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:45.014858 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:46.846029 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:46.846057 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.502291 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.502323 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:08.326852 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:08.326915 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:11.064521 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:11.064550 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.381173 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.381203 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:03.326066 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:03.326093 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:10.085675 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:10.085703 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:11.859779 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:11.859809 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:54.188279 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:54.188309 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:56.274091 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:56.274120 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:29.060523 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:29.060552 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.813341 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.813371 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:53.868529 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:53.868607 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.471345 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.471371 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:12.877449 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:12.877479 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:26.272866 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:26.272895 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:32.211974 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:32.212002 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:33.993717 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:33.993745 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.410908 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.410942 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.609899 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.609929 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.388320 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.388348 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.616726 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.616755 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.376533 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.376563 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:52.146627 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:52.146672 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.442618 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.442659 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.490069 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.490099 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:15.000847 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:15.000909 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.368348 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.368377 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:23.117344 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:23.117370 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:43.116847 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:43.116848 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:38.922191 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:38.922219 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:32.222106 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:32.222135 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:33.936208 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:33.936264 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:49.964923 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:49.964954 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.716282 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.716308 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:56.161156 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:56.161210 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.643831 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.643870 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:16.322045 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:16.322075 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.774020 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.774047 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.599701 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.599730 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:54.331423 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:54.331449 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:08.258602 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:08.258631 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:29.860782 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:29.860825 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.600188 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.600228 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:14.349919 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:14.349946 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:28.845448 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:28.845475 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.615087 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.615116 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:42.940212 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:42.940280 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.781695 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.781721 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.497372 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.497398 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:51.049579 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:51.049605 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.487385 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.487412 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:41.238380 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:41.238466 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:43.108828 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:43.108856 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.394944 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.394972 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.807357 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.807384 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:51.429001 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.429029 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:53.182610 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:53.182653 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.365956 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.365962 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.579354 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.579368 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.591135 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.591162 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.435888 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.435915 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:46.230840 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:46.230882 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.683106 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.683145 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.377272 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.377291 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.657319 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.657350 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.410096 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.410123 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.365428 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.365457 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:05.082217 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:05.082276 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:15.179087 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:15.179116 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:21.264745 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:21.264793 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.731699 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.731729 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:58.115485 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:58.115527 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:48.614774 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:48.614817 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:51.249929 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:51.249965 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.666364 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.666393 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.584565 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.584592 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.741070 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.741097 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.488694 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.488722 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:50.344118 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:50.344151 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:48.971896 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:48.971938 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.702152 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.702186 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.805420 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.805453 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.555733 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.555774 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:26:01.104605 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:26:01.104647 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:07.104668 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:07.104698 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.531676 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: funnyemuart.com.au:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.531706 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: funnyemuart.com.au:443:0 server certificate does NOT include an ID which matches the server name